{
  "resultsPerPage" : 7145,
  "startIndex" : 0,
  "totalResults" : 7145,
  "format" : "NVD_CVE",
  "version" : "2.0",
  "timestamp" : "2026-05-07T03:02:29.5541005",
  "vulnerabilities" : [ {
    "cve" : {
      "id" : "CVE-2006-0018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2005-11-29T21:03:00.000",
      "lastModified" : "2023-11-07T01:58:16.770",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3899.  Reason: This candidate is a duplicate of CVE-2005-3899.  Notes: All CVE users should reference CVE-2005-3899 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-03T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via a URL in the glob[rootDir] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB5303F-9FF4-4E16-A815-675E36607E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/0016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-03T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in (1) functions.php, (2) functions_update.php, and (3) functions_display.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vego:vego_web_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.26",
            "matchCriteriaId" : "DFBF9DE1-D701-46D5-99AA-9E22ED796CF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/1/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18273",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420661/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/1/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420661/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-03T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpjournaler:phpjournaler:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD8B9F-EFB8-4D30-84C1-317750D01BB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/9/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18265",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420666/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/9/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420666/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-03T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in VEGO Links Builder 2.00 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vego:vego_links_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00",
            "matchCriteriaId" : "EB7558BB-3DE5-4031-AEF6-C1F0438DA0AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/2/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18272",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/2/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-03T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) q parameter to search.php and (2) email parameter to user.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:primo_place:primo_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "B0A16512-BA98-4724-AAFD-9E56AC5684D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/01/primo-cart-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18264",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/01/primo-cart-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-03T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the homepage parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "FE4DDEB6-44D6-4E8C-9B13-F0CF590FBB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/4/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420667/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/4/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420667/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert() function.  NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when \"Filtered HTML\" is enabled, and since \"Full HTML\" would not filter HTML by design, perhaps this should not be included in CVE"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79713A65-5A3A-4682-8A49-614174AB7C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/420671/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420683/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420671/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420683/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:N",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:app-crypt_pinentry:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DE8345C-7E9A-4AF3-9250-FADFADCCDCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:app-crypt_pinentry:0.7.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC0D1D0-9805-455A-AFD4-C431CC9573B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-01.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument.  NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C19F7B3-9043-4E53-90DE-92A4387858A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C1B49F-9EEF-4857-B444-840F91E2B40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0169CBF5-9301-42D2-A6DA-73393BD986D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6236FA51-E996-4E84-A8CC-2635A814CCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035FBF8B-EB91-4211-9979-8A9E913A54A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E140F76-D078-4F58-89CF-3278CDCB9AF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC635C0-2B09-41F5-8160-365EC8642F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D76A8D-832B-411E-A458-186733C66010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420677",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16122",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, which is not properly sanitized from the resulting error message.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discusware:discus_freeware:3.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65852EC-1B71-4C5E-B86A-A8141A4105CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discusware:discus_professional:3.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B20FB6A-D3EE-4FCD-AB21-9FC50EC39D48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via the personalID parameter.  NOTE: it was later reported that 1.1 and earlier are affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jevontech:phpenpals:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "20159690-6CFE-4577-B115-5A4D792E172B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/5/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420690/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/5/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420690/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/8706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field (mail variable) in a new message, which is written to a PHP file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:phpbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "E2346592-104A-4D06-A597-DC4111211A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:phpbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8D836C-AE90-465C-8925-86BC8FFB5E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:phpbook:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533956D3-FA62-4704-AB89-F4D417FE4E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:phpbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F935C2E3-7045-4D96-835F-183EB9776FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:phpbook:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82BECEA-C0C8-4E5C-88B8-FF11902E39AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/6/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18268",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420698/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16106",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/6/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420698/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oaboard:oaboard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD5C934-3DA0-4ED2-A475-A6EBE9B30BD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/3/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420676/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435371/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435859/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/3/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420676/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435371/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435859/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer overflow via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:richard_dawe:file_extattr:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8D5637-8FA2-484D-9269-163826C1BFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:richard_dawe:file_extattr:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D26F99-56D6-4521-AA3D-6F1CE51A5A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18253",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=382199&group_id=153116",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16118",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=382199&group_id=153116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T06:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) shout variables to (a) shout.php, or the (3) title and (4) message variables to (b) guestbook.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haddad_said:b-net_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B60B25CB-7D56-4F18-B774-BDAC453770AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/10/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18271",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=442067&group_id=117067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420673/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444320/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/10/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=442067&group_id=117067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420673/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444320/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T06:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to execute arbitrary SQL commands via the username field (adminname variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scoznet:scozbook:1.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F36523F-6E2F-42D7-B1B9-897E69654CAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/11/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/8476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420675/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/11/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/8476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420675/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T06:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by (1) calendar.php and (2) reminder.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4070579C-00AD-4DB1-8B07-4CB88D4EDBEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-177.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421310/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-177.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421310/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-04T06:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308 allows attackers to cause a denial of service (crash or screen resolution change) via a long text field, as demonstrated using a long window title."
      }, {
        "lang" : "es",
        "value" : "ialmnt5.sys en el controlador de pantalla ialmrnt5 en Intel Graphics Accelerator Driver 6.14.10.4308 permite a atacantes provocar una denegación de servicio (caída o cambio en la resolución de pantalla) a través de un espacio largo de texto, según lo demostrado usando un título de ventana largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:graphics_accelerator_driver:6.14.10.4308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CF6F46-85A9-4213-97E6-8BAB21064646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2006/Jan/32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2006/Jan/8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16127",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2006/Jan/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2006/Jan/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0082",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-01-04T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB80DF3F-DE3F-4CB3-B021-26B8D9F3B550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345876",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0178.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18261",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18607",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18851",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18871",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19030",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19408",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22998",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23090",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28800",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/500",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015623",
        "source" : "security@debian.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.341682",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1213",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-06.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-13.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:024",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452718/100/100/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/12717",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-246-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0412",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-389",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10717",
        "source" : "security@debian.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0178.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.341682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452718/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/12717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-246-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the $_SERVER[HTTP_USER_AGENT] variable (User-Agent header)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de raSMP 2.0.0 y anteriores permite a atacantes remotos inyectar 'script' web arbitrario o HTML mediante la variable $_SERVER[HTTP_USER_AGENT] (cabecera User-Agent)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rasmp:rasmp:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5162E061-9375-40ED-80C1-60E89CF817EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000486.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/13/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000486.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/13/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Nkads 1.0 alfa 3 allows remote attackers to execute arbitrary SQL commands via the (1) usuario_nkads_admin or (2) password_nkads_admin parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en Nkads 1.0 alfa 3 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante los parámetros (1) usuario_nkads_admin o (2) password_nkads_admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nkads:nkads:1.0alfa2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99825F66-B8EE-4D6A-BD3A-70CE843E036A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nkads:nkads:1.0alfa3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45DD2689-E31D-48D7-ADEC-379D1DFFA49B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18302",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/nkads_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.soulblack.com.ar/repo/papers/advisory/nkads_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in index.php in Next Generation Image Gallery 0.0.1 Lite Edition allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Next Generation Image Gallery 0.0.1 Lite Edition permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante el parámetro \"page\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:next_generation_image_gallery:next_generation_image_gallery:0.0.1_lite:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49144DD-F5F1-4627-B7DB-6D23E442554F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22202-nextgen.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22202-nextgen.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in (1) pages.php and (2) detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en (1) pages.php y (2) detail.php en Lizard Cart CMS 1.04 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"id\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lizard_cart:lizard_cart_cms:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D37298-081B-4F3E-A9FA-B88518759781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/12/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420772/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16140",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/12/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420772/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL commands via the user parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en intouch.lib.php de inTouch 0.5.1 Alpha permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"user\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intouch:intouch:0.5.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458E1F0-AD58-4DE0-8175-6811127508BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/8/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420672/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16110",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/8/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420672/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ESRI ArcPad 7.0.0.156 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .amp file with a COORDSYS tag with a long string attribute."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en ESRI ArcPad 7.0.0.156 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código de su elección mediante un fichero .amp con una etiqueta COORDSYS con un atributo de cadena largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcpad:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.0.156",
            "matchCriteriaId" : "C3771545-6DC2-4937-989C-8B996C667E1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://users.pandora.be/bratax/advisories/b007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://users.pandora.be/bratax/advisories/b007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. (dot dot) in the dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en index.php en IDV Directory Viewer anteriores a 2005.1 permite a atacantes remotos ver el contenido de directorios de su elección mediante un .. (punto punto) en el parámetro \"dir\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idv_directory_viewer:idv_directory_viewer:2005.1_b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2DC3F96-1BB3-4914-9C24-B549CC305A54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18298",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=382593&group_id=152499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=382593&group_id=152499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with \"Inline HTML\" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en webmail de Open-Xchange 0.8.1-6 y anteriores, con \"Inline HTML\" habilitado, permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante adjuntos de correo electrónico, que son dibujados en línea."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.1.6",
            "matchCriteriaId" : "49EADD2C-8156-403D-8DF5-08A65249F3B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113629092325679&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18285",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113629092325679&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2023-11-07T01:58:18.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0992, CVE-2006-0158.  Reason: this candidate was intended for one issue, but a typo caused it to be associated with a Novell/Groupwise issue.  In addition, this issue was a duplicate of a SiteSuite issue that was also assigned CVE-2006-0158.  Notes: All CVE users should consult CVE-2006-0992 and CVE-2006-0158 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecardmax.com:atcard_me_php:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A59B6D-EBB7-4509-AFD5-2214508BAC95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22203-ecardmax.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18306",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22203-ecardmax.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc_stat parameter, a different vulnerability than CVE-2006-0076. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oaboard:oaboard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD5C934-3DA0-4ED2-A475-A6EBE9B30BD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17373",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0028",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/17373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-05T19:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, when \"Allowed HTML tags\" is enabled, allows remote attackers to inject arbitrary web script or HTML via a permitted HTML tag with ' (single quote) characters and active attributes such as onmouseover, a variant of CVE-2005-4357."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en phpBB 2.0.19, cuando está habilitado \"etiquetas HTML permitidas\", permite a atacantes remotos inyectar 'scritp' web o HTML de su elección mediante una etiqueta HTML permitida con caracteres ' (comilla simple) y atributos activos como \"onmouseover\", una variante de CVE-2005-4357."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/achievement_securityalert/30",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T05:00:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en WCONSOLE.DLL en Rockliffe MailSite 5.x y 6.1.22 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la cadena de consulta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.22",
            "matchCriteriaId" : "F3F9D92C-D9F4-428B-B43B-491FD8EBA461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3.1",
            "matchCriteriaId" : "1F727A82-6E93-4F6F-A771-704C9F5FFB77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113777628702043&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18551",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113777628702043&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key."
      }, {
        "lang" : "es",
        "value" : "dm-crypt en el kernel de Linux 2.6.15 y versiones anteriores no borra una estructura antes de ser liberada, lo que lleva a una divulgación de memoria que puede permitir a usuarios locales obtener información sensible de una clave criptográfica."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=113640535312572&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113641114812886&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0132.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113640535312572&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113641114812886&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0132.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors.  NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linux.bkbits.net:8080/linux-2.4/cset%401.1448.91.23?nav=index.html%7Csrc/%7Csrc/drivers%7Csrc/drivers/net%7Csrc/drivers/net/wan%7Crelated/drivers/net/wan/sdla.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git%3Ba=commitdiff%3Bh=0f1d4813a4a65296e1131f320a60741732bc068f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.4/cset%401.1448.91.23?nav=index.html%7Csrc/%7Csrc/drivers%7Csrc/drivers/net%7Csrc/drivers/net/wan%7Crelated/drivers/net/wan/sdla.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git%3Ba=commitdiff%3Bh=0f1d4813a4a65296e1131f320a60741732bc068f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/244-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attackers to execute arbitrary code via a long (1) arg_host or (2) arg_unix_socket argument, as demonstrated by a long named pipe variable in the host argument to the mysql_connect function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0274.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18275",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-4.php#4.4.3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420986/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16145",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0046",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0274.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-4.php#4.4.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420986/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n",
        "lastModified" : "2008-10-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAE2873-0028-4744-B64E-8E2EA30447F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/008_fd.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18296",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/errata37.html#fd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16144",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/008_fd.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata37.html#fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:valdersoft:valdersoft_shopping_cart:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD787A10-79CE-4298-BD3B-2CA8A4AA5683"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/cijfer-vscxpl.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16126",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/cijfer-vscxpl.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in NicoFTP 3.0.1.19 and earlier might allow local users to execute arbitrary code via a long string in the \"Name of site\" field of an FTP account.  NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to create or modify FTP accounts in this program, there may not be a typical attack vector for the issue that crosses privilege boundaries.  Therefore this may not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicosw:nicoftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1.19",
            "matchCriteriaId" : "5AF360CF-FD3C-415F-8821-37A8C8CBD22D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420670/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420670/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p and (2) keyword parameters in (a) index.php and (b) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sblog:sblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.1_build2005-12-02_beta",
            "matchCriteriaId" : "11F29400-EBA4-4C07-A757-BBDCCE63483A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22373-sblog.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0041",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22373-sblog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an \"[a]\" bbcode tag, possibly the txt parameter to action.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96739CF-4C1E-4F6D-81E6-CFC5A5F04D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA0A46C-B2D0-4A80-A895-10EC307E8874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E1A535-A183-4242-83C5-F1F68A356547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D531DF-11C9-4971-B244-C65E23015963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D6067-65F9-4DE0-A864-50009F1EA949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688209E1-763E-424A-8A38-75DAD2AAF40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.499:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3E0007-6665-4B6C-913D-7DB6B560ECBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/14/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18293",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420933/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/14/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420933/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96739CF-4C1E-4F6D-81E6-CFC5A5F04D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA0A46C-B2D0-4A80-A895-10EC307E8874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E1A535-A183-4242-83C5-F1F68A356547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D531DF-11C9-4971-B244-C65E23015963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D6067-65F9-4DE0-A864-50009F1EA949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688209E1-763E-424A-8A38-75DAD2AAF40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.499:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3E0007-6665-4B6C-913D-7DB6B560ECBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/14/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18293",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420933/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0054",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/14/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420933/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96739CF-4C1E-4F6D-81E6-CFC5A5F04D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA0A46C-B2D0-4A80-A895-10EC307E8874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E1A535-A183-4242-83C5-F1F68A356547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D531DF-11C9-4971-B244-C65E23015963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A92D6067-65F9-4DE0-A864-50009F1EA949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688209E1-763E-424A-8A38-75DAD2AAF40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.499:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3E0007-6665-4B6C-913D-7DB6B560ECBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/14/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/14/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18293",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420933/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/14/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/14/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420933/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-06T18:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile (WMF) files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wine:wine:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A4C7F9-1A62-4CC4-8440-6A56C877FF14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wine:wine:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32ADFB2-57B0-4633-83C8-2A56056C57A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wine:wine:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6ACD85-EC75-404C-9BEF-42939C4D47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wine:wine:2005-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F418DC71-590D-40D0-A2B7-386B450C5075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=346197",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-January/002806.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422128/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=346197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-January/002806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422128/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-07T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Timecan CMS allows remote attackers to execute arbitrary SQL commands via the viewID parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  Due to the unavailability of the original source, it cannot be determined if this is the same issue as identified by CVE-2006-0108."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idea_development_id_oy:timecan_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0EACE28-AEF8-4D1F-9A62-0F88B82EA183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22252",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-07T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mcl_login.asp in Timecan CMS allows remote attackers to execute arbitrary SQL commands via the email parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  Due to the unavailability of the original source, it cannot be determined if this is the same issue as identified by CVE-2006-0107."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idea_development_id_oy:timecan_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0EACE28-AEF8-4D1F-9A62-0F88B82EA183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22252",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22253",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-07T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modular_merchant:shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E6ACB-FE21-4D52-B22C-A6000D95F5D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000548.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22243-modular.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18320",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.modularmerchant.com/forums/viewtopic.php?t=46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/ref/22/22243-modular.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.modularmerchant.com/forums/viewtopic.php?t=46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-07T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:javier_suarez_sanz:foro_domus:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D792D5-C4A6-4DD1-B771-2C59FFB3AE1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/16/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18327",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22263",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421056/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/16/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421056/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-07T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) parent or (2) pg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boxcar_media:shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0879188-265F-44C5-9652-E1494B2845C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22360-boxcar.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22360-boxcar.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-07T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhanced_simple_php_gallery:enhanced_simple_php_gallery:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCADBD6-25F5-4A30-9D64-A5CF0B853352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22201-espg.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18310",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22201-espg.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-07T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sp_helper_functions.php, which leaks the pathname in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhanced_simple_php_gallery:enhanced_simple_php_gallery:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCADBD6-25F5-4A30-9D64-A5CF0B853352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22201-espg.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18310",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22201-espg.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contact_id parameter to index2.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forge.joomla.org/sf/go/artf2950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C29031.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18361",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.listerit.com/content/view/116/84/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0097",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forge.joomla.org/sf/go/artf2950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C29031.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.listerit.com/content/view/116/84/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL commands via the (1) Press_Release_ID parameter in press/details.asp, (2) Service_ID parameter in services/details.asp, and (3) Product_ID parameter in products/details.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneplug_solutions:oneplug_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F174DC2F-7AE2-4EA8-ADE6-2F86C4AE5E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22248-oneplug.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22249",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22250",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0079",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://osvdb.org/ref/22/22248-oneplug.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability search.inetstore in iNETstore Ebusiness Software 2.0 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inetstore:inetstore_online:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C6CF5B-CE27-44EC-BA44-9F6AB968CF7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22251-inetstore.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18322",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-January/000515.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22251",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423137/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22251-inetstore.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-January/000515.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423137/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving \"CD to MIME Conversion\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "99E2CC18-4049-470A-B6DB-580C65FED0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "2396543F-1507-493C-B57F-3082D6E68894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40882B15-23A7-456C-B4DB-B1C7246BBC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3195CA-CB62-4AEF-AC8C-C985A372FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack overflow and crash) via long formulas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "99E2CC18-4049-470A-B6DB-580C65FED0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "2396543F-1507-493C-B57F-3082D6E68894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40882B15-23A7-456C-B4DB-B1C7246BBC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3195CA-CB62-4AEF-AC8C-C985A372FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to \"potential security issues\" as identified by SPR numbers (1) GPKS6C9J67 in Agents, (2) JGAN6B6TZ3 and (3) KSPR699NBP in the Router, (4) GPKS5YQGPT in Security, or (5) HSAO6BNL6Y in the Web Server. NOTE: vector 3 is related to an issue in NROUTER in IBM Lotus Notes and Domino Server before 6.5.4 FP1, 6.5.5, and 7.0, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted vCal meeting request sent via SMTP (aka SPR# KSPR699NBP)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "99E2CC18-4049-470A-B6DB-580C65FED0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "2396543F-1507-493C-B57F-3082D6E68894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40882B15-23A7-456C-B4DB-B1C7246BBC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3195CA-CB62-4AEF-AC8C-C985A372FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20855",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/94a77eb898843aca8525709200001de1?OpenDocument&Highlight=0%2CJGAN6B6TZ3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/9a1650d1a771f3078525702a00420def?OpenDocument&Highlight=0%2CHSAO6BNL6Y",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/d1150fc9c5dec8b18525709200001da6?OpenDocument&Highlight=0%2CGPKS6C9J67",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/de2ab57a5b9547848525701b00420c2c?OpenDocument&Highlight=0%2CKSPR699NBP",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/e4deb1cbb011c747852570e4001ba9bb?OpenDocument&Highlight=0%2CGPKS5YQGPT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/f97fe7cfd9a8113b8525709200001db4?OpenDocument&Highlight=0%2CGPKS6C9J67",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438461/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/94a77eb898843aca8525709200001de1?OpenDocument&Highlight=0%2CJGAN6B6TZ3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/9a1650d1a771f3078525702a00420def?OpenDocument&Highlight=0%2CHSAO6BNL6Y",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/d1150fc9c5dec8b18525709200001da6?OpenDocument&Highlight=0%2CGPKS6C9J67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/de2ab57a5b9547848525701b00420c2c?OpenDocument&Highlight=0%2CKSPR699NBP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/e4deb1cbb011c747852570e4001ba9bb?OpenDocument&Highlight=0%2CGPKS5YQGPT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/f97fe7cfd9a8113b8525709200001db4?OpenDocument&Highlight=0%2CGPKS6C9J67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438461/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an \"Out Of Office\" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the \"Delete Attachment\" action (YPHG6844LD), (5) parsing certificates from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Administration client (NSUA4FQPTN)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "99E2CC18-4049-470A-B6DB-580C65FED0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "2396543F-1507-493C-B57F-3082D6E68894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40882B15-23A7-456C-B4DB-B1C7246BBC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3195CA-CB62-4AEF-AC8C-C985A372FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/258394eaa824f2c08525708a004209d3?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/040482aeb1416bb7852570e4001badd6?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/2bb4f466a9e986ae852570e4001babbb?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/4118a1f266afb26c852570e4001baf5e?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/5f166a44ee743b2c852570e4001baf31?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/ad0dd14aa109f96b852570e4001bb08c?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/ced5f873baea4e8b852570e4001baa6d?OpenDocument",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/258394eaa824f2c08525708a004209d3?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/040482aeb1416bb7852570e4001badd6?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/2bb4f466a9e986ae852570e4001babbb?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/4118a1f266afb26c852570e4001baf5e?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/5f166a44ee743b2c852570e4001baf31?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/ad0dd14aa109f96b852570e4001bb08c?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/ced5f873baea4e8b852570e4001baa6d?OpenDocument",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to (1) unspecified vectors during the SSL handshake (SPR# MKIN67MQVW), (2) the stash file during the SSL handshake (SPR# MKIN693QUT), and possibly other vectors. NOTE: due to insufficient information in the original vendor advisory, it is not clear whether there is an attacker role in other memory leaks that are specified in the advisory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "99E2CC18-4049-470A-B6DB-580C65FED0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*",
            "matchCriteriaId" : "2396543F-1507-493C-B57F-3082D6E68894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40882B15-23A7-456C-B4DB-B1C7246BBC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3195CA-CB62-4AEF-AC8C-C985A372FD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/20f66e356a76c90f8525702a00420e08?OpenDocument&Highlight=0%2CMKIN67MQVW",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/2221243535d88a2b8525701b00420cd6?OpenDocument&Highlight=0%2CMKIN693QUT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/20f66e356a76c90f8525702a00420e08?OpenDocument&Highlight=0%2CMKIN67MQVW",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/2221243535d88a2b8525701b00420cd6?OpenDocument&Highlight=0%2CMKIN693QUT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Public/Index.asp in Aquifer CMS allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aquifer_cms:aquifer_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB376587-855F-4BF2-A9CB-9B46C0AF34F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000509.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22247-aquifer.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18326",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22247",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000509.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/ref/22/22247-aquifer.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Vendor provided solution:\r\n\r\n\"Liquid Development has identified this vulnerability in all shipping versions of AquiferCMS and coded a software fix. The fix will be included in all releases of AquiferCMS built on or after January 24, 2006. Customers should contact Liquid Development to obtain the fix for this vulnerability.  For more information visit www.aquifercms.com.\" \r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94E497D-964B-49DA-A571-EC4AC7A5F57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adn_forum:adn_forum:1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3940E6F8-BA82-478E-A7AF-7F21E86166F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/15/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015445",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22240",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16157",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://evuln.com/vulns/15/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the \"Topic name\" field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94E497D-964B-49DA-A571-EC4AC7A5F57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adn_forum:adn_forum:1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3940E6F8-BA82-478E-A7AF-7F21E86166F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/15/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16157",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/15/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  There is not enough detail from these third party sources to know whether this is directory traversal, remote file include, or another issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appserv_open_project:appserv:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE92F7BE-72CC-4F7D-8B96-52C088F5C54B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18163",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rxvt-unicode:rxvt-unicode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "0312B278-4744-45C7-8C3E-143E9A3BE437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dist.schmorp.de/rxvt-unicode/Changes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dist.schmorp.de/rxvt-unicode/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other users via a .. (dot dot) in the RENAME command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.22.0",
            "matchCriteriaId" : "00762E7B-1A82-45F5-825D-31334A3AA94C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041039.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18318",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22229",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote attackers to have an unknown impact via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.22.0",
            "matchCriteriaId" : "00762E7B-1A82-45F5-825D-31334A3AA94C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames via user requests to TCP port 106."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3.1",
            "matchCriteriaId" : "1F727A82-6E93-4F6F-A771-704C9F5FFB77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18318",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.3.1",
            "matchCriteriaId" : "1F727A82-6E93-4F6F-A771-704C9F5FFB77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boastmachine:boastmachine:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6D1CD0-2D1C-4A29-BEA4-8DCADF5D490F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv26-K-159-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv26-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in webftp.php in SysCP WebFTP 1.2.6 and possibly earlier allows remote attackers to include and execute arbitrary local PHP scripts, and possibly read other types of files, via a .. (dot dot) and a trailing null in the webftp_language parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webftp:webftp:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304215A3-885C-4486-A022-6FF0F3F94579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18355",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420973/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420973/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. (dot dot) in the argument to (1) getCommand.new (aka getCommand) and (2) getShell, a different vulnerability than CVE-2005-4273."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_ml03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEF9658-0479-43E5-99A2-620ED3E018E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015429",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420589/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420589/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in register.php in TheWebForum (twf) 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the www parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thewebforum:thewebforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "65124314-F0A6-4677-BF9C-502E6705702C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/17/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/17/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015450",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16161",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/17/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/17/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter (aka the u variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thewebforum:thewebforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "65124314-F0A6-4677-BF9C-502E6705702C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/17/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/17/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015450",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16161",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/17/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/17/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) comment_poster, (2) comment_poster_email, (3) comment_poster_homepage, and (4) comment_text parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phanatic_softwares:chimera_web_portal:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E61E31B-1779-4771-A24A-D23892998723"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/7/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/7/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420669/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16113",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/7/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/7/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420669/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phanatic_softwares:chimera_web_portal:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E61E31B-1779-4771-A24A-D23892998723"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/7/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/7/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420669/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16113",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/7/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/7/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/420669/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of client's instant-messaging session) by repeatedly sending crafted data to the default file-transfer port (TCP 6891)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amsn:amsn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AB3FB6-138C-4348-B4C0-FF3D78422C3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5JP090KHFQ.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5JP090KHFQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T18:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pd9_software:megabbs:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C4B04B-7762-4684-9251-71E8B6AB1EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pd9_software:megabbs:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76865EDA-44F1-467E-9AA2-39017EB73868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18342",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hamid.ir/security/megabbs.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16168",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hamid.ir/security/megabbs.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:navboard:navboard:16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88A4670-CAED-4D0A-AFCC-3D734B685520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:navboard:navboard:17:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "560D864C-68D3-4166-A4B9-9880536AE7A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/19/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18345",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421149/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/19/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421149/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qualcomm Eudora Internet Mail Server (EIMS) before 3.2.8 allows remote attackers to cause a denial of service (crash) via (1) malformed NTLM authentication requests, or a malformed (2) Incoming Mail X or (3) Temporary Mail file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eudora:internet_mail_server:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF64EF5D-9F7F-45B5-970D-27023E846540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eudora:internet_mail_server:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB37DD81-4B49-4FFB-A4ED-E93AA4BFF916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eudora:internet_mail_server:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F199BD83-CF0F-437D-8CC7-01ABE7FBA392"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18356",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.eudora.co.nz/updates.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.eudora.co.nz/updates.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andromeda_software:andromeda:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3.4",
            "matchCriteriaId" : "81FD069A-A5DD-471E-BEF5-9F9C72564C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18359",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the logging code of SMS Server Tools (smstools) 1.14.8 and earlier allows local users to execute arbitrary code via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_frings:sms_server_tools:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916B0C70-9902-433D-B721-F0FBD5059EC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2005/dsa-930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/01/09/417198.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015453",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421257/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421258/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/01/09/417198.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421257/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421258/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache2triad:apache2triad:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44D19A3-341A-4241-9D12-63BF1C69276B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:pear:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D97436-9B7F-4721-9741-46440671EF13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://apache2triad.net/forums/viewtopic.php?p=14670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18390",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421469/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0148",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://apache2triad.net/forums/viewtopic.php?p=14670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421469/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and gain privileges via the lseek system call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-001.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18388",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16173",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitylab.net/research/2006/02/advisory_netbsd_openbsd_kernfs.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-001.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitylab.net/research/2006/02/advisory_netbsd_openbsd_kernfs.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F76566C-7F49-4725-91E6-8E2416CB7F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F0F5B5-86D2-48C4-872E-3F8C38AF563C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92E018-C25C-468D-9EF5-5665F0B42EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediabeez:mediabeez:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE171CCD-6AEE-4FCB-9F45-C7CFDE84D6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BD9A00-DA61-4389-8731-B92585C2BE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.761:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55DA346-A7A0-466F-90D7-CC1E7C2E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB14AEA6-00FC-4C8B-BA57-6CA7A5519493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18233",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18254",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18267",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18276",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18720",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19555",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19563",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19691",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24954",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-64/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1030",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.maxdev.com/Article550.phtml",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22290",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423784/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430448/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466171/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16187",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0103",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0104",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0370",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0447",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1304",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1305",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xaraya.com/index.php/news/569",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-64/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.maxdev.com/Article550.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423784/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430448/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466171/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xaraya.com/index.php/news/569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F76566C-7F49-4725-91E6-8E2416CB7F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F0F5B5-86D2-48C4-872E-3F8C38AF563C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92E018-C25C-468D-9EF5-5665F0B42EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BD9A00-DA61-4389-8731-B92585C2BE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.761:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55DA346-A7A0-466F-90D7-CC1E7C2E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_cacti_group:cacti:0.8.6g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB14AEA6-00FC-4C8B-BA57-6CA7A5519493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18233",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18254",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18260",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18267",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18276",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19555",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-64/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1030",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430448/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2005-64/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430448/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netsarang:xlpd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C6298B-5919-4901-9452-BB498D19B9F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipomonis.com/advisories/xlpd.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ipomonis.com/advisories/xlpd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpbook:simpbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F7BA32-C5AF-4CB9-B0E0-4A08567D5965"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041127.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015451",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041127.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678DC013-C189-4450-83D7-7CA83978D867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67834D84-DA08-4598-AA6F-7C2AD095AEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDE2D83-0427-406F-95C7-DF4E04191A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38EB5CF-BB53-4639-8B78-48A9115D7B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EB949A-CB30-4B43-A767-8BF3B19748D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4B7D2F-8078-4602-9858-D17EADD0BCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1FD235-E1F6-4487-B653-7C2B8227A225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3A182-E506-4259-AD0F-9F158D8CAEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFBA6A46-7FC9-46C7-8213-121D2DE72D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F8E9FB-C4DF-4570-B7EE-3A85836F00C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB747406-CFC4-44AF-9862-6EDCD2D463D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4C635C-9D6D-41A2-956F-7C1D293CF048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dave_carrigan:auth_ldap:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662A811A-7352-42A3-8448-9B430DC28E83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18382",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18412",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18568",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-952",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006090173928420.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0179.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rudedog.org/auth_ldap/Changes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16177",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:017",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006090173928420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0179.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rudedog.org/auth_ldap/Changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-09T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6060C8CB-1592-479E-86AD-AC180F855BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DAA88C-BADD-405A-9E66-5B0839595A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D5E3B7-5377-4CA8-BA0D-056870CB717E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C11931-B594-43EC-9698-7152B1DF8CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976B5923-1BCC-4DE6-A904-930DD833B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5452DF1-0270-452D-90EB-45E9A084B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD12E6-F92E-4371-ADA7-BCD41E4C9014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FDF4FB-06FA-4A10-A3CF-F52169BC8072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B29018-B495-482A-8FF7-66821A178F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38718561-70C7-4E0D-9313-87A5E82ED338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D057064A-9B34-4224-97BA-4D5840A92BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C297DC-69B1-4BE6-A5EF-D320BD0CA968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F4C1FFB-F6AA-4DED-9C54-DCB274F59A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338A92AC-92D2-40BF-9FAC-884AF6F74D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DB5610-03CE-425E-8855-70D5787029FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DFC86C-7743-4F27-BC10-170F04C23D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5170421-BA0C-4365-9CD6-BD232EA08680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5909AAA4-4AF9-4D23-87C5-5D7787909B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2170CFD0-2594-45FB-B68F-0A75114F00A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C07744-CAE8-44C6-965E-2A09BAE1F36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17E0E59-C928-49AB-BAA7-4AE638B376D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294FC65B-4225-475A-B49A-758823CEDECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6156B085-AA17-458C-AED1-D658275E43B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C898BE7-506D-49DA-8619-F86C7A9FE902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6419309-385F-4525-AD4B-C73B1A3ED935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F7E821-2908-47F1-9665-E9D68ECC242F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90D0AB4-F8A8-4301-99B5-757254FA999A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79C7098-37D0-4E6E-A22C-3C771D81956F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D2832-B654-406E-AA34-B3BD1D6F0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5688D95-89EF-4D2E-9728-2316CAC3CBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B69E49B2-1B3C-4434-ACF1-CF4F519E3C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B2C299-5D0B-44DA-91FD-4B1146BE9A7B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*",
            "matchCriteriaId" : "6E94583A-5184-462E-9FC4-57B35DA06DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E905FAAD-37B6-4DD0-A752-2974F8336273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "3BD12488-1ED8-4751-ABF5-3578D54750A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "AE3733CF-4C88-443C-9B90-6477C9C500D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9C500A75-D75E-45B4-B582-0F0DF27C3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "86FD134D-A5C5-4B08-962D-70CF07C74923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "FA84692E-F99D-4207-B4F2-799A6ADB88AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "8B0F1091-4B76-44F5-B896-6D37E2F909A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18363",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.421822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16184",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/235-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.421822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_02_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/235-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider this to be a security issue.\nhttp:bugzilla.redhat.combugzillashow_bug.cgi?id=139478#c1",
        "lastModified" : "2008-01-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpchamber:phpchamber:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "7AB6DD5C-6263-4160-A7CC-E554CA93C00B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18360",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36919AD5-4F5E-4A13-BA9D-09078B030896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A5C539-196E-4B64-8815-53AD085AD7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/18/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18354",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421326/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16178",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/18/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421326/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36919AD5-4F5E-4A13-BA9D-09078B030896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A5C539-196E-4B64-8815-53AD085AD7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/18/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18354",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421326/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16169",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/18/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421326/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36919AD5-4F5E-4A13-BA9D-09078B030896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:427bb:fourtwosevenbb:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A5C539-196E-4B64-8815-53AD085AD7AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/18/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18354",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421326/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/18/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421326/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxrum:foxrum:4.0.4f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E78DA-5280-4F0B-AC4E-FC8BD8ED13F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421277/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421277/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password string in the new_passwd and confirm_passwd parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reamday_enterprises:magic_news_plus:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD431F5-911A-4FE2-BC7B-40E4889C13DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/MagicNewsPlus-pw-change.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16182",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/MagicNewsPlus-pw-change.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to execute arbitrary SQL commands via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberdoc:sitesuite_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F02BEB-593A-4B83-8B68-D8DFD35418E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22205-sitesuite.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18305",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22205",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22205-sitesuite.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter.  NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:javier_suarez_sanz:foro_domus:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D792D5-C4A6-4DD1-B771-2C59FFB3AE1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18327",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1) parent, (2) root, and (3) topic_id parameters to post.php3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en add_post.php3 en Venom Board 1.22 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros (1) parent, (2) root y (3) topic_id para post.php3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:venom_board:venom_board:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915C4AC8-4204-4ED6-AB01-D27440562D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/21/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113683807903915&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18383",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22297",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16176",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0122",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/21/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113683807903915&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T19:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors.  NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101933-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101933-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T19:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4BB686-4159-41D9-9AE2-67AF2FCDE0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A4541A-2560-482A-BAEA-275579B499B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9006F64F-D72B-49C4-9F51-8AD9273957B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5698AB2-94DE-480D-9E55-C05871562B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADBDEE-1421-42E5-8DE2-404087613B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041325.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18379",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.clamav.net/doc/0.88/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/385908",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16191",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.clamav.net/doc/0.88/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/385908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-10T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simultaneous connection requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105E9F52-D17E-4A0B-9C46-FD32A930B1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE2055D-AAA4-4A6A-918F-349A9749AF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12409B2-161B-4F78-B7AD-3CF69DDCC574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2F1DA4-6625-469D-988B-5457B68851A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B9704E-4BA9-4389-83AB-62BC65F81D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEC35A2-B17C-46EC-8697-9E03568339BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-announce/2006-01/msg00001.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/about/news.456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421592/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2006-01/msg00001.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/about/news.456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421592/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0020",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-01-10T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka \"WMF Image Parsing Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://linuxbox.org/pipermail/funsec/2006-January/002828.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18729",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18912",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/312956",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/913333.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22976",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16516",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-045A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0469",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-004",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1638",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://linuxbox.org/pipermail/funsec/2006-January/002828.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/312956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/913333.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-045A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0002",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-01-10T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D823C88E-8560-469B-8655-4755E0484F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D2B014-7D83-44D6-8F6D-2979ECF7B0FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D746A67B-FB0D-4DD9-8345-3DD3B02D3B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F9C143-4734-4E5D-9281-F51513C5CAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC01670D-4550-4034-86A5-7879B6334241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A57A1-7B9F-4C07-ADAA-DBC4687F1EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "E3983529-F4E3-4883-97AF-5BFC87AC3E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E88E31D4-1120-4A18-BA65-E2C96B35E599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE43EAE-9397-44E4-AE3D-44CEA47699DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "ACCF73A2-FFD7-41E0-B1BF-E5B4590F51FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3189982-F780-4AC2-9663-E6D4DF9DD319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18368",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/330",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/331",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015460",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015461",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/252146",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421518/100/0/threaded",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421520/100/0/threaded",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16197",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-010A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0119",
        "source" : "secure@microsoft.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22878",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1082",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1165",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1316",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1456",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1485",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A624",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/252146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421520/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-010A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/22878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0010",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-01-10T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica en T2EMBED.DLL en Microsoft Windows 2000 SP4, XP SP1 y SP2 y Server 2003 hasta la versión SP1, Windows 98 y Windows ME permite a atacantes remotos ejecutar código arbitrario a través de un mensajes de correo electrónico o una página web con una fuente web Embedded Open Type (EOT) manipulada que desencadena el desbordamiento durante la descompresión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:3.5.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8BECF6-3C33-4D8C-B54E-A0D2F3295E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:3.5.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "828B4519-24D8-45A7-8448-D5FF6C83A2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:3.5.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F495AF7A-CC31-4045-BACC-902950C80ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:3.5.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "68DFA54C-3DB9-4A94-A446-CF28671FE4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:3.5.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "55A2AC4C-6B85-4B60-BFE1-C9588C5973B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:3.5.1:sp5:alpha:*:*:*:*:*",
            "matchCriteriaId" : "DA5AA35E-D392-4516-AF02-70BE2ABA93EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "1A4FF113-BDCB-472C-A300-3DE5A12A7031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server_alpha:*:*:*:*:*",
            "matchCriteriaId" : "A5CEA2F6-0064-487D-AE4F-9C4F32E1C4AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "35346A7B-2CB5-446D-B0C3-1F21D71A746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDCBCB8-DAA3-465F-ADDE-9143B8251989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:alpha:*:*:*:*:*",
            "matchCriteriaId" : "F8E32528-4DA7-4FF8-BBA1-929C5C44FAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "064F4E76-1B89-4FA5-97ED-64624285C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*",
            "matchCriteriaId" : "416F06DD-980E-4A54-822D-CBA499FD1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B86E0671-ED68-4549-B3AC-FD8BD79B0860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:alpha:*:*:*:*:*",
            "matchCriteriaId" : "3F9C691E-CD79-4D8B-BD35-04BDE4422A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F66DC6FF-2B3D-4718-838F-9E055E89961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*",
            "matchCriteriaId" : "A08D0EA1-DA1B-4C52-883A-3F156F032517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB76E7EC-C396-4537-9065-4E815DA7097C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:alpha:*:*:*:*:*",
            "matchCriteriaId" : "0EF2010D-5D16-40A7-B7DE-8168C76E5BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "DA267420-56C5-4697-B0AA-52932F78B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*",
            "matchCriteriaId" : "02BE9817-E1AE-4619-8302-CA7AA4167F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD026E2-B073-40A6-AD4A-8C76B9169B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:alpha:*:*:*:*:*",
            "matchCriteriaId" : "DD500955-71F7-41AD-96EE-E8CC6A7FA7A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "363E3895-A19B-42EC-B479-765168DC0B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*",
            "matchCriteriaId" : "88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFB3E49-3FB5-4947-856D-727CBFFBA543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:alpha:*:*:*:*:*",
            "matchCriteriaId" : "CC031C07-FA91-426B-9772-64910AE12635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "81B7961D-151D-4773-80CB-CCD0456BFEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*",
            "matchCriteriaId" : "12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B9236480-6450-42E1-B1FF-F336488A683A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D97FA0F5-6A53-4E3A-BFCF-1AFF4B83CB37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B5CAF64E-98AA-4813-A2A2-5AC3387CF230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
            "matchCriteriaId" : "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*",
            "matchCriteriaId" : "EDDD8DA8-D074-4543-AEDF-F856B5567F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*",
            "matchCriteriaId" : "14F55877-A759-4C8A-84D5-70508E449799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:alpha:*:*:*:*:*",
            "matchCriteriaId" : "C79E6858-BB9C-4229-9DBE-8DA8627D10A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "CA7BA525-6DB8-4444-934A-932AFED69816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "2FECD4B0-23A0-4C0B-9888-D28A5941D848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2006/Jan/363",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18365",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18391",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015459",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/Research/Advisories/EEYEB20050801.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/915930",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18829",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421885/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16194",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-010A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0118",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23922",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1126",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1185",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1462",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1491",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A698",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A714",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2006/Jan/363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/Research/Advisories/EEYEB20050801.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/915930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/18829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421885/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-010A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0035",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of service (infinite loop) via a nlmsg_len field of 0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18482",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad8e4b75c8a7bed475d72ce09bf5267188621961",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad8e4b75c8a7bed475d72ce09bf5267188621961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0054",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F587A367-E975-4A38-BBC3-AF3194F1E296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:04.ipfw.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18378",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015477",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/22319",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16209",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24073",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:04.ipfw.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/22319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0055",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*",
            "matchCriteriaId" : "6E21E50A-A368-4487-A791-87366CC5C86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "E18328E2-3CB5-4D36-8EA3-77DD909B46A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "EF73D76B-FBB8-4D10-8393-9FAF53392A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:02.ee.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/18404",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015469",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/22320",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16207",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24074",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:02.ee.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attackers to execute arbitrary SQL commands via the query parameter, which is used by the search field.  NOTE: This is a different vulnerability than CVE-2005-3792."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke_ev:7.7_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59424F1-79D6-444B-969B-A342FC301B64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2006/01/phpnuke-ev-77-search-module-query.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2006/01/phpnuke-ev-77-search-module-query.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arbitrary PHP code by modifying the PHGDIR variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woah-projekt:phgstats:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4486793D-EFF0-4D32-BDE2-68368DBE29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woah-projekt:phgstats:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75163AC8-7F3D-4116-BB46-CACAC440B45B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woah-projekt:phgstats:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B988E4F-0B0A-41DA-8BA7-7E86CC97FADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woah-projekt:phgstats:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3057480A-E537-44CE-8402-157BA5584CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woah-projekt:phgstats:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7BD875D-16AC-4921-A692-32B8F19B5FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woah-projekt:phgstats:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "222668EA-8C3E-4F92-BED4-FC6DA9C63AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woah-projekt:phgstats:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485E62B0-F605-460C-B978-47C419D62997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woah-projekt:phgstats:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DED312D-BCFD-4341-B94C-65D610A81544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18346",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=384232",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=384232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:5.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B275581E-40C7-4C60-8579-ABE91C72A4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.10_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A80D91-6829-4FD0-A237-0B736133FE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.11_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E4C682-8357-42A1-B05A-A67BE6491673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.3.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC7A15A-CC25-4246-8E20-6DD2835505A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.4.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0BFA73-C127-4F3C-9264-9F7AF662EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A94D77-7CFD-45C7-97BC-99CB02461E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA19BEB3-B893-41E9-A136-981F06E85327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895A15BB-6CD4-436C-AD8F-CD63DF918342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E8CFA8-4C68-4569-8B35-13155709453F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.4_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CBB373-CEC4-44A0-9AC5-BCBED479E3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.5_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EB08FC-0D48-4AD8-AD38-3995B01007C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.6_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAD6F9-34EF-4C12-AF2C-C8D4F7E31754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A7A54C-EB1E-41F7-91B9-F3DA5B3F3D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171B8F2A-4EB0-4A29-8F2E-6B073B1490CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.2_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F897FC-CC83-43A6-8D40-3825FEC517BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.3_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9CE5C0-DB9A-45CD-8C1C-26C664A79477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.4_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C519572D-9CB8-40F1-A74D-D0246873DEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB72220-4AA2-4C30-B934-BBC0F72869C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9073E8-E3B5-416C-8D9B-1943F67BDE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99ADD3A-FE1D-4B67-9945-9CBB3D4BEBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDBDCD-6BF0-4213-91D0-501D107DB512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.3_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3236FC46-7E1E-49A1-8239-B67C03D47B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.4_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB7FE74-41AF-4E99-B808-A9349BED0575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.5_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D646596-6247-4E58-B84F-7BD87B8B71DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.6_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386BF292-8E87-4442-A4CF-A3A105ECBBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.7_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23D1DB6-6C4F-4C0A-A8EE-CB51E16F89A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.8_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282EF8C4-E4D1-42FD-A56F-3FA3AB8EE6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.8.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B79656F-BE0B-403B-8E2B-C384AEDF21C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.8.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DEC170-B84D-47B9-8A91-13374B8021FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.8.3_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382B4D87-4CE1-4E06-A6EC-4725FC209D8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18372",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=384153&group_id=51417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1395371&group_id=51417&atid=463213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=384153&group_id=51417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1395371&group_id=51417&atid=463213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other products."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F670F0-FD5D-447C-94B8-691482D907F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005_premier:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E481D2-87F3-4912-BB87-5168C6A1BE23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EB078C-2538-4961-ABFF-6C4601C3977F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2006_premier:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07ED984C-BDE4-4CF6-ACBE-2D2FC01B5BDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18402",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.01.10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015462",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.01.10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter in calendar.php3 and the (2) password field on the login page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphpim:myphpim:01.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC3902D-1B2F-4665-A715-8A0A0803F5B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/22/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16210",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/22/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the \"Create New todo\" page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphpim:myphpim:01.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC3902D-1B2F-4665-A715-8A0A0803F5B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/22/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16210",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/22/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphpim:myphpim:01.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC3902D-1B2F-4665-A715-8A0A0803F5B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/23/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421626/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/23/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421626/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0170",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2023-11-07T01:58:19.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0035.  Reason: This candidate is a duplicate of CVE-2006-0035.  Notes: All CVE users should reference CVE-2006-0035 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter.  NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orjinweb:orjinweb_e-commerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613A0148-E87A-4EFF-95B2-B8908DA24B79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421312/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16199",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421312/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check for hostile scripting."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:enterprise_collaboration:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.21",
            "matchCriteriaId" : "48FD4CFF-62BA-4675-B78A-AE58E39FED26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:enterprise_collaboration:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315548F2-3796-43BE-84D4-4DD48996DF56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18411",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securenetwork.it/advisories/sn-2006-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421392/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16195",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securenetwork.it/advisories/sn-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421392/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which might trick a user into downloading dangerous or unexpected content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:enterprise_collaboration:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.21",
            "matchCriteriaId" : "48FD4CFF-62BA-4675-B78A-AE58E39FED26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:enterprise_collaboration:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315548F2-3796-43BE-84D4-4DD48996DF56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18411",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securenetwork.it/advisories/sn-2006-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421392/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16195",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securenetwork.it/advisories/sn-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421392/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:collaboration:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.21",
            "matchCriteriaId" : "39EE5FF5-3D50-47F9-97CA-EF32DC6688B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:collaboration:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79168D1-1AD4-4A7E-95D8-0BFEC0DFCEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:enterprise_collaboration:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.21",
            "matchCriteriaId" : "48FD4CFF-62BA-4675-B78A-AE58E39FED26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummingbird:enterprise_collaboration:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315548F2-3796-43BE-84D4-4DD48996DF56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securenetwork.it/advisories/sn-2006-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421392/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16195",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securenetwork.it/advisories/sn-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421392/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwiz:web_wiz_forums:6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F130D0-681A-4ED1-9E22-F8956DA9F92A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0299.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421615/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16196",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0299.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421615/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -rec argument on many operating systems, and via a long (5) -jdev argument on Ubuntu Linux."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmame:xmame:0.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C7F363-C657-4A58-86F5-4BA0145F4B57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0353.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421849/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://x.mame.net/changes-unix.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0353.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421849/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://x.mame.net/changes-unix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long command line argument or (2) setting the -c option of /etc/nu to the name of a file containing a long line."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cray:unicos:9.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0DA667-366F-457E-9663-3A5EDBFB7C8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0343.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16205",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0343.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command.  NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cray:unicos:9.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0DA667-366F-457E-9663-3A5EDBFB7C8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0343.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0343.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-11T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to arbitrary ports, as demonstrated to port 80."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7940:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F39E4B-C895-42E2-A7A7-C7026D17BE0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/cisco_ip7940_dos.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18479",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015488",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20060113-ip-phones.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16200",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0202",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/cisco_ip7940_dos.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20060113-ip-phones.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-12T06:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the \"Adding New Event\" page, and possibly other vectors, involving iframe tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calogic:calogic_calendars:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F3A94B-F5D9-43CA-AB4E-6C4E7DB310D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/24/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18417",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422163/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/24/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-12T06:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command."
      }, {
        "lang" : "es",
        "value" : "Cisco Security Monitoring, Analysis y Response System (CS-MARS) en versiones anteriores a 4.1.3 tiene una cuenta administrativa no documentada con una contraseña por defecto, lo que permite a usuarios locales obtener privilegios a través de el comando expert."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7BF76D-85A6-4976-B6A8-3D39579C4DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48D948-7524-41F9-A818-F6774049A574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/bugtraq/2006/Jan/202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16211",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/bugtraq/2006/Jan/202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-12T06:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to \"inside\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acal:calendar_project:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8620F9-8701-45FB-8555-45FC00E351BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/25/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421744/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/25/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421744/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-12T06:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php, or (2) the edit=footer value, which modifies footer.php.  NOTE: this issue might be resultant from the poor authentication as identified by CVE-2006-0182.  Since the design of the product allows the administrator to edit the code, perhaps this issue should not be included in CVE, except as a consequence of CVE-2006-0182."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acal:calendar_project:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8620F9-8701-45FB-8555-45FC00E351BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/25/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421744/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/25/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421744/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-12T06:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to goto.asp or (2) password parameter to includeloginuser.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mainenet_enterprises:asptopsites:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8C397E-C9C3-4472-BB2A-0151FD18D6D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0351.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2006-001-asptopsites.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0351.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.exploitlabs.com/files/advisories/EXPL-A-2006-001-asptopsites.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-12T06:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-nuke:news_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D7D0487-0C32-4BBE-9217-2787CCF5DD22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-nuke:pool_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53D74A0-99A4-4DB3-A23C-81467E829F07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421322",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16192",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-12T06:02:00.000",
      "lastModified" : "2023-11-07T01:58:19.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4500.  Reason: This candidate is a duplicate of CVE-2005-4500.  Notes: All CVE users should reference CVE-2005-4500 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-12T06:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBED7535-0091-4B27-B261-384CEADFE362"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18409",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421943/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16225",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421943/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka \"a\") field in the SDP data of a SIP packet on UDP port 5060."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estara:softphone:3.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FF4BE5-80CF-4D7A-BDE9-DD922CC326B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estara:softphone:3.0.1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CB4A40-23B5-42FB-A1BB-5622B7C5373E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421596/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421596/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This is the vendor provided solution:\r\n\r\n\"eStara has released Softphone version 3.0.1.47 to resolve the buffer overflow demonstrated in parsing SDP with long \"a=\" lines.  Licensed customers can download a new version via the email sent to them with purchase, customers testing may go back to http://www.estara.com/softphone/ to obtain a new free trial.   Version information can be gathered by going to Help->About.  eStara highly recommends all customers upgrade to avoid this issue.  If there's further questions please email us: softphone@estara.com.\r\n \r\neStara would like to thank ZwelL for bringing the issue to our attention.\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a denial of service (panic) via unspecified vectors, possibly involving functions from the mm driver."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102066-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102066-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unspecified vectors involving the use of the find command on the \"/proc\" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2005-3250."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18420",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102108-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102108-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philip_loftin:aspsurvey:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF0E38B-6033-4174-A66D-E4BB04AD1469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18422",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423949/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0164",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423949/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89F666E-C938-4A31-B257-851FC9E3A5A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.1_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1509DA80-40F8-4CB4-9483-3EAA9D092806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.1_patch_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BC85C7-4F92-4183-943B-ABDAE4BB082F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.1_patch_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87ADE812-4B81-40DD-89D5-79A4A42ABC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.1_patch_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D411F5DF-546F-420E-A00A-CC93BD81F6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.1_patch_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBCB8FF-E496-4EB5-B785-2543F656BD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.1_patch_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC139D9-0EAD-45A9-8098-C3170068F46C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.1_patch_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F7A2B4-DABC-4ECD-A68C-179E3AAE1CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870782FC-AC57-4FCC-8A4B-F2ED93B21AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D856D366-AB69-43F4-8C89-DC8C394B770C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE42251-F86E-420B-A595-4E2DBCF2A39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B43B49-FB9B-4D30-9229-B9F236E895E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B34417-5BCE-49B9-8372-EDD06AA3BCA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_patch_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2A8122-760A-4A18-A442-46B9835D9697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_patch_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54ACEE8B-B239-445C-9014-4DF35F43836A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_patch_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC6ECCE-658D-425E-BE69-5033A3A5BAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_patch_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "276AF2E3-3EB3-470B-971F-DE07029FE0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0150AA3-B270-44E7-BBAD-D4C635B2D201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9AEB38-87B5-4D10-8D44-108F7BA371E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C19779-FC7A-43E4-B644-82788FE18247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD1EC96-1DB6-4E6B-AE41-0D86C1444738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6056BD-4307-425E-9643-88FD86EE58C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B457B44-813A-47C0-A376-11878A1DDAFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_patch_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36EEDCA9-43D7-4DE8-B9F5-6C694E7DD632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_patch_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5864212E-3F34-4646-A7EF-48EA12A4CDBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_patch_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FCC7167-4F70-432F-A48E-81CDEEE212CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_patch_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511A095E-6D70-468C-B8A2-6ABF49F5F00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_patch_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04E10C8-A583-4AA8-9A49-F303DE3DF223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_patch_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3497E206-A8A2-4833-9D41-68532ED89373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_patch_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D681B6AF-C0DC-439B-B6EF-4D0058E2D6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05DF544B-46FC-45C3-8A7D-E8FF48F21363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.4.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CCF6BC-D4EB-44E8-B27C-8CED7A93FAD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.psoft.net/HSdocumentation/versions/?v=all&p=r",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.psoft.net/HSdocumentation/versions/index.php?v=243p9&p=r",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421704/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.psoft.net/HSdocumentation/versions/?v=all&p=r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.psoft.net/HSdocumentation/versions/index.php?v=243p9&p=r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421704/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to inject arbitrary web script or HTML via the dest parameter in the pgLogon page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fog_creek_software:fogbugz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.029",
            "matchCriteriaId" : "EB0FF3E0-390D-40F5-9B36-BFC279A5C311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fogcreek.com/FogBugz/KB/releaseNotes/WhatsNewInFogBugz4.0.33.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16216",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fogcreek.com/FogBugz/KB/releaseNotes/WhatsNewInFogBugz4.0.33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Serial line sniffer (aka slsnif) 0.4.4 allows local users to gain privileges via a long value of the HOME environment variable, possibly because of a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serial_line_sniffer:serial_line_sniffer:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5493DB-CB54-4122-9E2B-D804C8E455C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://shellcoders.com/sintigan/slsnif-ploit.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421583/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://shellcoders.com/sintigan/slsnif-ploit.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421583/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a \"long\" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers to cause a denial of service (application crash) and possibly conduct other attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x.org:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.8.2",
            "matchCriteriaId" : "1D3B984F-94E2-4EC1-AA6B-ACF883DD7829"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/421256/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421256/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops_pool_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BDC6C6-ACA1-444D-9A03-CCA20A9D7969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/421325/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xoops.org/modules/newbb/viewtopic.php?topic_id=45637&forum=2&post_id=200481",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421325/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xoops.org/modules/newbb/viewtopic.php?topic_id=45637&forum=2&post_id=200481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-nuke:cms_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "AD4540CD-732B-4F70-9711-B6C88BED8791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0439.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421727/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0439.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421727/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18431",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_022006.113.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/release_5_1_2.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421705/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_022006.113.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/release_5_1_2.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421705/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_success.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paypal:php_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.50",
            "matchCriteriaId" : "50D66514-FAC2-4E1B-AF92-4FEAE982EF8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18444",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.uinc.ru/articles/vuln/ptpaypal050.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.uinc.ru/articles/vuln/ptpaypal050.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to delete or replace payment data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paypal:php_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.50",
            "matchCriteriaId" : "50D66514-FAC2-4E1B-AF92-4FEAE982EF8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18444",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.uinc.ru/articles/vuln/ptpaypal050.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.uinc.ru/articles/vuln/ptpaypal050.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-nuke:cms_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "AD4540CD-732B-4F70-9711-B6C88BED8791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0483.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0437.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0439.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22385",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421748/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0483.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0439.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421748/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the \"Course name\" field in index.php when the frm parameter has the value \"mine\" and (2) possibly certain other fields in unspecified scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordcircle:wordcircle:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E73682-CCB2-4729-A0C9-F591B8EF7C8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/28/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18440",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421746/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/28/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421746/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) have other unknown impact via certain other fields in unspecified scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordcircle:wordcircle:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E73682-CCB2-4729-A0C9-F591B8EF7C8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/27/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/28/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18440",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421746/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0185",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/27/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/28/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421746/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección Eval en Light Weight Calendar (LWC) 1.0 (20040909) y versiones anteriores permite a atacantes remotos ejecutar código PHP arbitrario a través del parámetro date en cal.php, que está incluido en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:light_weight_calendar:light_weight_calendar:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2D9CE2-E12E-4325-8B39-22E6D2295ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000612.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/29/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/29/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18450",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16229",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000612.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/29/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/29/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18431",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18697",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19355",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015484",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-22.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory_012006.112.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_2.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16220",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0177",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/261-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory_012006.112.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_2.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/261-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-13T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18431",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18697",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19355",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20222",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-22.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-4.php#4.4.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_2.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0501.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16803",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0177",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/261-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-4.php#4.4.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_2.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/261-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-14T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in general_functions.php in TankLogger 2.4 allows remote attackers to execute arbitrary SQL commands via the (1) livestock_id parameter to showInfo.php and (2) tank_id parameter, possibly to livestock.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanklogger:tanklogger:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CA7139-1660-41CC-977E-73B823E13AF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000480.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/26/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000480.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/26/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-14T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interspire:trackpoint_nx:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C2CDE7-BBF3-49CE-AFC4-167DB19CE825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.interspire.com/forum/showthread.php?p=29606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421740/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.interspire.com/forum/showthread.php?p=29606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421740/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-14T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the txtEmailAddress parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helm_hosting:helm_hosting_control_panel:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA594074-B800-4B11-BEDA-AF044DFAFB69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421791/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.webhostautomation.com/webhost-301",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421791/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webhostautomation.com/webhost-301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-14T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\\\ sequences in the RFILE argument of ussp-push."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en servicios OBEX Push en Toshiba Bluetooth Stack 4.00.23(T) y versiones anteriores permite a atacantes remotos subir archivos arbitrarios a localizaciones remotas arbitrarias especificadas por secuencias .. (punto punto), según lo demostrado por secuencias ..\\\\ en el argumento RFILE de ussp-push."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.00.23t",
            "matchCriteriaId" : "31A7DCAC-2DF7-4EB1-B321-A1A331F32ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.00.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A3CCBE-29F6-4833-9839-0CEAB0C33A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.00.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB969B2-F6B7-48C0-9B4D-EC9F92944CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.00.31a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950ACF9E-0783-42E5-A804-18A9F26E038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.00.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D00C96-6DA5-453F-A7E2-694E0B83D68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.01.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2ACFAD-8406-4478-8D12-F4EC8684728C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6160E18A-DE9C-4D0A-A901-BC2BB1CE3F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.20.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01049F3C-7EE1-4836-BF9C-C2CFE84A03D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.20.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484C6E65-24BA-4D07-8BD1-71384E63F41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.20.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083F6F9A-626B-4F7B-9804-3E97C0D8624F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.20.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F031926C-3138-4D5E-81F4-ED34C95367C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:4.00.01t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E31608-3811-491C-9759-6F66D0B4C6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:4.00.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611EB66B-01DA-43DE-8DFE-0D6F5AD0657A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113712413907526&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18437",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0112a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421993/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113712413907526&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0112a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421993/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-14T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kolab:kolab_groupware_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2005-12-15_pre2.1",
            "matchCriteriaId" : "60B7A599-5C6E-4C46-A35E-A9BE2A140873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kolab:kolab_groupware_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2E6D3B-628A-43FD-8432-0489093241B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kolab:kolab_groupware_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB35B56-ED00-4BEC-9F76-61C3B8CAAE0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kolab.org/security/kolab-vendor-notice-08.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18438",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-08.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-15T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to visitorupload.php, as demonstrated using phpinfo and include function calls."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indexcor:ezdatabase:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1E0B98-9E10-4BA6-97E6-A7E076CD6901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indexcor:ezdatabase:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16CD7645-B0EE-4D54-B061-4DC803FA2A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/01/ezdatabase-20-and-below.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/01/ezdatabase-20-and-below.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T19:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.  NOTE: this issue might be resultant from CVE-2006-0216."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualityebiz:quality_ppc:1.0_build_1644:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6D296C-1A07-4BF0-8C35-41233C846C83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22352-qualityppc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22352",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/22/22352-qualityppc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T19:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified \"meta characters\" to the cpage parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualityebiz:quality_ppc:1.0_build_1644:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6D296C-1A07-4BF0-8C35-41233C846C83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22352-qualityppc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/22/22353-qualityppc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22353",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/22/22352-qualityppc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/22/22353-qualityppc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T19:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in item.pl and (2) category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wrong since the current version as of 20060116 is 3.6.1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_auction:ultimate_auction:3.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F96584-3180-442D-A7F0-E5868D9591C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0517.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18477",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16239",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0517.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php, (4) inc/functions_upload.php, (5) printthread.php, and (6) usercp.php, and probably related to SQL injection.  NOTE: it is likely that this issue subsumes CVE-2005-4602 and CVE-2005-4603.  However, since the vendor advisory is vague and additional files are mentioned, is is likely that this contains at least one distinct vulnerability from CVE-2005-4602 and CVE-2005-4603."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.01",
            "matchCriteriaId" : "D04CCBA4-FD62-41BA-838C-A307BA792E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD61D970-9363-4A75-A8DB-D0EBA2CF0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "C14F8B95-1A33-4DA8-8DE4-35C7DC3590CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:pr1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7728CD-1FA0-4428-B3FC-883781A699CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:pr2:*:*:*:*:*:*",
            "matchCriteriaId" : "0883675F-9442-49E7-8471-C205B7EA201D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B85E419B-F9D3-4839-A15C-F22BF9DABFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB8B860-71DC-4F45-9E2A-74BD1C2ED893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C67749DF-F8AF-4C88-A120-0F48307C58E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0820A0-5D85-446F-9B7E-F8DB258A1178"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=5852",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct (1) SQL injection attacks via an attachment name that is not properly handled by inc/functions_upload.php (CVE-2005-4602), and possibly (2) other attacks related to threadmode in usercp.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD20FC3-BAE3-4623-B64D-3AA7073C404A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=5853&pid=35088#pid35088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5853&pid=35151#pid35151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5960",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5853&pid=35088#pid35088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5853&pid=35151#pid35151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=5960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the day parameter in calendar.php and (2) the input form in search.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  It is possible that this issue is resultant from an SQL injection problem in CVE-2005-4227.3 and CVE-2005-4227.13."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156DC7CD-FFEA-4225-BE58-6DEFEDCB1730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92241B71-C6B6-4B85-96A8-726CC04E3F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F26F19B-4F47-475E-AD58-D8964C0BF8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7F57E2-E38E-4575-8C95-5E2FAC7D919D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905B0FF8-984D-4EA6-B867-2B3CE1874DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC2BC46-D988-4502-9C35-139992142043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/421914/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16232",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421914/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS) allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ddsn:cm3cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F5F605-95A0-4659-BA4A-8E93D2240730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421941/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421941/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to inject arbitrary web script or HTML via the tempid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:template_seller:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "0787BDCE-97DE-4D4A-B985-8854774A71BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22746",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421916/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16233",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421916/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-16T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via \"..\" (dot dot) sequences in the username field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topcmm_computing:123_flash_chat_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797F15FA-6577-47F3-B342-EE950EF55475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topcmm_computing:123_flash_chat_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376197D6-056C-4991-9EE5-805549D8BDA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.123flashchat.com/flash-chat-server-v512.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16235",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0198",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.123flashchat.com/flash-chat-server-v512.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-17T20:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:P",
            "baseScore" : 2.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18498",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102033-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102033-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-17T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DF5719-7980-42F1-A55F-BA42B5AB51E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E661647F-ED24-40C9-B85D-9C60F45EA00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D9BF20-272D-428A-88DD-0CA90B14C631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BF408B-DE5C-4AD4-986B-FF9C38E1B515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E79624-4CBD-4744-BD1E-518B9EBFF7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DC3A73-B269-4418-A8EC-877BDDDB57BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F45B7B0-DAEE-4101-97AB-C41F6E206916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC33E4A-76D3-4C16-B261-CDB0CF78F048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4F7AFD-AD7A-45ED-9660-7BC6DFCD36E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B598D0A0-21A2-4731-B816-A96B4D8A389A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18458",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.grsecurity.org/news.php#grsec218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16261",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.grsecurity.org/news.php#grsec218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-17T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in Wehntrust might allow local users to gain privileges via a malicious \"program.exe\" file in the C: folder, which is run when Wehntrust creates the autostart key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wehnus:wehntrust:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08786967-BA28-48D7-8A27-5273E5177967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/422020/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422046/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wehnus.com/downloads.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422020/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422046/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wehnus.com/downloads.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microblog:microblog:2.0_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D90BA6-EEC8-4D16-9C1A-AB9D11691FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/36/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/36/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microblog:microblog:2.0_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D90BA6-EEC8-4D16-9C1A-AB9D11691FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/35/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422141/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16270",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/35/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422141/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir parameter to pictures.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:white_angle:white_album:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303F2122-6938-43BD-B7DC-5AC25AB75980"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.biyosecurity.be/bugs/whitealbum.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422105/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16247",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.biyosecurity.be/bugs/whitealbum.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422105/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code via an attachment with a filename containing a large number of spaces ending with a dangerous extension that is not displayed by Thunderbird, along with an inconsistent Content-Type header, which could be used to trick a user into downloading dangerous content by dragging or saving the attachment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-22/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422148/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0230",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=300246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-22/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422148/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=300246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  We verified that this issue does not affect Linux versions of Thunderbird.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) subcat parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtp:icommerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A63507F-83C6-4B9F-993E-56BCDC4BBA38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18470",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gamerz:wp-stats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "E2DDA5BE-1E56-49FB-8521-A5D0FEA3A0BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22450-wpstats.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18471",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.lesterchan.net/blogs/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.lesterchan.net/blogs/archives/2006/01/18/wp-stats-sql-injection-vulnerability",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22450-wpstats.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.lesterchan.net/blogs/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.lesterchan.net/blogs/archives/2006/01/18/wp-stats-sql-injection-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:8pixel.net:simple_blog:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E89355-BE7C-4E40-946C-83CECED23DB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18488",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=21926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422102/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=21926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422102/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:8pixel.net:simple_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "F539872D-187C-4421-9886-BB909FABB1ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18488",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=21926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422102/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0194",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=21926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422102/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmobo:wbnews:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A615AD72-5BD8-4D67-BAFE-5C7E52A1B9F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusebox:php_fusebox:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC8AECD-B979-46BC-A5FF-3D53E36EBB73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422124/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16274",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422124/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0044",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the \"handling of submitted form fields\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albatross:albatross:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65B24C-FD6C-450F-95AA-B62655A77CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albatross:albatross:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7CF22F-59D0-4B94-ABCE-36C1660576EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albatross:albatross:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDFA54E-AB90-4F64-80BB-32C257137DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albatross:albatross:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "548F565E-6789-47EC-8EBA-A3060435470D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albatross:albatross:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D9CDAD-85D2-4A6A-BF2E-F2BF236783C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albatross:albatross:1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F727E0-F2D1-4D90-A52B-96775D781E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18457",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18496",
        "source" : "security@debian.org"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/a/albatross/albatross_1.20-2.diff.gz",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-942",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.object-craft.com.au/projects/albatross/news.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/22451",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16252",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0196",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24130",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.debian.org/pool/updates/main/a/albatross/albatross_1.20-2.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.object-craft.com.au/projects/albatross/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SMBCMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the text parameter, which is used by the \"Search Site\" field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smbcms:smbcms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40FCBF5-8A98-4343-850B-9D3BE98D3C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter.  NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer supports the upload of PHP files, which would not cross privilege boundaries since the PHP functionality would support read access outside the web root"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpxplorer:phpxplorer:0.9.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB22E9E6-B441-4C03-AD37-152F7B8E4038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18518",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arrelnet.com/advisories/adv20060116.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421997/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422158/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16263",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arrelnet.com/advisories/adv20060116.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421997/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422158/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4) productId, (5) docId, (6) act, and (7) catId parameters in index.php; and the (8) username field in a login action in index.php.  NOTE: the cart.php/redir and index.php/searchStr vectors are already covered by CVE-2005-3152."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.7-pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC141847-A950-4CC3-AF62-BDD862FFE49D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.cubecart.com/?do=details&id=459",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16259",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.cubecart.com/?do=details&id=459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:widexl:download_tracker:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8297475F-3F91-4E4F-9B38-4F2B16238DD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22462-widexl.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18472",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22462",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22462-widexl.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netbula:anyboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.9.5.6",
            "matchCriteriaId" : "8CCEC0E8-FD89-4521-8E8C-FC566ABE0A75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22461-anyboard.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18469",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16264",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22461-anyboard.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 500 and 520 and (2) Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intracom:jetspeed:500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367C6B60-923D-46EB-A0DE-374FD61181BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intracom:jetspeed:520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF5649E-290A-42C0-B89A-792577AB58DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.globalnetworks.gr/?p=4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18483",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.globalnetworks.gr/?p=4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter ($tmpCategory variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdamaged:geoblog:mod_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2698AD09-8823-4B89-A9C0-624BC035F637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/33/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18504",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22463",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16249",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0191",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/33/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the snmp_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:snmptrapd:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3F0A0E-4930-4100-A383-B45A95F52341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carnegie_mellon_university:snmptrapd:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46CC441-ABDC-4298-B40F-0907FD106AB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18525",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006040164883273.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422086/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006040164883273.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422086/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3) cmd parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faq-o-matic:faq-o-matic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.711",
            "matchCriteriaId" : "44186256-29DB-4D7D-AC2A-C2537C653343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22439-faqomatic.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18468",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16251",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22439-faqomatic.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the (1) year, (2) month, and (3) day parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benders_calendar:benders_calendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "B34349A7-679B-4980-89B8-BF25ABAE4A46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/30/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18462",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015491",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422052/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16242",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/30/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422052/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Bluetooth OBEX Object Push service in \"Blue Neighbors.EXE\" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long file name, as demonstrated via a long RFILE argument to ussp-push."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ambicom:blue_neighbors:2.50_build_2500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9FAAC01-E8C0-4628-B0EA-C9B4E136B89A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18466",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0115a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422481/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0115a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422481/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:geronimo:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCEA65AC-5A1B-4354-AB6C-E1525B060581"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issues.apache.org/jira/browse/GERONIMO-1474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2008-0630.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oliverkarow.de/research/geronimo_css.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421996/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.apache.org/jira/browse/GERONIMO-1474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2008-0630.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oliverkarow.de/research/geronimo_css.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421996/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T01:51:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious \"program.exe\" file in the C: folder, which is run when SecureClient attempts to launch the Sr_GUI.exe program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:*:*:fp1:*:*:*:*:*",
            "matchCriteriaId" : "426A6759-491C-461D-A850-7168F7D04CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0219DD2D-A37D-4425-9436-4F3DA1B7F63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:4.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2582AE-B67A-45DF-B798-8A0426613BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:4.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "16F333AD-6A2B-4E91-8BE3-0896DCCB8693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:4.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9754CCE-CEC5-4359-9C62-133885817DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:4.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "C65FC343-69C9-4B70-8149-42297B47C813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:4.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "82B9036B-CE8D-47B3-B742-33C4B8B05ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:4.1:sp5a:*:*:*:*:*:*",
            "matchCriteriaId" : "610F8305-9CD7-48F2-9F2E-2CDECD623DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:vpn-1:4.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "96CED910-99F7-43C5-83F8-68D3C0641F03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secdev.zoller.lu/research/checkpoint.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422263/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secdev.zoller.lu/research/checkpoint.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422263/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Advanced Queuing component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.6, 10.1.0.3 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB02.  NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the CDC_ALLOCATE_LOCK function of the DBMS_CDC_UTILITY package."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C8910-D7E7-4B50-A506-58B425B2BE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Connection Manager component of Oracle Database server 8.1.7.4 and 9.0.1.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*",
            "matchCriteriaId" : "D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB04 and (2) DB06 in the (a) Data Pump component; (3) DB10 in the (b) Net Listener component; and (4) DB16 in the (c) Oracle Text component.  NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB06 is SQL injection in the GENERATE_JOB_NAME, GET_WORKERSTATUSLIST1010, GET_PARAMVALUES1010, GET_DUMPFILESET1010, GET_JOBSTATUS1010, ATTACH, and ESTABLISH_REMOTE_CONTEXT functions in DBMS_DATAPUMP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB05 in the (a) Data Pump component; (2) DB15 in the (b) Oracle Text component; (3) DB22 in the (c) Streams Apply component; (4) DB23 and (5) DB24 in the (d) Streams Capture component; and (6) DB26 in the (e) Streams Subcomponent.  NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB05 involves SQL injection in the (f) LONG2VARCHAR, LONG2VCMAX, LONG2VCNT, and LONG2CLOB functions in the DBMS_METADATA_UTIL package; (g) MAKE_FILTER, FETCH_VIEWS_ERROR, FETCH_FILTERS, FETCH_VIEWS, SET_FILTER_COMMON, DO_FILTER_SCRIPT, SET_TABLE_FILTERS, and MAKE_FILTER_TEXT functions in the DBMS_METADATA_INT package; and (h) GET_PREPOST_TABLE_ACT function in the DBMS_METADATA package."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component.  NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*",
            "matchCriteriaId" : "D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_tde_wallet_password.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422255/30/7430/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_tde_wallet_password.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422255/30/7430/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB08."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52C2C2-64C3-40BA-86A1-C4A14BEB8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33627F4-3E7D-4181-8171-2B65F8C60E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B5ED54-BAF4-41B3-8B09-F9795AB7A18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3E2494-5BAE-425B-8F32-A4D2532B10C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA45BE-C7AB-429C-A0A3-928BEC3E78E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90F6C4F-CEF5-4172-97FC-617B71EAA636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5_fips:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61ECB215-482D-4E47-A1CE-169ADE17812B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61851FB-AC6F-4E56-8CA8-F8CE97D65364"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB09 in the (a) Net Listener component; and (2) DB12 and (3) DB13 in the Network Communications (RPC) component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*",
            "matchCriteriaId" : "D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C8910-D7E7-4B50-A506-58B425B2BE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/870172",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/870172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2023-11-07T01:58:20.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0259.  Reason: This candidate is subsumed by CVE-2006-0259.  An error during initial CVE analysis used the wrong set of affected versions for \"DB10\". Notes: All CVE users should reference CVE-2006-0259 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB17 in the Oracle Text component and (2) DB18 in the Program Interface Network component.  NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB17 involves SQL injection in the (a) VALIDATE_STATEMENT and BUILD_DML functions in CTXSYS.DRILOAD; (b) CLEAN_DML function in CTXSYS.DRIDML; (c) GET_ROWID function in CTXSYS.CTX_DOC; (d) BROWSE_WORDS function in CTXSYS.CTX_QUERY; and (e) ODCIINDEXTRUNCATE, ODCIINDEXDROP, and ODCIINDEXDELETE functions in CATINDEXMETHODS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C8910-D7E7-4B50-A506-58B425B2BE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB19."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB20."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Security component of Oracle Database server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB21."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*",
            "matchCriteriaId" : "D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB25.  NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the SET_DIRECTORY_ROOT function in the DBMS_CDC_PUBLISH package."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAD20B6-258F-4093-BEE0-99F11D61A61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B900301-8AC5-43BD-BD2B-639419885820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27.  NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C8910-D7E7-4B50-A506-58B425B2BE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_tde_unencrypted_sga.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422262/30/7400/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_tde_unencrypted_sga.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422262/30/7400/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB28.  NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the DBMS_REGISTRY package in certain parameters to the (1) IS_COMPONENT, (2) GET_COMP_OPTION, (3) DISABLE_DDL_TRIGGERS, (4) SCRIPT_EXISTS, (5) COMP_PATH, (6) GATHER_STATS, (7) NOTHING_SCRIPT, and (8) VALIDATE_COMPONENTS functions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52C2C2-64C3-40BA-86A1-C4A14BEB8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33627F4-3E7D-4181-8171-2B65F8C60E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B5ED54-BAF4-41B3-8B09-F9795AB7A18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3E2494-5BAE-425B-8F32-A4D2532B10C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA45BE-C7AB-429C-A0A3-928BEC3E78E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90F6C4F-CEF5-4172-97FC-617B71EAA636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397FC5F3-27E7-4BD7-9348-E671640327FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29.  NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52C2C2-64C3-40BA-86A1-C4A14BEB8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33627F4-3E7D-4181-8171-2B65F8C60E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B5ED54-BAF4-41B3-8B09-F9795AB7A18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397FC5F3-27E7-4BD7-9348-E671640327FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.argeniss.com/research/ARGENISS-ADV-010601.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/891644",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.argeniss.com/research/ARGENISS-ADV-010601.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/891644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vectors, as identified by Oracle Vuln# AS01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC53C94-1C7B-4B5E-8114-EFB5ED61B045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04.  NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422261/30/7430/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422261/30/7430/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) OCS01, 2) OCS02, 3) OCS03, 4) OCS04, 5) OCS05, 6) OCS06, 7) OCS07, (8) OCS08, and (9) OCS09 in the (a) Email Server component; 10) OCS10 (and (11) OCS11 in the (b) Oracle Collaboration Suite Wireless & Voice (component; 12) OCS12 and (13) OCS13 in the (c) Oracle Content (Management SDK component; 14) OCS14 and (15) OCS15 in the (d) Oracle (Content Services component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3341ECC8-1E5F-4436-B056-9CA2BAF659E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in the (a) Application Install component; (2) APPS07 in the (b) Oracle Applications Framework component; (3) APPS08, (4) APPS09, (5) APPS10, and (6) APPS11 in the (c) Oracle Applications Technology Stack component; (7) APPS12 in the (d) Oracle Human Resources component; (8) APPS15 and (9) APPS16 in the (e) Oracle Marketing component; (10) APPS17 in the (f) Marketing Encyclopedia System component; (11) APPS18 in the (g) Oracle Trade Management component; and (12) APPS19 in the (h) Oracle Web Applications Desktop Integration component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS02 in the (a) CRM Technical Foundation component; (2) APPS03 in the (b) iProcurement component; and (3) APPS04, (4) APPS05, and (5) APPS06 in the Oracle Application Object Library component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS13 and (2) APPS14 in the Oracle iLearning component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6286AB0-08CE-4878-9304-5C9075D2C9F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle PeopleSoft Enterprise Portal 8.4 Bundle 15, 8.8 Bundle 10, and 8.9 Bundle 2 has unspecified impact and attack vectors, as identified by Oracle Vuln# PSE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_portal:8.4:bundle15:*:*:*:*:*:*",
            "matchCriteriaId" : "2999B7ED-939E-41FA-B514-3B826382EE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_portal:8.8:bundle10:*:*:*:*:*:*",
            "matchCriteriaId" : "2503DCC8-ADEA-443F-8033-E0C3A0023AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_portal:8.9:bundle2:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B22D53-E7A4-44B5-9167-32F3EBCD12AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23_L1 has unspecified impact and attack vectors, as identified by Oracle Vuln# JDE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:8.95.f1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D118CD-2C73-4AC8-9028-C828262507F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:sp23_l1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780466DC-6192-4BC0-B1A7-18C70AC4A276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, and Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) has unspecified impact and attack vectors, as identified by Oracle Vuln# DBC01 in the Protocol Support component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "117EF4D2-3EA8-410E-8721-31C3C41A7B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C5E780-C03A-46DB-85A2-2471AF377206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3341ECC8-1E5F-4436-B056-9CA2BAF659E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*",
            "matchCriteriaId" : "D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) has unspecified impact and attack vectors, as identified by Oracle Vuln# DBC02 in the Reorganize Objects & Convert Tablespace component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3341ECC8-1E5F-4436-B056-9CA2BAF659E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B945FDC6-7884-467A-AA4E-F3AB0EE32E6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) FORM01 and (2) FORM02 in the Oracle Forms component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C5E780-C03A-46DB-85A2-2471AF377206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# JN01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*",
            "matchCriteriaId" : "D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*",
            "matchCriteriaId" : "D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Oracle Reports Developer component of Oracle Application Server 9.0.4.1 and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP01 and (2) REP02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP05 and (2) REP06 in the Oracle Reports Developer component. NOTE: Oracle has not disputed reliable researcher claims that REP05 is the same as CVE-2005-2378 and REP06 is the same as CVE-2005-2371, both of which involve directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:6.0.8.26_ps17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE3F656-8A85-4A2B-92E4-3DBA70D172C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_read_any_file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422256/30/7430/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422257/30/7430/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_read_any_file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422256/30/7430/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422257/30/7430/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business Suite and Applications 11.5.10 has unspecified impact and attack vectors, as identified by Oracle Vuln# WF01 in the Oracle Workflow Cartridge component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FFDBFF-C219-49E7-AD16-0657D6D4E8BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3341ECC8-1E5F-4436-B056-9CA2BAF659E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-18T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) WF02 and (2) WF03 in the Oracle Workflow Cartridge component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3341ECC8-1E5F-4436-B056-9CA2BAF659E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C8910-D7E7-4B50-A506-58B425B2BE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive information, such as MAC address and software version, by directly accessing UDP port 9090."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:p2000w_version_2_voip_wifi_phone:wv.00.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF896AB-DEEA-4096-82AD-0C44D12E649D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041438.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041438.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the (1) publishing component, (2) Contact Component, (3) TinyMCE Compressor, and (4) other components in Joomla! 1.0.5 and earlier have unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18513",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/738/66/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/738/66/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the DHCP options field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achal_dhir:dual_dhcp_dns_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0D977B-9283-4D46-BB12-690B30615BE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/dualsbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18486",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/dualsbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone running firmware 1.1.12 (051129) and CP-100E VoIP 802.11b Wireless Phone running firmware 1.1.60 allows remote attackers to gain unauthorized access via the debug service on TCP port 60023."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:clipcomm:cp-100e_voip_wifi_phone:1.1.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E734061E-DAF5-4827-A27E-2FB0FF5F3065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:clipcomm:cpw-100e_voip_wifi_phone:1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD9871B-1A97-4D72-B9BB-AF7F2323D018"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041436.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041439.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041436.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041439.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA Business Protection Suite r2 allows remote attackers to cause a denial of service (CPU consumption or application hang) via a large network packet, which causes a WSAEMESGSIZE error code that is not handled, leading to a thread exit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB993B2-9A44-40E2-AA05-0CAD04BDC26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7461AE5-2067-4964-93B7-560CD02CEAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAE8E8B-7FD6-43CB-B07A-6D3B31E94DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_mobile_backup:r4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9448EC1-7527-4CF9-85FC-26F61714E4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:business_protection_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328E1C42-488A-43FC-8DF2-758DC73B74AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:desktop_protection_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB698F99-FC87-4D59-9E01-3CE7A57FE0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:server_protection_suite:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8781759-7B4C-47C3-8A60-8CA5520360C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43CE892-50CB-429F-B986-6FD4398A1D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C2C33D-8403-4C75-8A52-713393FE408F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D293FB82-D21B-4BDD-A511-B994B557032A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0:sp1:*:en:*:*:*:*",
            "matchCriteriaId" : "63788A55-F137-4F8A-8FDD-9C0B9881DE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0:sp1:*:fr:*:*:*:*",
            "matchCriteriaId" : "D9AB86C1-ABE7-4DB1-A050-2E54607BF3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0_build_6.0.56.3:*:*:en:*:*:*:*",
            "matchCriteriaId" : "8E01F0FB-C836-4B25-9B40-6D0EEDEDFA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0_build_6.0.74:*:*:de:*:*:*:*",
            "matchCriteriaId" : "C45E9E3A-68D4-46D3-8A56-A07A76F4F7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0_build_6.0.74:*:*:en:*:*:*:*",
            "matchCriteriaId" : "1B36DAA2-B8F5-43A6-B407-5FF718383D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0_build_6.0.74:*:*:fr:*:*:*:*",
            "matchCriteriaId" : "C7F41317-348B-4DD7-917C-46C6E2857E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18531",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.designfolks.com.au/karma/DMPrimer/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422381/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0236",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.designfolks.com.au/karma/DMPrimer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422381/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA Business Protection Suite r2 allows remote attackers to cause a denial of service (CPU consumption and log file consumption) via unspecified \"unrecognized network messages\" that are not properly handled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB993B2-9A44-40E2-AA05-0CAD04BDC26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7461AE5-2067-4964-93B7-560CD02CEAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9DAE8E8B-7FD6-43CB-B07A-6D3B31E94DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_mobile_backup:r4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9448EC1-7527-4CF9-85FC-26F61714E4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:business_protection_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328E1C42-488A-43FC-8DF2-758DC73B74AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:desktop_protection_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB698F99-FC87-4D59-9E01-3CE7A57FE0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:server_protection_suite:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8781759-7B4C-47C3-8A60-8CA5520360C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43CE892-50CB-429F-B986-6FD4398A1D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C2C33D-8403-4C75-8A52-713393FE408F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D293FB82-D21B-4BDD-A511-B994B557032A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0:sp1:*:en:*:*:*:*",
            "matchCriteriaId" : "63788A55-F137-4F8A-8FDD-9C0B9881DE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0:sp1:*:fr:*:*:*:*",
            "matchCriteriaId" : "D9AB86C1-ABE7-4DB1-A050-2E54607BF3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0_build_6.0.56.3:*:*:en:*:*:*:*",
            "matchCriteriaId" : "8E01F0FB-C836-4B25-9B40-6D0EEDEDFA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0_build_6.0.74:*:*:de:*:*:*:*",
            "matchCriteriaId" : "C45E9E3A-68D4-46D3-8A56-A07A76F4F7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0_build_6.0.74:*:*:en:*:*:*:*",
            "matchCriteriaId" : "1B36DAA2-B8F5-43A6-B407-5FF718383D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:unicenter_remote_control:6.0_build_6.0.74:*:*:fr:*:*:*:*",
            "matchCriteriaId" : "C7F41317-348B-4DD7-917C-46C6E2857E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18531",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015504",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422381/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0236",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422381/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the filnavn parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmltonuke:htmltonuke:2.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669056A8-B335-4FB4-B0CE-F2DAE1854EF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0226",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted (1) beacon or (2) probe response frames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:05.80211.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://kernelwars.blogspot.com/2007/01/alive.html",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/18353",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015518",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/22537",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16296",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.signedness.org/advisories/sps-0x1.txt",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24192",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:05.80211.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernelwars.blogspot.com/2007/01/alive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.signedness.org/advisories/sps-0x1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:befvp41:1.01.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013C9B86-E324-47CB-8666-204EFA2CF525"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18461",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421929/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422266/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421929/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422266/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mike_helton:aoblogger:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A60D30-6F7F-4B48-8056-BD41E7C60053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/37/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://mikeheltonisawesome.com/viewcomments.php?idd=46",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/16889",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/37/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://mikeheltonisawesome.com/viewcomments.php?idd=46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/16889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mike_helton:aoblogger:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A60D30-6F7F-4B48-8056-BD41E7C60053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/37/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://mikeheltonisawesome.com/viewcomments.php?idd=46",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/16889",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/37/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://mikeheltonisawesome.com/viewcomments.php?idd=46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/16889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mike_helton:aoblogger:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A60D30-6F7F-4B48-8056-BD41E7C60053"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/37/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://mikeheltonisawesome.com/viewcomments.php?idd=46",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/16889",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/37/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://mikeheltonisawesome.com/viewcomments.php?idd=46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/16889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9A3688-C10C-42DD-A5E7-F11B2EEA25EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89CAF7F-5C1A-4FCF-B60C-944045726EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFC1E92-363E-4DA5-AEE6-5F577C5F81B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37613DE-D3F2-4C16-9159-ED13F7CFA2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CC78FF-0362-4EDE-AE99-1FD979385DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1A81CE-D2BD-49FD-AF0B-1115D8F58D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C402AEE5-5E7D-4897-B367-A94B458C5DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3005F4CA-ABB7-4AA4-BB2E-006A608BD82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEE33B-E14A-4688-898F-F9F6CBAF2E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2477042A-A2C5-4F7D-B320-2CC1A7C49A37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18459",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22403",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22404",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22406",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22407",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22409",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22410",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22412",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22413",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22414",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16273",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9A3688-C10C-42DD-A5E7-F11B2EEA25EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89CAF7F-5C1A-4FCF-B60C-944045726EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFC1E92-363E-4DA5-AEE6-5F577C5F81B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37613DE-D3F2-4C16-9159-ED13F7CFA2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CC78FF-0362-4EDE-AE99-1FD979385DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1A81CE-D2BD-49FD-AF0B-1115D8F58D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C402AEE5-5E7D-4897-B367-A94B458C5DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3005F4CA-ABB7-4AA4-BB2E-006A608BD82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FEE33B-E14A-4688-898F-F9F6CBAF2E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2477042A-A2C5-4F7D-B320-2CC1A7C49A37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:indexcor:ezdatabase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "1FCA58C9-033B-4241-A015-2FDC62598818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0515.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18043",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422071/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16257",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://zur.homelinux.com/Advisories/ezdatabase_dir_trans.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0515.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422071/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://zur.homelinux.com/Advisories/ezdatabase_dir_trans.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421B7EB3-0D6B-4E8D-8765-FB82D2ABB4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:8.0:*:plus:*:*:*:*:*",
            "matchCriteriaId" : "F82519AB-EE21-48F9-A4C7-9EAB30FEE12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:9.0:*:classic:*:*:*:*:*",
            "matchCriteriaId" : "5F8C3160-A22D-4B29-A7AC-716CBF5CC1ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://news.com.com/2061-10789_3-6027865.html?part=rss&tag=6027865&subj=news",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18521",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/715730",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6KRSQP",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.com.com/2061-10789_3-6027865.html?part=rss&tag=6027865&subj=news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/715730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6KRSQP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERY_STRING variable.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redkernel:referrer_tracker:1.1.0_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03FAA63-5503-4421-B95B-00F6E473B7D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18473",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16266",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insane_visions:blogphp:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80E27A0-1C91-42A5-BDB2-F4090A2CA6BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/34/summary",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422137/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16269",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/34/summary",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422137/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via \"..\" (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el servidor FTP (puerto 22003/tcp) en Farmers WIFE 4.4 SP1 permite a atacantes remotos crear archivos arbitrarios a través de secuencias \"..\" (punto punto) en (1) PUT, (2) SIZE y posiblemente otros comandos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farmers_wife:farmers_wife:4.4_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690AC0E9-BADE-4304-B4FE-7A8C211CF909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113717162320654&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18508",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.lort.dk/DSR-farmerswife44sp1.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113717162320654&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.lort.dk/DSR-farmerswife44sp1.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bit_5_blog:bit_5_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.01",
            "matchCriteriaId" : "1244AC11-D7EA-4B54-8616-DA67F821F6F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/31/summary",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422068/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16244",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/31/summary",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422068/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service (infinite loop) via \"certain malformed links.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174665BA-F231-45F6-922C-933B8A613009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45833DC-F104-42BB-8688-4DE66AFF72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B316A8E-DED1-427B-8137-11C767E9DF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A75AFB-2706-42FF-8534-B910997987AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F335EB4-1A74-4FAE-ADAF-AC9FB37A80DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116C8AA3-481D-409A-ABA8-C8DA1EE8FF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DCE478-7D30-4BBC-8878-C3745D6ADAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBFFA2C-6768-4CB9-B0B0-BDB79CA1DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0C4A1E-B084-4C78-BEE4-4E733159F367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2571B43E-234C-4312-9640-1E338092A673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D5C7E1-6664-4A90-9E55-1F53F98D7702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963F3C5-A207-4BD3-9C3C-4EBAC1F5B2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE0D158-DB0B-45B2-9E26-E11A7D5D2CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E70F32-2F26-4836-8A4F-0A0B06EAD371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE506B8C-245E-4A7E-A24C-FABB1D4531EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934382C1-088A-4AEE-A71A-E9802AC9C1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A9028E-1BDE-4BA0-A479-7A30020331D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D02E4C1-2BA7-4BC0-9C11-D0F74181DF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728E2852-5658-4DCC-AF1E-718B292F06C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9214FE72-045E-457A-B3C5-BCDFC506DDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB55E62-A345-49F6-ACD0-A710977CA6E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340D0AB-2B4A-4DE6-9FA1-662D8F8205BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C8B11E-5C0B-49B1-ACFA-5926057EF002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A4EA0A-54E1-484A-ADDB-216CBC9C40FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0ABA75-E966-43A2-90B1-89557BB0B7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B28DC19-7E6A-4CC7-86A9-10EA9FD79FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD296DF-21C6-43E4-AC4D-8F57220ECDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AD23BE-5400-43D8-A667-7AE60B0500B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFE2FA-CAE0-42C3-AA84-4F8D59045A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9703151E-85D7-4F81-AFB5-5BC72C44D81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66E99D9-8ED9-445A-908D-58A70A32E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E4BE45-F7F2-46DF-995D-1A7203DF5EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E607C45-A499-4F08-A15E-608EB28788E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38FFBC7-5731-42B7-8BAE-C1F230F4610C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=386609",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=386609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-19T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter to login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspot:webspotblogging:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D607881-196A-49E5-B931-DE297E481453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/41/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422364/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16319",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/forum/forum.php?forum_id=532233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/project/shownotes.php?release_id=387180&group_id=156586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/41/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422364/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/forum/forum.php?forum_id=532233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/project/shownotes.php?release_id=387180&group_id=156586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0019",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-20T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F69843-978D-4686-BC5B-1D09DA4A21BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B53A48-E222-46D9-B84C-AC26DF6AB400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666F5ADD-94D8-42C9-8A38-5D2F10CB213E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE0AED-7918-41E9-A902-AC4070E03132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E19472-47B4-4398-A188-CA5A5D3E7060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17407A2-089E-43A5-9BD5-EFF966F5CC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5E71B-FBA8-472D-827F-078E337724E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4B436D-8D6A-473E-B707-26147208808B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6AB7C9F-48E2-4ACD-80CB-9559DE4C2BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E26B353-4985-4116-B97A-5767CDC732F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB35C02B-9966-41CA-BB8F-61EACB777816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442021C9-BE4D-4BC9-8114-8BEFA9EC1232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D600E27F-A1D6-42C7-8ED1-FD508F5B3AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7036AE90-C7E0-48CE-805D-3F1E04852675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D49AE92-BA00-4A8E-BBFE-1BE994CFA3CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BDBBFE2-D4C6-4466-A173-6AD716503953"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18500",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18540",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18552",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18559",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18561",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18583",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/364",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.361107",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060119-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:019",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/22659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0184.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422464/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422489/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16325",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-245-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0265",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11858",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.361107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060119-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0184.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422489/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427976/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-245-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0045",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-01-20T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linley_henzell:dungeon_crawl:4.0.0_b23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C74254EE-61AA-4790-BF87-583F2D10BA30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18545",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18573",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-949",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22690",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16337",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0303",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24262",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-20T21:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the \"cij\" parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etomite:etomite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6",
            "matchCriteriaId" : "538D6BCB-9210-46D1-9BDA-13E958A5EF2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.etomite.org/forums/index.php?showtopic=4185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.etomite.org/forums/index.php?showtopic=4291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lucaercoli.it/advs/etomite.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423497/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423523/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.etomite.org/forums/index.php?showtopic=4185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.etomite.org/forums/index.php?showtopic=4291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lucaercoli.it/advs/etomite.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423497/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423523/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.php, which causes them to incorrectly define a variable and reveal the path in an error message when a require function call fails."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3885B69F-B9C0-488F-8775-E8E801418E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA565238-52C8-4850-8FDA-C38C057BF6F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.typo3.org/view.php?id=2248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.irmplc.com/advisory015.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422360/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422390/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.typo3.org/view.php?id=2248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.irmplc.com/advisory015.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422360/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422390/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:philippe_jounin:tftpd32:2.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58FAB6C7-C0F4-47F3-BD18-D1F1BF04AE51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18539",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.critical.lt/?vulnerabilities/200",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.critical.lt/research/tftpd32_281_dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/632633",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422405/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.critical.lt/?vulnerabilities/200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.critical.lt/research/tftpd32_281_dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/632633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422405/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in HITSENSER Data Mart Server BS, BS-S, BS-M, BS-L, and EX allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser_data_mart_server:bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250A3EBA-6A51-4263-8E32-4C7916642FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser_data_mart_server:bs_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B620F41B-E972-49FD-8796-466D1214E2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser_data_mart_server:bs_m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6832A0F3-D53F-45F2-8270-47BD70A25905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser_data_mart_server:bs_s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375A7322-A452-413C-A5CA-E926E5E876D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser_data_mart_server:ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F4B2DC-344C-48C5-9F8E-4DEC42D7F9B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18553",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-026_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-026_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0D3AAC-9BB0-49E9-BD67-27A635DA34CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B821AEB0-7C0C-407E-9CCB-EEB16E1A2719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F517D6BA-9793-4A4D-BDC6-2F5349F0B354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E876B0F6-8363-43E0-8E00-E55B04A05F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131E313-CB18-45D7-9F4C-096EB0337B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2D7CE2-1461-4D01-A4B1-9E6F7A68FB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA0436A-8294-44B4-B7D1-62A73BE4DFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9125286-5A7D-4A1B-B5C4-888581B9798C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54143C9E-0EB0-4137-A01A-3E8C8A7412F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89382A13-8E5D-44DC-8D6B-8FD8DCAFE525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C999044-00FE-4DE1-A235-F036FC9AE09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A59F6E-A44B-4949-8487-CB089BF1CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B3525-BD38-47CF-B60A-F392FABDA357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD453B4B-75B9-476D-B1A6-65AB8E09107E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFCAB08-BADA-4231-96E2-B73462A803D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809BC19B-C814-4855-9E0B-387A4137369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gallery.menalto.com/page/gallery_1_5_2_release",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18557",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-13.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22660",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16334",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gallery.menalto.com/page/gallery_1_5_2_release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thiago_melo_de_paula:change_passwd:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04581C7A-8D8D-4BBA-B424-28E2D9D96C1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422414/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/plugin_view.php?id=117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422414/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/plugin_view.php?id=117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Pantomime en Ecartis 1.0.0 snapshot 20050909 almacena los archivos adjuntos de correo electrónico en un directorio accesible al público, lo que puede permitir a atacantes remotos subir archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2005-09-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68072059-A8FB-4145-A2C7-529FCA0E24C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=listar-dev&m=113732552708625&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=listar-dev&m=113770802408358&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16317",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0260",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=listar-dev&m=113732552708625&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=listar-dev&m=113770802408358&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or (2) year parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ar-blog:ar-blog:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05417521-7DFF-4A40-B218-313FE2FF3121"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/422386/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435205/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422386/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435205/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter.  NOTE: some sources claim that the affected parameter is \"q\", but the only public archive of the original researcher notification shows an XSS manipulation in \"Keywords\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freekrai.net:my_amazon_store_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8DBE0E-9B1A-4777-9857-B2D0B887A6A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22626-my_amazon.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18535",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22626",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22626-my_amazon.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a denial of service via multiple unspecified vectors involving (1) long strings received from Active Directory and (2) the filtering of HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E5A18A-572A-4914-8AC7-AEF02C760574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5158D0-ED2B-4716-8A81-385562566A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C7737-404A-4EB3-9A1B-0091116D8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A47DCB-50D3-4CC0-874C-39FF8D09B2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE437407-E9D3-41A7-B5BF-62CD861B3830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810364F5-B6FA-47A2-A5DE-F886CEF1ED70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE280A4-C218-4D2F-88E3-718F19F0E4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591237E-DBA8-42F3-B4A2-BFD537AE0A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC5DAFA-24B9-4C5D-8F7B-9DDDDFAA2342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56C041A-5D92-4B7F-9962-A083E883EA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7223D79B-F096-4265-8D80-F5A41E5A1B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9F17CE-B48E-45A2-BFC9-0D27AF032F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D33CD1F-105E-43CC-B135-76E0AC8CACD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F501CC-BD8E-460F-9251-B492C979676E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84BE69E-9760-4ABE-A8C6-C96AD4ACB56A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD36E240-FDBB-4EB8-B2C2-7B59715EEDF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD7AF9A-54CD-4D15-9D41-D740CC48FF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D7D55B-887B-479D-9067-0CE457C25561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705BC91B-4583-418D-BF68-B219BC04EB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1D191B-ACAF-4871-B553-A55F99827EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7727351-0ED7-45DD-82DE-0FEE92699927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE72890F-2421-4A6B-A8F1-4325F824A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AC89E5-8B9C-4C6B-8976-6A4A6F922858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADAAD5F-3286-464E-A309-9454EE9A663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1437DE-E19A-4C2C-9077-DB1FF48772C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0089BE-856D-4998-BBFE-1F626A43377E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE81F49-05CE-4987-90C0-B6D077B65DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E19BC-6545-45E9-BE2B-0900323C80C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173804A3-04EE-484B-A0CF-8DFFE060EFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF1105-8B53-4EC7-B52A-9344BDC524CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9DC6F1-3DB7-48B3-8202-66450B95C0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7E58F5-627C-40BA-9ACE-0224530D62C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A07C4B-8A49-4126-A957-B16B5A79582B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFD255-A906-4902-9845-C33669CF9795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D0B5DC-4E24-4BCE-B58B-A1DCE2739E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.3_patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FFCAD-7AE9-4A85-B22F-116A8E9ED441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA93A50-82A0-4965-A905-42A04DF3F0B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18542",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22631",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16314",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) via unknown vectors involving \"browsing the web\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E5A18A-572A-4914-8AC7-AEF02C760574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5158D0-ED2B-4716-8A81-385562566A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C7737-404A-4EB3-9A1B-0091116D8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A47DCB-50D3-4CC0-874C-39FF8D09B2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE437407-E9D3-41A7-B5BF-62CD861B3830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810364F5-B6FA-47A2-A5DE-F886CEF1ED70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE280A4-C218-4D2F-88E3-718F19F0E4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591237E-DBA8-42F3-B4A2-BFD537AE0A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC5DAFA-24B9-4C5D-8F7B-9DDDDFAA2342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56C041A-5D92-4B7F-9962-A083E883EA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7223D79B-F096-4265-8D80-F5A41E5A1B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9F17CE-B48E-45A2-BFC9-0D27AF032F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D33CD1F-105E-43CC-B135-76E0AC8CACD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F501CC-BD8E-460F-9251-B492C979676E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84BE69E-9760-4ABE-A8C6-C96AD4ACB56A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD36E240-FDBB-4EB8-B2C2-7B59715EEDF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD7AF9A-54CD-4D15-9D41-D740CC48FF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D7D55B-887B-479D-9067-0CE457C25561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705BC91B-4583-418D-BF68-B219BC04EB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1D191B-ACAF-4871-B553-A55F99827EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7727351-0ED7-45DD-82DE-0FEE92699927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE72890F-2421-4A6B-A8F1-4325F824A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AC89E5-8B9C-4C6B-8976-6A4A6F922858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADAAD5F-3286-464E-A309-9454EE9A663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1437DE-E19A-4C2C-9077-DB1FF48772C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0089BE-856D-4998-BBFE-1F626A43377E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE81F49-05CE-4987-90C0-B6D077B65DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E19BC-6545-45E9-BE2B-0900323C80C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173804A3-04EE-484B-A0CF-8DFFE060EFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF1105-8B53-4EC7-B52A-9344BDC524CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9DC6F1-3DB7-48B3-8202-66450B95C0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7E58F5-627C-40BA-9ACE-0224530D62C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A07C4B-8A49-4126-A957-B16B5A79582B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFD255-A906-4902-9845-C33669CF9795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D0B5DC-4E24-4BCE-B58B-A1DCE2739E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.3_patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FFCAD-7AE9-4A85-B22F-116A8E9ED441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA93A50-82A0-4965-A905-42A04DF3F0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.4_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15AA2B44-367D-44FE-AC99-EC91D3C59A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allows remote attackers to execute arbitrary code via crafted ZIP archives."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2.16:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "1473BDA6-ADD8-41C0-95DD-D82A1317FB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "6CC9AA17-3EF4-4BC5-9E29-5A6525B9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "A9C60C23-FC4D-4D14-B3E3-ECD797888AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_workstations:*:*:*:*:*",
            "matchCriteriaId" : "D04E2381-68CB-455F-8878-17C8E4112C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "4AE00A20-8152-48D9-9AC4-EA359284E635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "6B334073-9FF3-4F75-8702-51DB6937B7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_workstations:*:*:*:*:*",
            "matchCriteriaId" : "2D553EF0-6A08-4DD0-A301-99AADAFBFFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.61:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "5A277838-B3AE-45E4-9E1D-005F63FB7573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.61:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "33C62796-C9C0-485E-A58B-6510AFA80F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.62:*:samba_servers:*:*:*:*:*",
            "matchCriteriaId" : "8A2035B9-D6DE-4091-84B0-EC73F491EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.64:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "2F448567-DCAB-4B5F-B939-5B630A5A9B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.64:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "A49C5BE3-EF09-4B73-A8F7-95B428EB28F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.0:*:linux_client_security:*:*:*:*:*",
            "matchCriteriaId" : "016877EA-FBDE-4E49-8077-CFFCFB8E7DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.0:*:linux_server_security:*:*:*:*:*",
            "matchCriteriaId" : "8CFC86C0-2E3E-4057-808C-358B4B0463F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.01:*:linux_client_security:*:*:*:*:*",
            "matchCriteriaId" : "857DC5D0-BAE2-47DE-92A3-63F4960A8022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.01:*:linux_server_security:*:*:*:*:*",
            "matchCriteriaId" : "789D6655-F3FF-4F6C-BAF6-452D6ECA207B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "095A03CE-6B8F-4275-87BE-44E807F97939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "46F72328-7B69-4A1B-A065-E65544F27A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "A8B5F6AF-561B-45B4-8087-D637FAB9E877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:windows_servers:*:*:*:*:*",
            "matchCriteriaId" : "B7D558FE-0C41-4FC1-AF94-2CDE69FF8CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.11:*:linux_client_security:*:*:*:*:*",
            "matchCriteriaId" : "17C7BE07-1D72-4E06-BDD4-0281BE35CAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.11:*:linux_server_security:*:*:*:*:*",
            "matchCriteriaId" : "FE057604-B92A-4B69-9CD5-189A33C90A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.40:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "461627F0-2CEF-4623-B38E-6B30059B0B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "2BA28970-0DB9-433E-83A1-36BF05DB062A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:windows_servers:*:*:*:*:*",
            "matchCriteriaId" : "C0D25A1D-2B31-4B29-96FE-A793F8244F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "AC90ADFD-32FE-4EA1-9583-5EFE585152CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "B490FC59-616A-4F90-95D8-50F9C0D6CB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:windows_servers:*:*:*:*:*",
            "matchCriteriaId" : "858468E0-4208-4703-A3AA-4BF6CC254DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "4E26052D-35B8-44E7-8F66-442BA55F4483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.43:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "352EE11B-2385-4359-BEA1-706FEA3E9D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.44:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "D35E1591-553E-42F0-AE3E-16A2A5640F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.51:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "99727375-701D-4AD9-9410-B69B7603807C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "CAB9474C-A4F9-45C0-A77C-34B794AE2262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "CBA4A9B7-626A-4539-852F-96C49D860E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:windows_servers:*:*:*:*:*",
            "matchCriteriaId" : "AD772D28-E146-470A-AAD6-838587420FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.54:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "6D9796D5-C957-410D-96A8-7C1AC1D614A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.55:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "94B734B9-4D8C-4195-AA01-83DDEC535BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.61:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "AEF8C12D-ADF4-4FAE-8B13-B69BFA5AFF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.01:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "F874EF46-3E17-4A51-A576-7E0BFE1FD4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.01:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "1171FFA9-4898-4174-AD17-C6E47A120585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.2:*:firewalls:*:*:*:*:*",
            "matchCriteriaId" : "A937E670-6263-4497-B17F-1D19D48ED6CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.2:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "4401535F-9AC5-4419-A6B6-9A877887A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "19828867-7079-4233-A3B8-BF7A3052FB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.30:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "97610DB9-0379-4EB3-95E6-9B5C21E5A6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.30_sr1:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "5777A2C3-5EB0-495E-8E0E-94BCA86D5E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.31:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "2D43D811-F305-4709-9C43-862A7FC783B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.40:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "375B5B66-822B-4142-BAA3-0928DE7A8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F996B07-8B07-42A6-86FC-B5B55F708861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2C1784-2482-4CBE-BE6D-4519C3FB64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0429B86A-F228-44E8-ABBB-D57BEE3679F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A0FDD3-3364-4452-BD6F-EB6F85D3119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788A5AB-C847-476C-9767-C6711F2D4EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:2.06:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "33E76051-5D4A-4C8C-A911-3B78BFEA77CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:2.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "CC709820-939F-438A-8CAD-A9D4E192C332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:2.14:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "46AD4E4B-E01A-4CC5-8D05-14B5B6935408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC782BFC-6BA0-4823-8A6D-F7D83F55393C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B09025-47B9-4F77-9DA6-80885E9A4EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05453A15-69B7-40AD-B14E-D00432DC4344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54C74DD-DDF7-4747-8A59-F67114412BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:solutions_based_on_f-secure_personal_express:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99B3025-7A16-4AD8-A5F8-2CE2D7E3E102"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18529",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-103.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-1.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-103.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-1.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "6CC9AA17-3EF4-4BC5-9E29-5A6525B9AC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "A9C60C23-FC4D-4D14-B3E3-ECD797888AB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "4AE00A20-8152-48D9-9AC4-EA359284E635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "6B334073-9FF3-4F75-8702-51DB6937B7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_workstations:*:*:*:*:*",
            "matchCriteriaId" : "2D553EF0-6A08-4DD0-A301-99AADAFBFFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*",
            "matchCriteriaId" : "C8C41338-0651-425E-A823-C8CBD91977D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.61:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "5A277838-B3AE-45E4-9E1D-005F63FB7573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.61:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "33C62796-C9C0-485E-A58B-6510AFA80F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.62:*:samba_servers:*:*:*:*:*",
            "matchCriteriaId" : "8A2035B9-D6DE-4091-84B0-EC73F491EC43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.64:*:linux_gateways:*:*:*:*:*",
            "matchCriteriaId" : "2F448567-DCAB-4B5F-B939-5B630A5A9B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:4.64:*:linux_servers:*:*:*:*:*",
            "matchCriteriaId" : "A49C5BE3-EF09-4B73-A8F7-95B428EB28F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.0:*:linux_client_security:*:*:*:*:*",
            "matchCriteriaId" : "016877EA-FBDE-4E49-8077-CFFCFB8E7DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.0:*:linux_server_security:*:*:*:*:*",
            "matchCriteriaId" : "8CFC86C0-2E3E-4057-808C-358B4B0463F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "46F72328-7B69-4A1B-A065-E65544F27A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "A8B5F6AF-561B-45B4-8087-D637FAB9E877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:windows_servers:*:*:*:*:*",
            "matchCriteriaId" : "B7D558FE-0C41-4FC1-AF94-2CDE69FF8CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.11:*:linux_client_security:*:*:*:*:*",
            "matchCriteriaId" : "17C7BE07-1D72-4E06-BDD4-0281BE35CAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.11:*:linux_server_security:*:*:*:*:*",
            "matchCriteriaId" : "FE057604-B92A-4B69-9CD5-189A33C90A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "2BA28970-0DB9-433E-83A1-36BF05DB062A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "AC90ADFD-32FE-4EA1-9583-5EFE585152CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "B490FC59-616A-4F90-95D8-50F9C0D6CB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:windows_servers:*:*:*:*:*",
            "matchCriteriaId" : "858468E0-4208-4703-A3AA-4BF6CC254DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "4E26052D-35B8-44E7-8F66-442BA55F4483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.43:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "352EE11B-2385-4359-BEA1-706FEA3E9D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.44:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "D35E1591-553E-42F0-AE3E-16A2A5640F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "CAB9474C-A4F9-45C0-A77C-34B794AE2262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "CBA4A9B7-626A-4539-852F-96C49D860E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:mimesweeper:*:*:*:*:*",
            "matchCriteriaId" : "0D47BE5A-D3C9-4B97-AFB1-633AE69F911E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:windows_servers:*:*:*:*:*",
            "matchCriteriaId" : "AD772D28-E146-470A-AAD6-838587420FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.55:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "94B734B9-4D8C-4195-AA01-83DDEC535BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.01:*:client_security:*:*:*:*:*",
            "matchCriteriaId" : "F874EF46-3E17-4A51-A576-7E0BFE1FD4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.01:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "1171FFA9-4898-4174-AD17-C6E47A120585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.2:*:firewalls:*:*:*:*:*",
            "matchCriteriaId" : "A937E670-6263-4497-B17F-1D19D48ED6CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.2:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "4401535F-9AC5-4419-A6B6-9A877887A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "19828867-7079-4233-A3B8-BF7A3052FB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.30:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "97610DB9-0379-4EB3-95E6-9B5C21E5A6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.30_sr1:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "5777A2C3-5EB0-495E-8E0E-94BCA86D5E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.31:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "2D43D811-F305-4709-9C43-862A7FC783B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.40:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "375B5B66-822B-4142-BAA3-0928DE7A8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831F0C4D-C85F-46DA-BC9E-D3F56DE2B085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F996B07-8B07-42A6-86FC-B5B55F708861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2C1784-2482-4CBE-BE6D-4519C3FB64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0429B86A-F228-44E8-ABBB-D57BEE3679F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A0FDD3-3364-4452-BD6F-EB6F85D3119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788A5AB-C847-476C-9767-C6711F2D4EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_personal_express:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DE7015-C1FF-4803-8B28-5AF5ECC3AAB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_personal_express:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04F7296-3290-40D1-9CFB-E52FADAE5719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_personal_express:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9A0DDB6-4B86-430E-879A-C835DBB96C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_personal_express:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA95C918-917F-4A49-822C-487A07E6F91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:2.06:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "33E76051-5D4A-4C8C-A911-3B78BFEA77CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:2.14:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "46AD4E4B-E01A-4CC5-8D05-14B5B6935408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B09025-47B9-4F77-9DA6-80885E9A4EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05453A15-69B7-40AD-B14E-D00432DC4344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54C74DD-DDF7-4747-8A59-F67114412BFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18529",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-103.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-1.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16309",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-103.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-1.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via a long publisher URI in a torrent file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitcomet:bitcomet:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4351454E-C759-4458-871B-2EE2040F5079"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0442.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0669.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18522",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bitcomet.com/doc/changelog.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/FSA-2006-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422361/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16311",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0669.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bitcomet.com/doc/changelog.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/FSA-2006-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422361/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service (device hang and network traffic loss) via a crafted UDP packet to port 9900."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C398460-3F38-4AA7-A4B1-FD8A01588DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050ACB3-E5B2-4710-910B-F3DF4B49907F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7977DA9F-41DE-4482-B0CD-896EEEFB5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADAB898-7728-4C14-B69A-7B8B06AFC894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F54F0C-AC91-4CB7-9FEB-257F03547864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6A0D017-F26F-4429-891E-C7E1C66B6588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A85892-C3AB-4920-A949-A71BD0332D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F1E38-3482-4EAC-8654-EBC004B9344B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E488E6E-87F0-4292-B97B-31087FDB4655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA979D75-F60E-45F8-B99C-1402DC8CFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09458CD7-D430-4957-8506-FAB2A3E2AA65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56365432-1E57-4D35-B764-DDDA878B96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18490",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015501",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060118-sgbp.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060118-sgbp.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CPU consumption and crash) via a malformed query string containing special characters such as \"|\"."
      }, {
        "lang" : "es",
        "value" : "RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 permite a atacantes remotos provocar una denegación del servicio (consumo de CPU y caída) a través de una cadena de consulta mal formada que contiene caracteres especiales tales como \"|\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:7.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8557C01B-4127-4438-AD26-720307949A21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113777628702043&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18551",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22678",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0284",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113777628702043&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1/NetInsight II allows attackers to stop the Port Discovery service via unknown vectors involving \"invalid format data\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_advance:r_15237_9154_07_50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37BD2D90-E2AD-417A-BBC9-14FC98B54C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D13FE2-8369-47EB-AC51-4047EFEE7982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2356495C-1594-4A89-B679-42F7E5DD8DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E283BA06-C4AD-4060-82D3-48FF40258D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F662DA2-E482-4146-B720-C643ED68BF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DDB231-0486-451B-9529-E367CC9888DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D930AF9-A6C1-48BB-93D7-B71E224EBFE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14A93EF-C930-4DF0-B37D-2A7570590577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F114FBB-0926-449E-8391-DB33D823F176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42507579-479B-4ABC-8662-E03F71220B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B434C54B-80AD-4CB5-B86D-97D3316DC0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D36336-D5BC-4674-A850-1867B6A973DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_netsight_ii_port_discovery_standard:r_15237_9164_07_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DD7EB8-05FC-4323-9948-5C9DE5631616"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18538",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-027_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS05-027_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the (1) STOR and (2) RETR commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intervations:filecopa:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6210FC1-91FA-448D-80EF-24350AB97CDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18550",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nii.co.in/vuln/filecopa.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nii.co.in/vuln/filecopa.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php.  NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saral_kaushik:saralblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3641DC-F1CD-44C0-97EE-D2C612CA9914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/40/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/40/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saral_kaushik:saralblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3641DC-F1CD-44C0-97EE-D2C612CA9914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/40/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/40/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via \"../\" (dot dot) sequences in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E4BEE-A5B1-474C-892A-08680690E784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266F578-79ED-48F9-A686-BBBBDF1CCB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589737-6A1F-4F63-8330-CE1374A7F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BE6CD0-2901-44EC-A065-EDA5FF4831E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC1C1A-DEC0-45DA-B09A-B029426732A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E19C713-B881-4CC9-AB40-A5B12B7D14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E77FC6F-10A7-489B-8644-FBFA8C9E5326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B9943E-81C9-43A4-A5E2-9BDD62456EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB784D24-C980-4030-9E0E-9F7AE3FFD429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158E603A-4C79-4C29-85CE-0BEBB485F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33629F82-9C9A-44C4-85A9-6B61F8760767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34F0566-DCF7-4CAA-980A-78B989CC5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F69F7E5-0EAA-48F5-A358-F42576776745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://midas.psi.ch/elog/download/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18533",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16315",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://midas.psi.ch/elog/download/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service (server crash) via unknown attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E4BEE-A5B1-474C-892A-08680690E784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266F578-79ED-48F9-A686-BBBBDF1CCB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589737-6A1F-4F63-8330-CE1374A7F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BE6CD0-2901-44EC-A065-EDA5FF4831E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC1C1A-DEC0-45DA-B09A-B029426732A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E19C713-B881-4CC9-AB40-A5B12B7D14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E77FC6F-10A7-489B-8644-FBFA8C9E5326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B9943E-81C9-43A4-A5E2-9BDD62456EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB784D24-C980-4030-9E0E-9F7AE3FFD429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158E603A-4C79-4C29-85CE-0BEBB485F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33629F82-9C9A-44C4-85A9-6B61F8760767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34F0566-DCF7-4CAA-980A-78B989CC5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F69F7E5-0EAA-48F5-A358-F42576776745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://midas.psi.ch/elog/download/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18533",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16315",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://midas.psi.ch/elog/download/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:eggblog:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0512EBD8-44A0-4DF5-8DF9-725216C269F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0371.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/39/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015505",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16305",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0371.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/39/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:eggblog:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0512EBD8-44A0-4DF5-8DF9-725216C269F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0371.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/39/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015505",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16305",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0371.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/39/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified \"critical denial-of-service vulnerability\" in MyDNS before 1.1.0 has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC34DC23-117A-403E-9C87-79B1C512A5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE559DF-3874-42E7-BB5B-8968E52D7A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5359874-602B-4EB2-8F30-A9E3E418556E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11068A01-20FB-4039-8919-85CF93F0FF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5B6A09-E166-4139-A592-76E1A9BB496A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D64650-5955-4269-8D08-4B0CD410C9DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCBD3BDC-4BBD-45EE-9C63-5DB564FF2F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA0BB14-D934-4308-8D3E-287BC08CCF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6881A5E3-253C-4668-9795-955A06A82049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC1A4DE-B032-4A64-8154-DA56B52E7E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F13CDFF-77C6-4C3C-9A41-5752577102B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B49E1F37-6877-4F38-968B-46CD49FA3171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6878C5C9-F0B7-4290-9EEB-8404BD77BFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7465EA92-7DEA-4CE9-89F0-A42B289816DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B7259A-EE66-4967-A8E7-978BD8DE1695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1505551-DE83-4ED4-8417-391397BA1475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C31DDD-02F6-4BFA-A5A4-DC8EAE4C2227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAB367C-AF5F-4DA5-826D-A7A41ABB3F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C37E6C-257F-488B-A107-B05164AE4543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B3D730-15C0-494A-A0B6-231C9F370A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A940A2-02E3-4F2F-9D91-A54C7FBD4531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F25AD9-E73C-4CC1-8572-7EB79641FFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34615890-E75D-40F9-A653-D2655CDF9057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7201B3E5-3F6F-4BAF-9FB6-A5F1C81B894C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CDDF69-6514-46C9-ADC1-4ACAEF6093BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3361EA61-9ACF-4836-8C44-C45EE29F9BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mydns.bboy.net/download/changelog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18532",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22636",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mydns.bboy.net/download/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-21T01:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (login credentials) via a direct request.  NOTE: It was later reported that 1.1.2 is also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluffington:flog:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31426245-C8FC-453E-86BE-987FB8D7468F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluffington:flog:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6879EBB-72F6-4AA8-A318-5B2B84CA6A52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/38/summary/bt/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422268/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456069/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/38/summary/bt/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456069/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0353",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-01-22T19:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:lsh:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AE9D23-0E20-45ED-B605-0E8733884F7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.lysator.liu.se/pipermail/lsh-bugs/2006q1/000467.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18564",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18623",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-956",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22695",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16357",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0301",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24263",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.lysator.liu.se/pipermail/lsh-bugs/2006q1/000467.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 5.5,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D954F30-8AD0-41E9-8D62-BEFEBDCB3B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1130ag:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D56D069-0E19-4E60-A30A-23C27964B674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8B5553-7295-4786-9F81-B4527EAD4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1230ag:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01A48851-D4D5-4ABC-A44A-F82A97882C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1240ag:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17BBE092-4156-45E8-A7ED-55C2765580CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02967F7-FC29-460E-A07E-99397E55A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap1400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84F4CEF-F599-48EE-A5FA-252880332A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:aironet_ap350:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF8AA1B-17C3-49E3-BA0F-17FFCE2AAE03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18430",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015483",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060112-wireless.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060112-wireless.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command and an NLST command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helmsman_research:homeftp:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9728286F-A3E4-4615-8CCA-89EAF152FE13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-202.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-202.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ari_pikivirta:home_ftp_server:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55F1ABF-DB7D-4A7B-A9FD-DA93EFF7D1C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kapda.ir/advisory-211.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422033/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-211.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422033/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grant_averett:cerberus_ftp_server:2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B0963E-2CA6-46AA-8931-09E8E6C861C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cerberusftp.com/cerberus-releasenotes.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-210.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422162/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cerberusftp.com/cerberus-releasenotes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-210.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422162/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL commands via the search parameter in (1) index.php and (2) search.php. NOTE: This issue might overlap CVE-2004-0663.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerportal:powerportal:1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7894AF63-7158-49B6-957C-0F95628AF78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerportal:powerportal:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06B14A8-85BF-49EF-B261-FD70F05A2D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerportal:powerportal:1.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62FED84-52E1-466B-9EE0-6679A84ED625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/10172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.archive.org/web/20050303003128/http://powerportal.sourceforge.net/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422151/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/10172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.archive.org/web/20050303003128/http://powerportal.sourceforge.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422151/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device crash) via SIP INVITE commands with a long header field name sent during startup and (2) cause a denial of service (device hang or crash) via SIP INVITE commands with a long header field name sent during a call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpath:eyebeam_sip_softphone:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE611559-D1E7-4AF6-970E-7C7275464378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.donews.com/zwell/archive/2006/01/17/698810.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446573/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.donews.com/zwell/archive/2006/01/17/698810.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446573/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:mpm:hp-180w_voip_wifi_phone:we.00.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "960939C8-F01C-4EE3-8D1C-1CDD5C4781BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041437.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18512",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an <a> tag in the comment parameter, which strips most tags but not <a>."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bit_5_blog:bit_5_blog:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E98DCFF-13EE-435F-943B-AF3C8A230E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/32/exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/32/summary/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421994/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16246",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/32/exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://evuln.com/vulns/32/summary/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421994/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header."
      }, {
        "lang" : "es",
        "value" : "TippingPoint Intrusion Prevention System (IPS) TOS en versiones anteriores a 2.1.4.6324 y TOS 2.2.x en versiones anteriores a 2.2.1.6506, permiten a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de un vector desconocido, probablemente involucrando una petición HTTP con un número negativo en la cabezera Content-Length."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:3com:tippingpoint_ips_tos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.3.6323",
            "matchCriteriaId" : "7394B102-F6A5-400A-A6FB-77F9F165DC7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:3com:tippingpoint_ips_tos:2.2.0.6504:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02698EC-073F-4C85-8C9F-4473067553DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.php?storyid=1042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22504",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Remember my Password\" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\\Software\\Microsoft\\IdentityCRL\\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated by the \"MSN Password Recovery.exe\" program.  NOTE: it could be argued that local-only password recovery is inherently insecure because the decryption methods and keys must be stored somewhere on the local system, and are thus inherently accessible with varying degrees of effort.  Perhaps this issue should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:msn_messenger:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101DC146-9945-4990-9225-5C10696EA3C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.msn-password-recovery.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421921/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422283/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.msn-password-recovery.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421921/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422283/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as demonstrated by \"&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0332.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18544",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_software:xmb_forum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695C9E25-0D9D-46E4-B683-4E1553B715C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/27920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422277/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422277/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "This CVE is considered invalid because it provides neither a description nor a version number adequate to identity any vulnerability in XMB. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:32:58.923"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a BBCode img tag."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Phpclanwebsite (también conocido como PCW) permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URI javascript en una etiqueta BBCode img."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83CDE4-12C0-42AF-8F4E-E383791BA81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18541",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422265/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://archive.cert.uni-stuttgart.de/bugtraq/2006/01/msg00343.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422265/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://archive.cert.uni-stuttgart.de/bugtraq/2006/01/msg00343.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "A simple fix has been released on the Main PCW site available directly at <a href=\"http://www.phpclanwebsite.com/index.php?page=downloads&func=browselist&par=1\">http://www.phpclanwebsite.com/index.php?page=downloads&func=browselist&par=1\r\n</a>Please download and install imediately."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a \"crafted URL on the CCMAdmin web page.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BF1392-C6E2-4946-9B9E-A64BFE7E8057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA117831-013A-4B62-90EA-9F87D0DBACF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08E2D6A-1B4C-4BDA-8FF7-8D61A393460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7E0B10-11E0-44B7-A450-AA5AB058C6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C25529-9048-46E8-8A59-61CAD59C2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70ADFE52-9C89-4C29-AC74-7F510326F810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D9BE35-E2AA-42A4-BECB-1BD33F2D9F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(3\\)es61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B333B6A2-36AE-45D8-81E6-7B13C0235774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(4\\)es25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8974FCAC-BE8B-4F87-91D5-E4D3C38A0262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2188FD-29C8-4184-9E85-3875A53BB193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0\\(2a\\)es40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31D0C8B-462C-4AC2-9F8C-1F22607C7438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0\\(2a\\)sr2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5502603F-E499-4B44-955E-4A9D63FA4360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(2\\)es33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E82520-D83E-4259-B7BC-76320FF948A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)es07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291B6C1C-C3F3-4016-AF50-4D8D90227357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9AA9D0-3205-4A5D-8161-C80D1855D91E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18501",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015502",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22621",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0250",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DE5E22-DF93-46BE-85A3-D4E04379E901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BF1392-C6E2-4946-9B9E-A64BFE7E8057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA117831-013A-4B62-90EA-9F87D0DBACF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08E2D6A-1B4C-4BDA-8FF7-8D61A393460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7E0B10-11E0-44B7-A450-AA5AB058C6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C25529-9048-46E8-8A59-61CAD59C2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.1\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70ADFE52-9C89-4C29-AC74-7F510326F810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D9BE35-E2AA-42A4-BECB-1BD33F2D9F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(3\\)es61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B333B6A2-36AE-45D8-81E6-7B13C0235774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(4\\)es25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8974FCAC-BE8B-4F87-91D5-E4D3C38A0262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2188FD-29C8-4184-9E85-3875A53BB193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(5\\)es30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D311940-8FB8-44A5-9B1E-9730342554E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0\\(2a\\)es40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31D0C8B-462C-4AC2-9F8C-1F22607C7438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0\\(2a\\)es62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B524C24E-0413-4DF0-A4D1-14B85C690574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.0\\(2a\\)sr2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5502603F-E499-4B44-955E-4A9D63FA4360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(2\\)es33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E82520-D83E-4259-B7BC-76320FF948A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(2\\)es55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25A4042-1F70-498E-8BB3-9B8A29C0EF28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)es07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291B6C1C-C3F3-4016-AF50-4D8D90227357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)es32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DB7A16-9B5E-4EC7-95BE-5C028AA5E9AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9AA9D0-3205-4A5D-8161-C80D1855D91E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18494",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the \"SELECT * FROM information_schema.views;\" query, which returns the query that created the VIEW.  NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/422491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422592/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422698/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423180/30/7310/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423204/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423228/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423432/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422592/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422698/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423180/30/7310/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423204/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423228/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423432/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noah_medling:rcblog:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0687948-6158-471D-B5F2-F635804288DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/42/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fluffington.com/index.php?page=rcblog",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422499/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/42/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fluffington.com/index.php?page=rcblog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422499/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly including one that stores the administrator's account name and password, via a .. (dot dot) in the post parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noah_medling:rcblog:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0687948-6158-471D-B5F2-F635804288DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/42/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fluffington.com/index.php?page=rcblog",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422499/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425392/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436784/30/4500/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16342",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/42/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fluffington.com/index.php?page=rcblog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422499/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425392/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436784/30/4500/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) blogphp_username or (2) blogphp_password parameter in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insane_visions:blogphp:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80E27A0-1C91-42A5-BDB2-F4090A2CA6BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422483/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422484/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422593/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16340",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422483/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422484/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422593/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "BlogPHP version 2.0 was released to fix the config.php exploit and is available for download at <a href=\"http://sourceforge.net/project/showfiles.php?group_id=156043\">http://sourceforge.net/project/showfiles.php?group_id=156043</a>."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:douran:followweb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BA36-CC40-4C9A-A99C-CE52912D6B26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/27918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which (1) might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB remote debugging ONCRPC (aka wdbrpc) on UDP 17185, (2) reflect network data using echo (TCP 7), or (3) gain access without authentication using rlogin (TCP 513)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:advantage_century_telecommunication:p202s:1.01.21_firmware_1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7D6FEB-0F92-4D2D-89E9-D9766F15ECE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18514",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:advantage_century_telecommunication:p202s:1.01.21_firmware_1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7D6FEB-0F92-4D2D-89E9-D9766F15ECE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18514",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-22T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when (1) it establishes an association with a station in ad hoc (aka peer-to-peer) mode or (2) a station in ad hoc mode establishes an association with it, which allows remote attackers to put unexpected wireless communication into place."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:home:*:*:*:*:*",
            "matchCriteriaId" : "A4AAFE24-2E27-4E1A-BB2C-DFEDDB98B2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nmrc.org/pub/advise/20060114.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5YP0D2KHHO.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421868/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.theta44.org/karma/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nmrc.org/pub/advise/20060114.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5YP0D2KHHO.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/421868/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.theta44.org/karma/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-23T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web script or HTML via the product_id parameter, as originally demonstrated for a custom mp3players_details.php program.  NOTE: the name of the affected program might be installation-dependent, but it has been identified as \"product_details.php\" by some sources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netrix:x-site_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9E68B4-E8A5-401F-9A21-675492FA91BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22634-x-site.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18537",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22634-x-site.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0036",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-23T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service (memory corruption or crash) via an inbound PPTP_IN_CALL_REQUEST packet that causes a null pointer to be used in an offset calculation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=15db34702cfafd24acc60295cf14861e497502ab",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18482",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24203",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=15db34702cfafd24acc60295cf14861e497502ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0037",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-23T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service (memory corruption or crash) via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linear SKBs (socket buffers) are used."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=03b9feca89366952ae5dfe4ad8107b1ece50b710",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18482",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16414",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24204",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=03b9feca89366952ae5dfe4ad8107b1ece50b710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-24T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F90AFA-4B13-46A0-89D7-4065300C94C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fetchmail:fetchmail:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAD0F05-8B55-43ED-89D5-61A19F41EDFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.berlios.de/project/shownotes.php?release_id=8784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422936/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://developer.berlios.de/project/shownotes.php?release_id=8784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of Fetchmail as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument (alternative configuration file name)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Library of Assorted Spiffy Things (LibAST) 0.6.1 y anteriores, usado en Eterm y posiblemente otros programas, permiten a usuarios locales ejecutar código de su elección como el usuario utmp mediante un argumento -X largo (nombre de fichero de configuración alternativo="
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libast:libast:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40B2722-86E9-4BB5-8FDF-D35CAD82D966"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libast:libast:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69500A-FD6F-4E4F-A114-6E430ED89A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libast:libast:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD09411-CAA0-423A-A111-69A8B27227A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libast:libast:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C24BE74-A42B-4856-AD50-7DC7AA9C9B57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/libast/?branch_id=17907&release_id=217840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rosiello.org/en/read_bugs.php?id=25",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423088/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423207/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423366/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16350",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/libast/?branch_id=17907&release_id=217840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200601-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rosiello.org/en/read_bugs.php?id=25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423088/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423207/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423366/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en Zoph anteriores a 0.5pre1 permite a atacantes remotos ejecutar órdenes SQL de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_geiger:zoph:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2AF44E-6CBA-4C9B-BDD0-25A67D9F2BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_geiger:zoph:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F25EA92-9781-4E31-AA01-E3C996D43DB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18563",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=69353&release_id=387320",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=69353&release_id=387320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the \"monthly\" parameter, but this is incorrect."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en e-moBLOG 1.3 permiten a atacantes remotos ejecutar órdenes SQL de su elección mediante el  parámetro (1) \"monthy\" de index.php o el parámetro (2) \"login\" de admin/index.php. NOTA:  Algunas fuentes han informado que el artículo (1) implica el parámetro \"monthly\", pero esto es incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-moblog:e-moblog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A74D9B-4848-44A2-98D1-0F79B06403E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000511.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/43/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18567",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015524",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422938/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16344",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0296",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000511.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/43/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to archive/.phpass-admin, which contains encrypted passwords."
      }, {
        "lang" : "es",
        "value" : "Note-A-Day Weblog 2.2 almacena información sensible bajo la raíz de documentos web con control de acceso insuficiente, lo que permite a atacantes remotos obtener información sensible mediante una petición diferente a archive/.phpass-admin, que contiene contraseñas cifradas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mike_macgirvin:note-a-day_weblog:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2671D1-AE03-44BC-B5E1-9960AF8DF974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0389.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/44/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0389.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/44/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField function."
      }, {
        "lang" : "es",
        "value" : "La función TIFFFetchShortPair en tif_dirread.c en libtiff 3.8.0 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante una imagen TIFF artesanal que dispara una desreferencia a puntero NULO, posiblemente debido a cambios en declaraciones de tipos y/o la función TIFFVSetField."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC5E2C-B6A6-4999-A1EA-B91DA5C350C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18587",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20345",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0302",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://cwe.mitre.org/data/definitions/476.html\r\n'CWE-476: NULL Pointer Dereference'",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of libtiff as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters."
      }, {
        "lang" : "es",
        "value" : "search.php en MyBB 1.0.2 permite a atacantes remotos obtener información sensible mediante una cierta petición de búsqueda que revela el prefijo de tabla en un mensaje de error SQL, posiblemente debido a parámetros no válidos.º"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18577",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422227/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422227/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter.  NOTE: the original disclosure specified the name parameter, but a correction was later provided. NOTE: followup posts have both disputed and confirmed the original claim."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en post.php en AZ Bulletin Board (AZbb) 1.1.00 y anteriores permiten a atacantes remotos inyectar 'script' web arbitrario o HTML mediante el parámetro (1) \"nickname\" y la etiqueta (2) \"iframe\" en el parámetro \"topic\". NOTA: la información original especificaba el parámetro \"nombre\", pero fue provista un corrección posterior. NOTA: Subsiguientes mensajes han disputado y confirmado la afirmación original."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "939D82E6-38D9-4E4C-BC49-853233032584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.0rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6081A7-D471-448D-95F7-6E5166D2686C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382B925E-C27F-4C7C-A267-115620E8FF23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C62998-3908-4FEC-970C-EFEECEE74C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85A6EE8-2865-45CE-93E0-EC49F9083205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89609095-529E-48B7-9EDF-5DAC1797E4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E67B981-79D8-4763-B5EA-3222BF8EBEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B492BD-3D65-4BB9-9C6A-064399254238"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F044064-ED89-4A59-B28D-C8F996F420B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBA7461-71B1-4F0C-8239-354A3382322B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8557351D-A835-4D16-97F7-29A5111DBAFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F519ADB-D0C8-4BD3-AF62-023B7F696066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B80696-8241-4480-A927-F8A56CC2A74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147247D2-7D7F-4CB0-AA84-F37F92833F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64917D79-8A70-497F-8AAC-B1AD98942AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azbb:az_bulletin_board:1.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8EF66C-BB88-4DA4-BD31-4101B33B4C15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-236.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423353/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423363/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427076/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427076/30/6510/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427194/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16351",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-236.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423353/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423363/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427076/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427076/30/6510/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427194/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and execute arbitrary code via unspecified vectors, possibly involving command line arguments."
      }, {
        "lang" : "es",
        "value" : "El útil rsh en Sun Grid Engine (SGE) anteriores a 6.0u7_1 permite a usuarios locales ganar privilegios y ejecutar código de su elección mediante vectores no especificados, posiblemente implicando argumentos de línea de órdenes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4F54AD-2C70-44AE-B4CD-CA62EAAEC38C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:6.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "69BCDA42-C66B-4C4C-A9B0-805D5F377AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:6.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6E17D9-C376-4269-8F94-74442F8634AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:6.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5F7AA-AAD0-4A40-A087-91073034F667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:6.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "640673D1-A124-4013-A27F-053785085FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:6.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B4C019-41C1-4AF9-B3CA-D00D817D4104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:6.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B1FB44-3731-43F5-A1D7-450FF85D32F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:6.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "E8686414-C0EE-47A9-8A42-D352868F842E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gridengine.sunsource.net/project/gridengine/60patches.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gridengine.sunsource.net/project/gridengine/60patches.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the \"Add Comment\" field in a comment popup."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Pixelpost  Photoblog 1.4.3 permite a atacantes remotos inyectar 'script' web de su elección o HTML mediante el campo \"Añadir Comentario\" en una ventana emergente de comentario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:photoblog:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F376337-499A-4E94-9A31-65F57CEA9856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/45/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18572",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423384/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16362",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/45/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423384/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en ADOdb anteriores a 4.71, cuando se usa PostgreSQL, permite a atacantes ejecutar órdenes SQL de su elección mediante vectores de ataque no especificados implicando cadenas binarias."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F76566C-7F49-4725-91E6-8E2416CB7F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F0F5B5-86D2-48C4-872E-3F8C38AF563C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1503DB-7F84-4F33-8357-7D877529F15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18575",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0225",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice."
      }, {
        "lang" : "es",
        "value" : "scp en OpenSSH 4.2p1 permite a atacantes ejecutar órdenes de su elección mediante nombres de ficheros que contienen metacaractéres o espacios, que son expandidos dos veces."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580008AC-2667-4708-8F7E-D70416A460EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05D8E86-EC01-4589-B372-4DEB7845C81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764AD252-CA2F-4A87-BCAA-7747E8C410E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BB9F7-55E5-4CB3-8429-C37C7132799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E6F639-31A0-4026-B6D4-51BA79FB1D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0211BCE3-0DED-40BA-8A21-1A97B91F71C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD7BB30-AC79-4153-852C-1053DCF4DE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9039BE91-AF0A-41E7-8F9F-15375890E120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BCB2EA-DF9D-4853-805B-29FA6274E2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F93417F-2498-4576-9F5D-B59F77D39669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3AB42C-B614-4746-99AD-E94140D91BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458167E5-9BC2-40BE-AC8A-9761A4F19494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86ACA0ED-A3D0-48A7-B06F-13709AD23B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB9262-D05E-4610-9C79-3EDE44AC7C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8176879B-1875-4AC9-B15A-2ABCFCD04F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA26A12-F96A-4025-BBCA-72B7A3B1E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02751E9-2D38-4495-9572-8D84D71D4773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A36BEA2-DAE4-423C-8D85-0F6036351F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DC64F6-FE28-44BA-91D1-EC2DB11B2CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CCF5CD-B434-4392-A79A-C1945D2AE30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB456B8-9D8B-4985-858D-6A43FA5EE2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD4E0F6-4EEA-4EC7-83E7-FC6F7D2E7A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35F4ABE-1B0C-4195-8F99-BF993A17882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC7352D-2916-47F7-A256-F897D763DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC3FC36-B246-4DCB-8984-228525D9A356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC861000-37D8-4B0F-BFA0-57E9BE125B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBE75FE-DDE2-43BA-80EF-15A6698EABC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683B26F0-5EA2-455A-8948-27C100BBA3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7279E1EC-DEBC-4ACC-925D-06A7697C162F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18579",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18595",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18736",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18798",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18850",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18910",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18964",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18969",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18970",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20723",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21129",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21492",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21724",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23241",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.425802",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:034",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_08_openssh.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/22692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0044.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0298.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0698.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425397/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16369",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-255-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0306",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2490",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2120",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24305",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.425802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_08_openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0298.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0698.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425397/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-255-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue was addressed in Red Hat Enterprise Linux 2.1, 3 and 4:\n\nhttps://rhn.redhat.com/errata/CVE-2006-0225.html\nhttps://www.redhat.com/security/data/cve/CVE-2006-0225.html\n\nIssue was fixed upstream in version 4.3.  The openssh packages in Red Hat Enterprise Linux 5 are based on the fixed upstream version and were not affected by this flaw.",
        "lastModified" : "2009-09-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to hijack sessions and possibly gain administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Claroline 1.7.2 utiliza 'cookies' de sesión adivinables (extracto md5 de la hora de conexión), lo que permite a atacantes remotos secuestrar sesiones y posiblemente ganar privilegios administrativos.º"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F49508-B7BC-4971-B3A7-279DCE45E369"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en CyberShop permite a atacantes remotos ejecutar órdenes SQL de su elección y saltarse la autenticación mediante el parámetro \"username\" en una acción de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gencbeyin_web_programlama:cybershop:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D069D6B-263A-4106-BA3F-92EB7E785F16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0064.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-01/0064.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en index.php en NewsPHP permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro (1) \"discuss\", (2) \"tim\", (3) \"id\", (4) \"last\", y (5) \"limit\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsphp:newsphp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D729EF1-C025-42DF-B628-3E261DD13238"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18624",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423129/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16339",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0341",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423129/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server."
      }, {
        "lang" : "es",
        "value" : "Tor anterior a 0.1.1.10 permite a atacantes remotos identificar servicios ocultos mediante un servidor Tor malicioso que intenta un gran número de accesos al servicio oculto, lo que acaba causando que un circuito sea construido a través del servidor malicioso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Jan-2006/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18576",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Jan-2006/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad XSS en index.php de SleeperChat 0.3f y anteriores permite a atacantes remotos inyectar 'script' web o HTML arbitrario mediante el parámetro \"pseudo\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sleeperchat:sleeperchat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3f",
            "matchCriteriaId" : "18D6C0F5-3A9E-44D7-A840-8040E50EFDF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015525",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16363",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt parameter to (1) chat_no.php and (2) chat_if.php."
      }, {
        "lang" : "es",
        "value" : "SleeperChat 0.3f y anteriores permite a atacantes remotos saltarse la autenticación y crear nuevas entradas mediante el parámetro \"txt\" de (1) chat_no.php y (2) chat_if.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sleeperchat:sleeperchat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3f",
            "matchCriteriaId" : "18D6C0F5-3A9E-44D7-A840-8040E50EFDF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015525",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en login.php en miniBloggie 1.0 y anteriores, cuando gpc_magic_quotes está inhabilitado, permite a atacantes remotos ejecutar órdenes SQL de su elección y saltarse la autenticación mediante los parámetros (1) \"usernamen\" y (2) \"password\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:minibloggie:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "10577E6B-6004-449E-9EC6-92B351332CA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/47/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423126/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/47/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423126/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de Eval en 123 Flash Chat Server 5.0 y 5.1 permite a atacantes ejecutar código mediante un \"username\" artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topcmm_computing:123_flash_chat_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797F15FA-6577-47F3-B342-EE950EF55475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:topcmm_computing:123_flash_chat_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376197D6-056C-4991-9EE5-805549D8BDA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423164/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16360",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423164/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0379",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-01-25T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/18599",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015541",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/22730",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16373",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24338",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0380",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-01-25T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/18599",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015541",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/22731",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16373",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24340",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0381",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-01-25T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/18609",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015542",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c.diff?r1=1.103&r2=1.104",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/22732",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16375",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24337",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c.diff?r1=1.103&r2=1.104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA97F1A-49F7-4511-8959-D62155491DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "0EDB38AA-CAC4-4C89-8484-7C2A75F8038F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/163",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause \"looping stack overflow errors.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/164",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/165",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18581",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/166",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C72232-7D9A-43BF-9018-6D51EA35BF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAB0CC7-DB7F-401B-8E9C-E3A33BD18F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0A3F3F-F960-4418-B520-3AECCA0DDB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA2A8E6-1BEF-430B-85FD-AFFA44B891CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/167",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/168",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C72232-7D9A-43BF-9018-6D51EA35BF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAB0CC7-DB7F-401B-8E9C-E3A33BD18F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0A3F3F-F960-4418-B520-3AECCA0DDB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA2A8E6-1BEF-430B-85FD-AFFA44B891CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/169",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled and a password change occurs, stores the old and new passwords in cleartext in the DefaultAuditRecorder.log file, which could allow attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/170",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E758AF8B-B47F-4CE7-B73E-3638180C9D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "651994FC-395B-4268-B976-281B8A34957E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC47FAA-AB16-4728-AE0B-C0C90861D809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "E800B227-C828-48CA-B5EF-F315823CD30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "10E284B8-4EBE-459D-87BA-401BC2AE29C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "56476419-F51B-465C-8BA8-529C59123351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "5F588A56-E4CB-44A4-A4D3-BFA89D1C6BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "B23822A2-0B53-4CCC-B62B-8CE48B23F745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "05E4CCAC-8E99-49DE-8E90-18F5C03BBC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "A19E505D-C095-4266-83C6-414454FB30E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/171",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA2A8E6-1BEF-430B-85FD-AFFA44B891CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "BF066EF7-82D6-42A4-97AC-C3A71A042152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "22257A94-EB2C-432E-A9ED-224D8AB9527F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA97F1A-49F7-4511-8959-D62155491DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "0EDB38AA-CAC4-4C89-8484-7C2A75F8038F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/173",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service (server slowdown)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E758AF8B-B47F-4CE7-B73E-3638180C9D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "651994FC-395B-4268-B976-281B8A34957E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC47FAA-AB16-4728-AE0B-C0C90861D809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "E800B227-C828-48CA-B5EF-F315823CD30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "10E284B8-4EBE-459D-87BA-401BC2AE29C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "56476419-F51B-465C-8BA8-529C59123351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "5F588A56-E4CB-44A4-A4D3-BFA89D1C6BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "B23822A2-0B53-4CCC-B62B-8CE48B23F745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "05E4CCAC-8E99-49DE-8E90-18F5C03BBC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "A19E505D-C095-4266-83C6-414454FB30E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/174",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/175",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-25T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA97F1A-49F7-4511-8959-D62155491DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "0EDB38AA-CAC4-4C89-8484-7C2A75F8038F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/176",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T11:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via \"..\" (dot dot) sequences and null bytes in the sAction parameter, a different vulnerability than CVE-2006-0244.  NOTE: if the functionality of phpXplorer supports the upload of PHP files, then this issue would not cross privilege boundaries and would not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpxplorer:phpxplorer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A26331A-10F9-4AF5-A229-88B9B1D3F392"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/422434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T11:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD38E99A-864A-4E99-B6A5-12AACDA822E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC62E1B2-6964-4459-A1EF-A6A087C2960F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD9A13-E533-48B2-B5EB-9B7A0124D594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E13AEBC-7718-4206-98EC-95E9228469C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0160E00-D722-40CE-976C-77CB91C1B94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFAE1E8A-644B-42FD-B149-89AD420BD7A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8075E330-5819-4105-9BB7-4DCC3C0EAEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB346764-EDF2-4BE1-A273-C2CE9A173CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59B89D9-AAF9-40CB-931C-EB4958491B99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64888FB-133F-4930-8368-1BD2A4FB11A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAAD1A33-4333-4AFB-8D49-1274AE345BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A3E2D8-617C-4740-B662-F8884CE26BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB37CB05-942B-460C-8F1E-2098A4B5F6AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6834D6B-859F-4F69-ADF8-4A2BA6672869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B82E1-D1AD-46F2-8B95-117F38563FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC5FDD9-F24C-4DA2-9CE3-96522DB4A10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDECF110-F375-4A3C-8BA9-1CF69B6EF027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F36775-7D44-405E-8DE3-EBD71C9EE421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94B7D50-4527-4C14-8A50-D4C0566F36BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2_.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0D1B29-05BB-415E-ADA3-574F49D96AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:1.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD3A735-3AD7-4732-BBC9-A305B5090760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:1.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2910F99D-444C-4DC8-A5D8-6FCFEC11E8D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:1.0.2.1s_for_apps:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A629C4-F048-4BBB-97E6-F79A3326D471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDD9B5F-C0D5-48B9-9ED1-39023F67002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:1.0.2.2_roll_up_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09793D0F-453E-4384-AF0F-B6CCD51A1F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FCC402-401B-4830-8181-78E49E1F1F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B72A661-9EAA-4B9B-8865-17C8A29871BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F41217E-C62F-41CD-84F3-CE498B61CD48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E6631E-0726-4F87-B5F9-FDF71A14A480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D00E2D-141E-4D68-A606-407DA1D4E656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F261A3F-706A-4746-9707-85DBDDAD2C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7485BFF1-6863-4165-BE36-D656F39CF5EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041898.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041899.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041742.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/169164",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423029/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423673/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423819/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423822/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424394/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0338",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041898.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041899.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041742.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/169164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423029/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423673/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423819/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423822/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424394/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T11:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015530",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-025.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00591401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-025.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00591401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt."
      }, {
        "lang" : "es",
        "value" : "Text Rider 2.4 almacena información sensible en el directorio de datos bajo la raíz de documentos web, lo que permite a atacantes remotos obtener nombres de usuario y huellas (hashes) de contraseñas accediendo directamente a data/userlist.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:text_rider:text_rider:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D582D746-E98A-4AFA-9823-AB98D5F47F70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/46/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18605",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423130/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/46/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423130/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password (possibly via another vulnerability that reads it from a data file), then including the hash in a cookie."
      }, {
        "lang" : "es",
        "value" : "Text Rider 2.4 permite a atacantes saltarse la autenticación y subir ficheros sin proveer una contraseña válida obteniendo la huella (hash) MD5 de la contraseña (posiblemente mediante otra vulnerabilidad que lo lee de un fichero de datos), y entonces incluyendo la huella en una 'cookie'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:text_rider:text_rider:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D582D746-E98A-4AFA-9823-AB98D5F47F70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/46/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423130/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/46/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423130/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en la pila en Sami FTP Server 2.0.1 permite a atacantes remotos ejecutar código de su elección mediante una orden USER larga, lo que dispara un desbordamiento cuando la bitácora (log) es vista.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karjasoft:sami_ftp_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE91DCB5-8314-473B-A8D0-06B53B02FC51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/sami_ftp_poc.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18574",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.critical.lt/?vulnerabilities/208",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.karjasoft.com/samiftp/news",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423148/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16370",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/40675/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/sami_ftp_poc.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.critical.lt/?vulnerabilities/208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.karjasoft.com/samiftp/news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423148/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/40675/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig action. NOTE: These are different attack vectors, and probably a different vulnerability, than CVE-2006-0218 and CVE-2006-0219."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en usercp.php en MyBulletinBoard (MyBB) 1.02 permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través del (1) parámetro de bloc en una acción de bloc y (2) parametro de firma en una acción de edición. NOTA: Estos son diferentes tipos de ataque y, probablemente, una vulnerabilidad diferente a CVE-2006-0218 y CVE-2006-0219."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DA7BAA-2E08-410F-B80E-0B1EC0B4EF46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-241.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423128/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-241.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423128/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cheesyblog:cheesyblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3C8367-7270-4385-970B-71258CD7D515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/49/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423023/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16376",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/49/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423023/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page.  NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83CDE4-12C0-42AF-8F4E-E383791BA81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18597",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16391",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "A simple fix has been released on the Main PCW site available directly at <a href=\"http://www.phpclanwebsite.com/index.php?page=downloads&func=browselist&par=1\">http://www.phpclanwebsite.com/index.php?page=downloads&func=browselist&par=1</a>\r\nPlease download and install imediately.\r\nTech note: Filters id number (par) to contain numbers only.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-26T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by \"\\\", which will display the full path of uploader.php.  NOTE: this might be the result of a file inclusion vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83CDE4-12C0-42AF-8F4E-E383791BA81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Please add the following to the config.php file to avoid all such exploits.\r\n\r\nini_set('display_errors', false);\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificad en WebWorK 2.1.3 y 2.2-pre1 permite a atacantes remotos privilegiados ejecutar órdenes de su elección como el servidor web mediante vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwork:webwork:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D64C77-F0DF-4341-8CF2-B3BD9C04F399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwork:webwork:2.2-pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089D3383-B891-493A-A7CF-47105DA29ECE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt1pt4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18594",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt1pt4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the (1) AUTH PLAIN or (2) AUTH LOGIN SMTP commands, which is not properly handled by (a) EPSTRS.EXE or (b) SPA-RS.EXE; (3) a long username in the APOP POP3 command, which is not properly handled by (c) EPSTPOP4S.EXE or (d) SPA-POP3S.EXE; (4) a long IMAP DELETE command, which is not properly handled by (e) EPSTIMAP4S.EXE or (f) SPA-IMAP4S.EXE."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en E-Post Mail Server 4.10 y SPA-PRO Mail @Solomon 4.00 permite a atacantes remotos ejecutar código de su elección mediante un nombre de usuario largo en las órdenes SMPT (1) AUTH PLAIN o (2) AUTH LOGIN, que no son manejadas adecuadamente por (a) EPSTRS.EXE o (b) SPA-RS.EXE; (3) un nombre de usuario largo en la orden POP3 APOP, que no es manejado adecuadamente por (c) EPSTOP4S, o (d) SPA-POP3S.EXE; (4) una orden IMAP DELETE larga, que no es manejada adecuadamente por (2) EPSTIMAP5S.EXE o (f) SPA-IMAP4S.EXE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:mail_server:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DFC94C-AED4-42CC-992D-7EBE538BE006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:mail_server:enterprise_4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27AD36A1-B0F4-4085-B0A7-FF95F5FB693B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:smtp_server:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C418AC-B966-43A8-A535-953EDB04EB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:smtp_server:enterprise_4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CCAF34-3C4E-4E83-A7DD-BE627DA80334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:spa-pro_mail_atsolomon:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8AF0E8-0447-40CF-B68F-D8BD59E2466E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:spa-pro_mail_atsolomon:enterprise_4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FEBF24-CC69-4763-B20C-31BD3CDA4EE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18480",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-1/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-1/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in (1) EPSTIMAP4S.EXE and (2) SPA-IMAP4S.EXE in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allow remote attackers to (a) list arbitrary directories or cause a denial of service via the LIST command; or create arbitrary files via the (b) APPEND, (c) COPY, or (d) RENAME commands."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de atravesamiento de directorios en (1) EPSTIMAP4S.EXE y (2) SPA-IMAP4S.EXE en el servicio IMAP en E-Post Mail 4.05 y SPA-PRO Mail 4.05 permiten a atacantes remotos (a) listar directorios de su elección o causar una denegación de servicio  mediante la orden LIST; o crear ficheros de su elección mediante las órdenes (b) APPEND, (c) COPY, o (d) RENAME."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:mail_server:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516B24A2-C868-4876-9620-A0DDF21E397C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:spa-pro_mail_atsolomon:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E337C29-53FA-4848-A589-D1138431E5A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18480",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-1/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-1/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to cause a denial of service (infinite loop) by sending an APPEND command and disconnecting before the expected amount of data is sent."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de termianción temprana en el servicio IMAP de E-Post MAIL 4.05 Y SPA-PRO Mail 4.05 permite a atacantes remotos causar una denegación de servicio (bucle infinito) enviando una orden APPEND y desconectando antes de que la cantidad de datos esperada sea enviada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:mail_server:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516B24A2-C868-4876-9620-A0DDF21E397C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-post_corporation:spa-pro_mail_atsolomon:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E337C29-53FA-4848-A589-D1138431E5A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18480",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-1/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-1/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T00:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering many users through profile.php or (2) using search.php to search in a certain way that confuses the database."
      }, {
        "lang" : "es",
        "value" : "phpBB 2.0.19 y anteriores permiten a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante (1) el registro de muchos usuarios mediante profile.php o (2) el uso uso de search.php para buscar de cierta manera que confunde a la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h4cky0u.org/viewtopic.php?t=637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-001-phpbb.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423030/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h4cky0u.org/viewtopic.php?t=637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-001-phpbb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423030/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0057",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-01-27T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.kb.cert.org/vuls/id/998297",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23657",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16409",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24379",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/998297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject arbitrary web script or HTML via HTTP_REFERER (referer)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmachine:expressionengine:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612F8570-F98F-4714-A03A-B9E7CFAEB34A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/48/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423068/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/48/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423068/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary SQL commands via the entrada parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andonet:andonet_blog:2004.09.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E20AA5-28D6-45F5-B736-FF8CF3DA2847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/50/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/50/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script or HTML via the (1) goto_id parameter to index.php or (2) page parameter to news_full.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideosoft_design:ideocontent_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFD8E39-CA26-409E-A2BE-FECEA78ECF27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22712-ideocontent.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22712",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22713",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/22/22712-ideocontent.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the (1) goto_id or (2) mid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideosoft_design:ideocontent_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFD8E39-CA26-409E-A2BE-FECEA78ECF27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22712-ideocontent.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22714",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/22/22712-ideocontent.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web script or HTML via the cerca parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:active121:site_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C3E1271-521F-4276-8D0D-1F2101AD22C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22715-active121.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22715",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/22/22715-active121.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-27T23:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.asp in Goldstag Content Management System allows remote attackers to inject arbitrary web script or HTML via the text parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goldstag:goldstag_content_management_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCB1BD4-4BA0-4E9A-A301-8E17EB92AF81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/22/22711-goldstag.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22711",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/22/22711-goldstag.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-30T18:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER lengths, and possibly other vectors, as demonstrated by the ProtoVer LDAP test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509B5725-3D7D-4A85-9209-21A17A345C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9467A07-12F1-4185-9598-96D031AE91FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B350D292-4B46-4F15-A1E2-22A01F5F9BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B003E-C10C-49BC-80EC-DDB43459E13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DD9A71-0FD0-4253-BAD2-B256EC4A3D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4E53B5-05C9-4A8A-80DD-AAD882EBC7D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11C3D22-ED09-4EF8-B9C5-2CE075825619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0c1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825BDDD6-F1F2-44E3-BFE6-C75A72606A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0c2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E2BC99-BD58-4E3C-AE82-D18E59B8DBB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0c3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CE3D95-095D-406D-A3C5-32BE41A2C199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0c4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF9E340-1436-47D7-9FE6-9AD2D98FACD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0c5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBBBCA2-849C-44CD-8355-A1BCE61F8009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0c6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96593F2E-8D00-4AF0-825B-C53270825F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate_pro:5.0c7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C021FF4A-7A96-4E1E-878A-8B3C11D17ED1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18640",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gleg.net/advisory_cg.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423364/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16407",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.stalker.com/CommuniGatePro/History.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gleg.net/advisory_cg.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423364/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.stalker.com/CommuniGatePro/History.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-30T18:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uebimiau:uebimiau:2.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D762D3BB-8548-4E2F-B9F3-9B4CB641194D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423437/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.uebimiau.org/news.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423437/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.uebimiau.org/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0301",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-30T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed the width or height of the associated bitmap."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1CAEC5-3851-4749-AF27-E090E3C52E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0206.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18677",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18825",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18826",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18837",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18838",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18839",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18860",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18864",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18875",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18882",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/470",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015576",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-971",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-974",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-04.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-05.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060202-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:030",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:031",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:032",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00039.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0201.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423899/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-249-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0389",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0422",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=141242",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10850",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060202-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423899/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-249-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.novell.com/show_bug.cgi?id=141242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0043",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-31T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EE2D72-B1E6-4380-80B0-E40A23DDD115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3EA56868-ACA1-4C65-9FFB-A68129D2428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1BA2E629-58C6-4BA0-A447-F8F570B35E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C89BA3B6-370B-4911-A363-935A9C9EACF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0007.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18614",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18638",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18889",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-975",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0348",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24347",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0467",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-01-31T02:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Pioneers (formerly gnocatan) before 0.9.49 allows remote attackers to cause a denial of service (application crash) via long chat messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pioneers:pioneers:0.9.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6614DF4-6604-40EE-8D4D-8C6B3EF72B4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350237",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18647",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18692",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-964",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16429",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0376",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24383",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject arbitrary web script or HTML via the (1) sortby and (2) sortordr parameters, which are not properly handled in a redirection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/attachment.php?aid=2181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=6418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/Jan/0414.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18617",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/attachment.php?aid=2181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=6418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/Jan/0414.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified in June 2005, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_little_homepage:my_little_forum:2004-04-20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5051BFD1-5DDF-436D-9CAD-AE037BCA0F35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000520.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/51/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/51/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423167/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000520.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/51/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/51/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423167/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestbook.php in my little homepage my little guestbook, as last modified in March 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_little_homepage:my_little_guestbook:2004-04-20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44AFEF12-3531-4D05-9AC0-9F9F7CC9203F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000520.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/51/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/51/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18628",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423167/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000520.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/51/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/51/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423167/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_little_homepage:my_little_weblog:2004-04-20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70E77BE-97D8-4323-82F8-6713A0109651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000520.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/51/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/51/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423167/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-January/000520.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/51/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/51/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423167/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code via (1) a large packet length field, which causes an overflow in the ReadBuffer function in (a) BTPacket.cpp and (b) EDPacket.cpp, or (2) a large packet, which causes a heap-based overflow in the Write function in (c) Packet.h."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shareaza:shareaza:2.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4830EB9-02BB-4F41-A7AC-76522E8B30EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0887.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/shareaza/shareaza/BTPacket.cpp?r1=1.5&r2=1.5.4.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/shareaza/shareaza/EDPacket.cpp?r1=1.15&r2=1.15.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hustlelabs.com/shareaza_advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0887.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/shareaza/shareaza/BTPacket.cpp?r1=1.5&r2=1.5.4.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/shareaza/shareaza/EDPacket.cpp?r1=1.15&r2=1.15.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hustlelabs.com/shareaza_advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service (ping flood) via a negative count parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theworldsend.net:php-ping:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A67A7B-8BF9-4390-B228-0781107A5BDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18645",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-231.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-231.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A6931-A3CD-44A7-B170-53B803F321AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18649",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.heise.de/newsticker/meldung/68981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/604745",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423436/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423548/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-032A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.winamp.com/player/version_history.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.heise.de/newsticker/meldung/68981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/604745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423436/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423548/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-032A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.winamp.com/player/version_history.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86156029-EE44-45B6-AF73-641502AC8007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C119CD-4432-4EF8-95BA-BED4C93E609F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9BD14EC-D963-4D3A-998F-4041E0F20547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F24CC42-E1E2-4B03-B5D5-7A3050BAE01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BD6A9F-4AA2-4672-94FA-002B10478166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F3F409-D4F5-4B89-9D9B-63E8041E3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228B069E-80BB-4A95-8BBD-66D9C78F2B0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EA9447-A92C-43C9-ADD0-F8DCAD57A6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ECD92C3-4B06-447C-BB93-205E7F9A4F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E4D3DC-7541-4E37-911C-8EC4258D678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84137274-7537-4F23-A193-06B7D85820D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6003B70-C2BD-4402-A3DA-9F52FC1EF292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git:git:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6501938-1E45-4C86-98E8-64D6449674B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lwn.net/Articles/169623/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18643",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lwn.net/Articles/169623/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php.  NOTE: the vendor states \"The initial announcement of this risk was made on our website... and it included a patch which will close the vulnerability on all known 6.0x and 6.1x releases.  We strongly encourage users of CRE Loaded 6.x, osCMax, and other users of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installations at the earliest possible moment.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cre_loaded:cre_loaded:6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA36001-033F-40FA-8795-58D79888B0F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-February/000527.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-February/000527.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS[] variable with the same name, which causes PmWiki to unset the GLOBALS[] variable but not the GPC variable, which creates resultant vulnerabilities such as remote file inclusion and cross-site scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1_beta_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E219340F-4FBB-471C-B751-8BA79C67BFC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0931.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18634",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/2006/01/24/pmwiki-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0931.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/2006/01/24/pmwiki-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T11:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitrary web script or HTML via the query parameter in the search file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spaiz:spaiz-nuke_cms:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DFFC72-2691-4092-B34E-26BB1DFF3610"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423451/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423451/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0481",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-01-31T18:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804C0EA6-67B9-4FED-B16A-751F7F4DD108"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng-1.2.8-README.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18654",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200812-15.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015617",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0205.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16626",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0393",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179455",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng-1.2.8-README.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200812-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0205.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T19:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a \"date -s\" command, which causes invalid sign extended arguments to be provided to the get_compat_timespec function call."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux 2.6.15.1 y versiones anteriores, cuando se ejecuta en arquitecturas SPARC, permite a usuarios locales provocar una denegación de servicio (cuelgue) a través del comando \"date-s\", lo que provoca argumentos de señal extendida no válidos para ser proporcionados a la llamada a la función get_compat_timespec."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.debian.org/debian-sparc/2006/01/msg00129.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-sparc&m=113861010514065&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-sparc&m=113861287813463&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.debian.org/debian-sparc/2006/01/msg00129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-sparc&m=113861010514065&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-sparc&m=113861287813463&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03F5D3F-6FB1-4A25-B544-D3C973F35DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A18AD-A495-4750-85A5-7D82FC321D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A90348C-94E2-4F04-A887-E7EFFC1ACF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5E136E-9215-46A8-A40A-AE964C588A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9729CAA-8041-43D6-9299-07CCCBFD3907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A33500-B013-4863-BF12-27283ACD4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A459B6C2-EE91-43AE-A837-BCF4188BEB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32200DE2-71BA-417C-AF24-3BE549A68711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F3F37E-4BBD-4A0E-A1DF-64602D75207D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0722179-9602-42A1-81CA-062D4010B9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0E5615-4855-4A35-BE58-B9B27C7B2CC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18629",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060126-vpn.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060126-vpn.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-01-31T20:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote attackers to read arbitrary files via a .. (dot dot) in any parameter that opens a file, such as (1) s or (2) p."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elido:face_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A6AFA0-216F-475B-A57B-96C5001072D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=22236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423155/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hackerscenter.com/archive/view.asp?id=22236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423155/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7F94E8-86FC-456B-A7BB-57953F67F754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54424787-34AC-410D-985F-511ADB2BB144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA075D-4A9E-44EE-90CF-23947C9040EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3DFAEC-4534-4A8D-9886-0723F57C7A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D162976F-87A3-42BF-8C9F-A981B14F4673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC17E231-9256-4600-A33B-238E7E83CF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7126E176-D739-4102-8F10-1EEB8C6A219D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FF39C5-CC37-4573-BB18-36254D38509B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F1E38-3482-4EAC-8654-EBC004B9344B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752C3C6B-910D-4153-A162-DF255F60306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D199CB1-A2A3-4678-9503-C5B61281755C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E8AF76-0A1D-4BAE-BF10-D63080352E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B674647-4438-4450-9DCA-25184D4E2682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CC41-1344-4A65-A653-8012ACE2CF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FB7128-CF11-4903-97D7-418403A03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EFB20A-78E2-4BA1-B87C-BB74E8982D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABF911-FCDF-4095-A95D-4BB73628FCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77886493-C30E-439E-BBB4-3D34A8938378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7813F511-CF6D-487F-9D1C-7A6CF85AD724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677DC4B6-8B3D-4A0D-9934-743FD7494DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E272881F-0804-4190-A21D-3D0B9A774F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F084DA16-24CB-41D1-92B7-C6E0499AAD10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA979D75-F60E-45F8-B99C-1402DC8CFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "884753D4-3AF0-4723-9D51-26BA7B4CA533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1835410-77EB-46F2-ACF0-379759D4B0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB103ED-B170-4193-84CD-4C59F4D6A10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88DCCDE-6A81-473F-B4FE-95A84F8DF964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D55886-268F-4E4D-B00F-8A5D97A73BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E314B0F7-1A27-483E-B3B3-947A5561281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B838C9-E60E-46A3-A5FB-4F67291D0851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96C76C5-52BA-45D9-9803-048E770BAA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC41749-91FC-43DB-A52F-AC3E3A2205C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0195AE-24FD-43B2-892B-F646B8B5ED6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2mx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8A1FE0-F74A-4C92-8625-7C933128B567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2n:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E90AD18-3ED7-4DA9-A6DF-281C1F3226D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D035A35-D53E-4C49-B4E4-F40B85866F27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC70491B-F701-4D33-A314-C686469DBD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEF14D5-1327-4012-913F-DA0E12C4E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C033E3-184B-4AC1-B10D-8318FEAF73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A68D177-B028-4025-BD7B-82ACDB2D1E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E709D6B-61DB-4905-B539-B8488D7E2DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075CD42D-070A-49BA-90D9-E7925BB41A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4628FDA0-4260-4493-92C9-4574E5EC06A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21147732-FA22-4728-B5F2-D115B78A8EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B40548F-3914-4227-9E4C-F1B34071C069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE49281-0571-49F7-95FF-68B1ACA07537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B09B72E-6862-4115-9A0B-574089A94289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC38B64C-E246-467F-A185-669497DEA839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB42063-9DB5-42DB-825A-53C6DBB51A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5C90EE-A9C0-461C-9E89-732BFA9BD066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E26473-A8EF-44C5-B550-5E0B86D31291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663FE3CE-FA09-46A2-9C0D-2797D9137A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86309E93-F2C9-4334-9A1C-989EFDC99215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D49D6-0624-41CE-829E-49E7EA679EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869CEAF7-59D6-4651-8D89-0244D6C430A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FBAA6-3127-4DF9-99AD-AA3A16317B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0E376F-64E1-4632-9A8E-11DC99FB245F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF440B52-C6AE-4608-BE71-01B354D37BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B41182-7AA8-49D1-BAC3-EAF312E43553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E84677D-793D-44C5-80E9-FC29C3183278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECFA2358-6B79-472D-9092-FF99DC3DF042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C26842-FF50-436F-8DB6-15A70082CD1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A31301-AAB0-4744-98B2-695D88798D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEB27CF-46B5-4780-964C-C31193614B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1094F9-7222-4DE0-A368-7421ABA66E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574FFD6F-D56C-41DB-A978-E501BA3CA5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11790F38-3720-45CF-9FD4-A8E5867684D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE2282B-6693-4E4B-8662-501EBC14CD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56365432-1E57-4D35-B764-DDDA878B96ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925BA5C-AB2F-4B73-BA93-55664A319CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0668C45B-9D25-424B-B876-C1721BFFE5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF310185-68F5-48BB-8E11-E38E1961B380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E24302-D04B-45D1-AC6A-0CE45F9B9F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56032FBD-FEE7-4B38-B35E-CD277B931DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/34892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/34892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may cause subsequent local users to execute unintended commands or bypass AAA command authorization checks, aka Bug ID CSCef77770."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(25\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA143186-1E3B-4B5F-A5FD-AE90A2664AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trigger temporarily incorrect processing of an e-mail message under \"extremely heavy loads\" and (2) cause an \"increased number of missed spam\" during \"spam outbreaks.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tumbleweed:mailgate_email_firewall:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44280E0C-8727-4599-B5E9-FA2AF4B92839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tumbleweed:mailgate_email_firewall:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27594331-440E-4ECA-871A-3BE747347A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tumbleweed:mailgate_email_firewall:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A1051F-715B-4A1D-948F-8FD00A6CE416"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/422591/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422591/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423169/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423169/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string. NOTE: the original researcher claims that issue has been disputed by the vendor, and that the vendor stated \"as far as I can tell, this is neither an exploit nor a vulnerability.  The above report describes a local bug in mIRC.\"  It could be that this is only exploitable by the user of the application, and thus would not cross privilege boundaries unless under an otherwise restrictive environment such as a kiosk"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:khaled_mardam-bey:mirc:6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EC0D6-667F-4232-A6C4-EDE53968B935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trout.snt.utwente.nl/ubbthreads/showflat.php?Cat=0&Board=bugreports&Number=118751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5IP080AHPQ.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423192/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423758/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trout.snt.utwente.nl/ubbthreads/showflat.php?Cat=0&Board=bugreports&Number=118751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5IP080AHPQ.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423192/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423758/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.asp en ASPThai.Net ASPThai Forums 8.0 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL arbitrarios y eludir la autenticación de inicio de sesión a través del campo de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspthai.net:aspthai_forums:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "7B8EAF93-E28B-4AAF-AA32-EA720DB2DAC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113837847503661&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113837847503661&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subzane:szusermgnt:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCE8D6C-5A37-498D-9184-42BCBD7A9CC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/53/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423658/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/53/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423658/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via (1) the catview parameter in cal_functions.inc.php and (2) the login parameter in cal_login.php.  NOTE: the catview vector might overlap CVE-2005-1865."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_hor:calendarix:0.6.2005-08-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E0313E-09A7-4D87-89EA-852B355264DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/52/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423656/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/52/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423656/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_rybak:mg2:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711F003D-8275-4584-830E-AA79C09ED698"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423477/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423477/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423465/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423465/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header ($url variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423443/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423443/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earlier, and Netscape 8.1 and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property, which does not require that the style sheet have the same origin as the web page, as demonstrated by the compromise of a large number of LiveJournal accounts."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Mozilla 1.7.12 y posiblemente versiones anteriores, Mozilla Firefox 1.0.7 y posiblemente versiones anteriores y Netscape 8.1 y posiblemente versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de propiedad CSS (Cascading Style Sheets) -moz-binding, lo que no requiere que la hoja de estilos tenga el mismo origen que la página web, como es demostrado por el compromiso de un gran número de cuentas de LiveJournal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D093FD25-94C8-49B8-A452-438023BFB105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE7EA3B-3BF8-4696-9488-78506074D62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883B45F-D28D-428E-AAF7-F93522A229DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA659B9-2A00-45A6-A462-4E0A20FB7F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC06EBA-A836-4817-AEF6-EAC4BEDDF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E748A943-8A1E-4657-826C-EBE013E04864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "655FA37C-DA33-4195-AEAF-5A5D40C5C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD5B652-8474-4C00-9CDD-62B499045932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BD8D89-4936-402C-973D-5F4B071806D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.livejournal.com/lj_dev/708069.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113847912709062&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.davidpashley.com/cgi/pyblosxom.cgi/computing/livejournal-mozilla-bug.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16427",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=324253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.livejournal.com/lj_dev/708069.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113847912709062&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.davidpashley.com/cgi/pyblosxom.cgi/computing/livejournal-mozilla-bug.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=324253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T20:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E6FE1D-B1E9-4A4F-8E89-52C554B711D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DD0175-5F1C-4C53-9758-D34B2F5116D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6AB071-4E21-4716-8087-42C02E03368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14CCEA6-AD05-4F61-8B52-B35F664C241B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55C1F94-50C4-4A9C-B867-C43D5C67EA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8896849-9ADA-40A3-BAC3-731FB9B66DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550334A9-AE96-41C4-ABA4-751D3E013C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54720F69-5AC2-49E8-8340-A6CF12CF2CDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eyce.be/php_gen/NEWS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eyce.be/php_gen/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T20:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E6FE1D-B1E9-4A4F-8E89-52C554B711D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DD0175-5F1C-4C53-9758-D34B2F5116D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B6AB071-4E21-4716-8087-42C02E03368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14CCEA6-AD05-4F61-8B52-B35F664C241B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55C1F94-50C4-4A9C-B867-C43D5C67EA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8896849-9ADA-40A3-BAC3-731FB9B66DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550334A9-AE96-41C4-ABA4-751D3E013C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_gen:php_gen:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54720F69-5AC2-49E8-8340-A6CF12CF2CDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eyce.be/php_gen/NEWS",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eyce.be/php_gen/NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in rlink.php in Rlink 1.0.0 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the url parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourboard:rlink:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBBAC75-D9E4-4620-803A-206905E1F1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18620",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punctweb:myco_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B07D37-EEAA-4A58-B606-608BB7DC5617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423565/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423565/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the Name field, when registering a user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punctweb:myco_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B07D37-EEAA-4A58-B606-608BB7DC5617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423565/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423696/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423565/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423696/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enabled, allows remote attackers to include arbitrary files via a URL in the cutepath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1_beta2",
            "matchCriteriaId" : "5DACB975-2E96-44DB-9270-F053BBB30A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hamid.ir/security/farsinews.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423568/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16440",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hamid.ir/security/farsinews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423568/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (service crash) via unspecified vectors involving the EXAMINE command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFAF9C8-DB67-446E-B63C-530CB0C170B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F30383-D23F-4CA5-BC02-7716398BC042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE40F5BA-6174-4959-BFD1-CCECAB138009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6DCAFE-CAC2-4B36-B3E1-FA2B490424EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32956E6-A13B-4663-BBC9-FEB08A1DCC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AABE2F0-FEC1-4BDE-B1C0-92FF2CEA48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652F54CA-1CCA-4BC9-8728-A0F6FABF8817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A9222A-6F22-40BD-8411-69A90E8E46AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18668",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service (CPU utilization) by viewing \"formatted quoted-printable emails\" via webmail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA0B95-5875-41CF-90BA-EF07D240FF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E8638-CF5A-480B-89D7-0E029A0C5965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B664B5-EEF9-4C5F-B23C-E4D54DBF2EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27EEFD5-19B1-4F0C-BD52-257594C37310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB6A16-65D3-43CF-BFB4-E0616476A979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/enterprisehistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/enterprisehistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly creating and closing a game."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zbattle.net:zbattle_client:1.09_sr-1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E0ED10-01AC-4F60-8862-D838FF88A87A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423431/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web script or HTML via the letter parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6318A231-4093-4E7C-B5F6-66B4BF64B33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423454/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423454/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via (1) unknown attack vectors in the administrative interface and (2) input fields of the contact form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_cms:easy_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5758AC8E-75D6-4369-92D4-3E2EDFE78E8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18673",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423442/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423563/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424431/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423442/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423563/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_cms:easy_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5758AC8E-75D6-4369-92D4-3E2EDFE78E8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18673",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423442/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424431/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423442/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search parameter and (2) unspecified url fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF505EE-19FA-4B57-9D7F-8CFE66C0A8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:2.7.1_development_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91BB800-4214-4B43-BF4F-171F4451F298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423547/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423547/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified parameters in a login action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daffodil_software:daffodil_crm:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96C2332B-4B10-4F8A-BE8E-A383514E1246"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423718/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423718/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges.  NOTE: the vendor has disputed this issue, saying that \"This is a customer specific issue related to their Kerberos authentication single sign-on application and not a vulnerability in the Blackboard product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DC4593-108E-44F4-B322-805B6BC00A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DEC3208-A52A-483B-AB83-E766B581CB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6E7A85-D925-4463-AA18-2519973C0D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D61778B-8CC7-4DED-B735-88A9F027388C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DEADE2-62A0-4FDC-8172-7726D8555DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_academic_suite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8E8CD2-26E7-48F1-960F-49992E94BA96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/28023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423654/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423686/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423778/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423654/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423686/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423778/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0433",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:08.sack.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/18696",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://securityreason.com/securityalert/399",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://securitytracker.com/id?1015566",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/22861",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16466",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0409",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24453",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:08.sack.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by (1) migrate_all_online.sh, (2) migrate_all_offline.sh, (3) migrate_all_netinfo_online.sh, (4) migrate_all_netinfo_offline.sh, (5) migrate_all_nis_online.sh, (6) migrate_all_nis_offline.sh, (7) migrate_all_nisplus_online.sh, and (8) migrate_all_nisplus_offline.sh."
      }, {
        "lang" : "es",
        "value" : "PADL MigrationTools 46 crea archivos temporales de forma insegura, lo que permite a usuarios locales sobrescribir archivos arbitrarios a través de un ataque de enlace simbólico en los archivos temporales, que no son creados adecuadamente por (1) migrate_all_online.sh, (2) migrate_all_offline.sh, (3) migrate_all_netinfo_online.sh, (4) migrate_all_netinfo_offline.sh, (5) migrate_all_nis_online.sh, (6) migrate_all_nis_offline.sh, (7) migrate_all_nisplus_online.sh y (8) migrate_all_nisplus_offline.sh."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:padl_software:migrationtools:46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA6B84BB-2730-41CA-A864-77B979080A19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2006/dsa-1187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2006/dsa-1187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Mandriva",
        "comment" : "Mandriva has patched the migrationtools since August 2005 to use mktemp so is not vulnerable to this issue.",
        "lastModified" : "2006-10-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a denial of service (system panic) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:64_bit:*:*:*:*:*",
            "matchCriteriaId" : "63874B2D-AD5D-4BB4-A83B-7B717E570191"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18671",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102149-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102149-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id_forum, (2) id_article, or (3) id_breve parameters to forum.php3; (4) unspecified vectors related to \"session handling\"; and (5) when posting \"petitions\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2e",
            "matchCriteriaId" : "B5B9F0E6-15A4-4636-BA8A-0AAAC73E5046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9_alpha2_5539",
            "matchCriteriaId" : "741F5196-A7CF-4588-BC51-D7D284308789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0990.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423655/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/24397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8650/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0990.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/24397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8650/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2e",
            "matchCriteriaId" : "B5B9F0E6-15A4-4636-BA8A-0AAAC73E5046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9_alpha2_5539",
            "matchCriteriaId" : "741F5196-A7CF-4588-BC51-D7D284308789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8650/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8650/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2e",
            "matchCriteriaId" : "B5B9F0E6-15A4-4636-BA8A-0AAAC73E5046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9_alpha2_5539",
            "matchCriteriaId" : "741F5196-A7CF-4588-BC51-D7D284308789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8650/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/en/advisories/read/id=8650/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the site parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dragoran:portal_module:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547FA39-35A7-40ED-A3D5-F8FA7A5718F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18664",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:browsercrm:browsercrm:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D12D653-972A-4916-A91A-A8AE9F3432B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18658",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423546/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423546/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sygate_management_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1_mr_2_build_1417_english",
            "matchCriteriaId" : "4FD9E5B5-20DD-4D3C-9D10-08A043B51C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sygate_management_server:3.5_mr_3_build_894_english:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAFFADA-1F18-444D-917D-5AEA1CC1A0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sygate_management_server:4.0_mr_1_build_1104_english:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1958B8-31A2-4C36-81A8-EDA3001DED74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sygate_management_server:4.1_ga_build_1258_japanese:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AC3305-3F74-4502-BB0B-E2E2C3FB9941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sygate_management_server:4.1_mr1_build_1351_chinese:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DA3C4A-3493-48AD-8B9C-CE8F494F036D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=6418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18678",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=6418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ashwebstudio:ashnews:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46571CB8-3E60-4936-BCF7-FB727C7CEF5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0955.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/9331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16426",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0955.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/9331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465F9134-DD86-4F13-8C39-949BE6E7389A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB041EDF-EFF8-4AA6-8D59-411975547534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C05F6A5-0FB3-489B-9B8B-64C569C03D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABA4FE3-662B-4956-904D-45086E000890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "998CD79C-458E-46A8-8261-1C40C53D9FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0155FB0B-7FAD-4388-96C8-A8543B4FDFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201F059D-33D1-4D9F-9C6F-FC8EB49E4735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B025E795-5713-485E-8A15-EBE4451A1A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEA946E-B6D2-463B-89D0-F2F37278089E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183B5940-2310-4D2E-99F0-9792A801A442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8BB13E-2732-4F9E-A588-EA1C00893C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FCDCBF-597B-439C-8D8B-2819FC70C567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440B890A-90E9-4456-B92A-856CD17F0C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BD9D8D-39DA-403E-915D-E1B6A46A6BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECFC942-4F04-420C-A9B4-AE0C0590317F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC97A87-2652-4AD6-8E10-419A9AC9C245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C92642-7C8D-411A-8726-06A8A6483D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F509566A-6D4A-40C0-8A16-F8765C5DCAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707D7124-6063-4510-80B4-AD9675996F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200FFAE3-CC1C-4A11-99AD-377D54A67195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A990E86-07C0-49E2-92D6-55E499F30FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AED985D-60D7-489E-9F1E-CE3C9D985B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EAA22-CED2-4379-9465-9562BACB1C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2402B40-6B72-48B5-A376-DA8D16CA43FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF742B8-5F7A-487B-835C-756B1BB392F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9351C2-16ED-4766-B417-8DB3A8766C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74667860-0047-40AD-9468-860591BA9D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEA092A-5532-4DCC-B43D-7A8ECF07FA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_suite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9C6894-B756-4189-AE82-B234449925DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_suite:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA16570-F6F8-4FA7-B88B-C3890F040C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51CA73D-6CD2-4597-A0EF-39C748EBA508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "541B9668-6BEB-49BB-9C75-44D2595B2E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C95931-0247-4605-B2C5-35EB7D654B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AA37B5-DE58-4856-9EE8-8FFAF6CC9E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF8CE1A-B768-4A77-9A46-8F0158E44D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1FFC4D8-B7D1-4D74-8C00-1AC11A7373DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:cs3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2544447-313B-42DD-831B-E1AED3B6086F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF91AF9-BFDB-4618-90FE-875FF8FFA3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:cs3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31870168-D8E9-4439-9C9D-994F35FEFB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:pagemaker:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBC38A3-0BE2-4862-B5F1-0340FB21BCC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:pagemaker:6.5:*:plus:*:*:*:*:*",
            "matchCriteriaId" : "7E584707-1A7C-492C-96A5-CDB8D77DCC95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:pagemaker:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4748647-13D5-48DF-9DBE-75EBFF8BC647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:pagemaker:7.0:*:plus:*:*:*:*:*",
            "matchCriteriaId" : "5594EAAC-5AC9-4CF4-B664-AB654B99D548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD03FB10-858D-4B2B-B86A-46AEBF7DA63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0820E48-12AD-4112-BC83-D81045D64AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D2452-C141-4A9E-ACA9-61A44FB63302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0A4519-88EA-448D-840E-8679977BA7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:premiere:1.5:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "0A0C3110-C713-497B-AC49-4CCE35E7FD49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:version_cue:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD4E1CD-8226-4308-8B6F-65B7AFB1CE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:version_cue:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABC546A-EE59-47E3-A0F0-9210050121D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:version_cue:gold:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "A10F07F5-5C99-40D5-9C15-C1DDA8D98B7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18698",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/332644.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/953860",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423587/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/332644.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/953860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423587/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421B7EB3-0D6B-4E8D-8765-FB82D2ABB4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:8.0:*:plus:*:*:*:*:*",
            "matchCriteriaId" : "F82519AB-EE21-48F9-A4C7-9EAB30FEE12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45CF4BC-6E75-4002-8D13-AB4499710F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:9.0:*:optimized:*:*:*:*:*",
            "matchCriteriaId" : "70066F07-8BD6-4A76-AF8B-37634718F7D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol_client_software:9.0:*:security:*:*:*:*:*",
            "matchCriteriaId" : "85FD69AC-21DC-4318-8FA8-11D58789ED8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/953860",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423587/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/953860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423587/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a \"Kashpureff-style DNS cache corruption\" attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3C0D00-DF20-4B46-8A7D-99D963BD921E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7904F3D9-A6B0-4ED6-8BAD-2D26C118C0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000551.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://computerworld.com/networkingtopics/networking/story/0%2C10801%2C103744%2C00.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18690",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015551",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015606",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425083/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00595837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000551.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://computerworld.com/networkingtopics/networking/story/0%2C10801%2C103744%2C00.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425083/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00595837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains \"Content-Disposition: inline\" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEE0340-36EA-477D-9928-6894B53F0802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C456D757-63DC-4881-AA9E-84C13B1AE9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28A92EC-24AB-471A-9E23-DE8493B50AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2128A01C-A2AA-4E11-94D6-E361486BBFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6337DBEC-591E-4D33-ABA0-D761237C4FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53804AD-1B87-4ED2-82BA-7F2DC518D9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7160595D-FB7B-45F9-85BD-5767B08F4855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB5EA9F-C405-4FCD-8BFA-71BC58E007AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0925.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19504",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_07_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://usn.ubuntu.com/265-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0925.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_07_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://usn.ubuntu.com/265-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0292",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-02T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED69BEB9-8D83-415B-826D-9D17FB67976B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "407F69BE-4026-4B26-AC31-11E7CC942760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18703",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18705",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18706",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18708",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18709",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-01.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0199.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0200.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425975/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425978/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=316885",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24430",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A670",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425975/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425978/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=316885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0293",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-02T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via user-defined methods that trigger garbage collection in a way that operates on freed objects."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-01.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=322045",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24430",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1494",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=322045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0294",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-02T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-02.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=317934",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24431",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1514",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=317934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0295",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-02T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759273",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-04.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-038A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=319296",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24433",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-038A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=319296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0296",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-02T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18703",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18705",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18706",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18708",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18709",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/592425",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-05.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0199.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0200.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425975/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425978/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-038A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=319847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24434",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11803",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1493",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/592425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425975/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425978/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-038A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=319847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via a crafted message to TCP port 4105."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "92B05C57-27C6-4FAC-9AA3-C9CF57DDA19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "85E7E137-4EC4-4569-8F66-F6D666F4C931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "718B16E7-EC80-47E1-883D-17FD37699038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "C45120C8-45B4-49DD-B0D3-A8D5C546A633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.210.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "5EFA2151-ACF6-4349-BAB9-2E3B1EF7530D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.210.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CDE7B781-7EF4-4A01-BB3E-9C74854A143E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "1AF1DF75-B777-4671-AEA5-9EA3F003558F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "49AB97F2-D2FD-4537-9202-0D226F615869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "244132F3-C47B-43E3-8376-91A8C96FFFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A2D23FC9-0571-4B30-AA2E-3D665614CBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "0C68783C-2C05-429C-8CE5-1465B9713388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.5:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "AA0644FA-3EBD-42CA-BE04-9ADBB405E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "F8CF224B-6F25-4604-93DF-1AD3B9A5BF45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E868C8C3-888C-4CEE-8EE1-AA6A3D74714F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "86CB3DDD-218D-4779-AA44-4A8EC5CB7277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.7:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "41668716-6903-4C7D-A711-9002993F0F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.7:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "C26914B1-64D5-4373-991C-7BD23BA74E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4A84D100-9206-4260-B964-2F4353F1CCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.8:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "27D477B6-362C-462B-8633-047558A7D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.8:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "2D090ECA-207B-49E2-8D35-5A30D21BD1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.8:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "36BDE660-E0E7-49F3-8E22-C6AF9FDFD6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.9:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0615577C-58F4-47D7-9011-DEEB2535FBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E7588F6-70FC-4F94-ADDB-BA6827AA87BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.10:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "54EBB120-10B8-443F-873D-FF9EB3F610FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "18B208FF-0A7C-40F6-95EA-5016CF9EE259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "D96976C3-E239-4650-B038-5D23BD8A15C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "D1B3E9C7-13FB-446B-AB19-188A2AB7FA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "FF9CD3CC-B928-4586-9B83-8F8E8D71CD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BF0E7CA2-8072-452A-972D-2CE4A7F9F96C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "E4AD65C2-3AFB-456E-AAD6-99CE2461143E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "8EC30A5D-ED76-428B-B265-0BA12AB54779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "B2F60D8A-FB22-4CE3-A190-8337E640F1DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6C56A1D6-5404-494C-B079-A9A346B83BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "562A148C-99D0-40AF-A374-97F20C60CD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "66270725-2A1D-4E64-8478-8767C1F663EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "1B911181-328C-43F5-AAB9-B6DF182D04DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "2E2B86C6-6BFD-40D8-B68F-72586FD432EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "EAD4DB89-E5C4-4162-A610-7C6B71900F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0FFF829D-8843-49BD-B819-F47E120C7A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "069DF3A0-7393-4D00-807C-477519D003C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "78381136-7E37-4513-AD1D-DFC2909D2FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "AC116FD6-CA21-44E0-BF34-E1C9EA91DBC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "AE8F6251-B63F-427C-B1E4-853D3EE50778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "86988EA3-B5FD-448B-8E59-9978B75C3B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.18.0:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "68E8D9B4-B0A8-471A-A5E4-9874A584DE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.19.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "D75A3D49-7E43-4D22-938C-111C0595C573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.19.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "82B7F0F4-5703-4E34-A853-D8BD2DECEE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.21:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "339618A2-B9DB-49AE-991E-A97FB9DC75EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.22:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0CCE6B6A-6678-4F9E-B6D3-22D9FDA650D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.23:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "CE853C05-CE93-4FEA-9612-D0B18D437BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.24:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "74568AA8-DEFD-4D81-B1B4-7DD62C327A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.25:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "34EB5C9A-DBF5-4ED8-8C0A-24ABDD33A300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A59B9C4A-1417-48DF-B486-B44384DCE936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AC781C-34E0-43B9-AD17-378A47FF25A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7D0D604-C8BC-4CCF-9FC1-2710E48CE131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2D5ABE0E-04CB-42F2-9108-9D0533186B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2AF7EB2D-3562-4859-BD89-8F337793F686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E8CA6A19-7B69-4152-9F75-8F849DA64BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "AB9F91F3-62B2-4BE4-A7F5-70C366FBB20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.10:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2E994B25-AE22-433E-85C1-8C4C5419FB89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "74B71CC0-797C-4EE0-979E-6BD700CD3A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.0:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "40700511-3E0E-4440-A721-C4A2A6B9B55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "37151885-A5DA-4C05-AC4D-B70DC4B77C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "6A486311-4EDD-420E-8F1F-C9004F476BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5C2F-F473-4195-A065-5A6801E0237F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "9CDB2916-82CE-482A-8D3C-CC283D4F8E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "830821A9-3600-400B-A80E-4484A1A56997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "CA5FEA1E-DE2F-4041-98A7-DC3A7E0A7BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "864EACD1-851B-4980-A5DA-C2385768DDD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.28.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C6C26471-E16B-430C-BA2C-E28D535CCD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7E5D5AB-A37F-49AD-A1AF-2CF429142AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.2:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "E1EC3C1F-41E3-467E-97DA-B361F208B956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.2:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "BAA3D191-936B-4CC7-B774-2F73AD410035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E760A088-1798-4665-96A8-5F6F6E0B0F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1F3D5F3D-9153-4324-89F0-D08E58716351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.3:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "4CAA946D-3F30-409C-BDE5-7B6D14E57090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.3:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "2443F7ED-2718-4F01-B280-B71440B92DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.3:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6391626F-A316-4C30-B3D8-BBAC2F92858E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "10108A6A-46C8-4F72-864C-123F6AB63468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.4:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3FB44F21-99FC-40A1-964A-E2BA477B467A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.4:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "910A7371-F68E-49C0-9F51-F1B444646C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.4:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "23FCA920-C5E0-4D04-BAF2-3F769D43497C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5D12CF2C-73EB-4731-9D03-90D196DCF026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "87E80F38-EC8A-4344-AC47-D992BAB62E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "BDD1662D-D97C-4FB1-845F-AAD77811313F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "9F61A088-C5D4-4F14-8E7A-F9E9376D72F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D8B0B16F-1A58-4162-82E9-0AD84108BFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A4D1D831-4AE0-48D7-8C3B-4A97FF60E581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8B158F3B-E8A5-41B2-905D-1E430837E95B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A972FB6D-5354-4AD4-9A31-913153660D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "8DFAB071-37DA-45A3-B8AF-8CF51C543311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "03FBCAD4-0BD2-4E43-8636-E30584C0AEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1E2F2D26-D681-4F65-9367-AC164C2A6D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C3775B53-001A-48A9-8C49-68E6B40B3A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "159DE2EF-C851-445A-A151-DF2F3B976488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "0C5DD419-9436-44C3-B930-9CFA1F06B1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "67CC159F-64B0-45B5-9247-75F140B975B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "94501469-5554-48C5-800A-FF6DB55456C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C0F3D3D5-C86B-48C3-9519-FA28C75C5108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4F8AF1A9-DDFA-447C-8C92-6DB383C94ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "4F1013F2-175F-4591-A825-E8B741B27D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "A80F43C2-5E16-4C15-8BEF-A3178211C9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7A268994-E3FF-40C5-906A-90C65EAA61B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "47B2C9E1-3A12-49BD-BCCF-183ECB886941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1004E5B8-1C53-49FF-8CE3-D9F2F167C8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "5D9CE76C-D04B-4199-8CD4-FF7CA49CC3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "4C7D72BC-8279-40F8-A27E-C5B7D517D307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "0A2A580B-16F9-4DAE-989B-2E010F1C25AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C43670B5-4892-46D0-9F8B-7A170DDD0191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "576B726E-02E1-4729-A1BD-D431E61560F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "8621BCAF-8506-448D-B60E-3BE2244C1294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "48366EB7-DE8B-40E2-8E53-27CABB13D005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A958D210-FE58-4CFC-A249-FCF7AC2BE4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "4C4A5F8E-2984-4FA8-BC51-9ED144710B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D3D4EB7D-1D24-4D37-82DF-D55112B34D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "7C90C982-71C7-440E-B556-88D64AD5DBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "C64482B5-DEC6-4098-973D-699BA136E699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "F926A695-A482-4202-BFD2-C193C6638B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "63162663-3F21-45A5-822D-511CA19E17C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4563EF7D-9C98-4F3B-9190-22B379B45BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "B286B402-4692-4BC1-95FE-5E9F3733A74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "1D396EC6-0E4A-4EFA-93C7-12B098E48CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7587EB9E-0F41-4A92-92BF-C59E90C4555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6535D569-C8A2-4A04-A754-A61FD3A23CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8B262EC2-6908-4D09-B110-D5D65E3DF0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "72F2AC87-D97B-4C83-AC7B-A1F5CAA41A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "58441CCA-A92A-45C7-8E9C-9E955574C625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "0DFEEB36-75FA-465D-8BC7-DE873DE4725F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "DA879B53-16D0-41E7-9D98-C6C6F6C65B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "EEC4ACB1-DB99-491C-B55A-5DCFF753D280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "91394DF4-2B71-464B-9204-01848BD1E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "72FEACA2-5689-4E5E-BBA1-9858D1348C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "CB6F5A86-25E9-4102-A582-CF74723096CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "608CD4ED-FB6A-4C0B-95B2-169B911AFE2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D3D47B67-1ED3-4D7E-8EFB-D159E5AD2547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18681",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_notice.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423785/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423785/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-02T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via spoofed CAM control messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "92B05C57-27C6-4FAC-9AA3-C9CF57DDA19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "6D54A1C6-044E-4A21-BF38-7BCEE8857595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "85E7E137-4EC4-4569-8F66-F6D666F4C931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "718B16E7-EC80-47E1-883D-17FD37699038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.05:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "C45120C8-45B4-49DD-B0D3-A8D5C546A633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.210.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "5EFA2151-ACF6-4349-BAB9-2E3B1EF7530D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.210.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "CDE7B781-7EF4-4A01-BB3E-9C74854A143E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "1AF1DF75-B777-4671-AEA5-9EA3F003558F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "49AB97F2-D2FD-4537-9202-0D226F615869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "244132F3-C47B-43E3-8376-91A8C96FFFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A2D23FC9-0571-4B30-AA2E-3D665614CBA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "0C68783C-2C05-429C-8CE5-1465B9713388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.5:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "AA0644FA-3EBD-42CA-BE04-9ADBB405E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "F8CF224B-6F25-4604-93DF-1AD3B9A5BF45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E868C8C3-888C-4CEE-8EE1-AA6A3D74714F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "86CB3DDD-218D-4779-AA44-4A8EC5CB7277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.7:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "41668716-6903-4C7D-A711-9002993F0F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.7:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "C26914B1-64D5-4373-991C-7BD23BA74E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4A84D100-9206-4260-B964-2F4353F1CCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.8:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "27D477B6-362C-462B-8633-047558A7D75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.8:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "2D090ECA-207B-49E2-8D35-5A30D21BD1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.8:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "36BDE660-E0E7-49F3-8E22-C6AF9FDFD6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.9:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "0615577C-58F4-47D7-9011-DEEB2535FBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E7588F6-70FC-4F94-ADDB-BA6827AA87BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.10:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "54EBB120-10B8-443F-873D-FF9EB3F610FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "18B208FF-0A7C-40F6-95EA-5016CF9EE259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "D96976C3-E239-4650-B038-5D23BD8A15C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "D1B3E9C7-13FB-446B-AB19-188A2AB7FA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "FF9CD3CC-B928-4586-9B83-8F8E8D71CD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.11:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BF0E7CA2-8072-452A-972D-2CE4A7F9F96C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "E4AD65C2-3AFB-456E-AAD6-99CE2461143E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "8EC30A5D-ED76-428B-B265-0BA12AB54779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "B2F60D8A-FB22-4CE3-A190-8337E640F1DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6C56A1D6-5404-494C-B079-A9A346B83BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.13:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "562A148C-99D0-40AF-A374-97F20C60CD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "66270725-2A1D-4E64-8478-8767C1F663EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "1B911181-328C-43F5-AAB9-B6DF182D04DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "2E2B86C6-6BFD-40D8-B68F-72586FD432EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "EAD4DB89-E5C4-4162-A610-7C6B71900F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.14:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0FFF829D-8843-49BD-B819-F47E120C7A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "069DF3A0-7393-4D00-807C-477519D003C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "78381136-7E37-4513-AD1D-DFC2909D2FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "AC116FD6-CA21-44E0-BF34-E1C9EA91DBC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "AE8F6251-B63F-427C-B1E4-853D3EE50778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.07.220.15:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "86988EA3-B5FD-448B-8E59-9978B75C3B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.18.0:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "68E8D9B4-B0A8-471A-A5E4-9874A584DE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.19.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "D75A3D49-7E43-4D22-938C-111C0595C573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.19.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "82B7F0F4-5703-4E34-A853-D8BD2DECEE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.21:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "339618A2-B9DB-49AE-991E-A97FB9DC75EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.22:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "0CCE6B6A-6678-4F9E-B6D3-22D9FDA650D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.23:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "CE853C05-CE93-4FEA-9612-D0B18D437BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.24:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "74568AA8-DEFD-4D81-B1B4-7DD62C327A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.25:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "34EB5C9A-DBF5-4ED8-8C0A-24ABDD33A300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A59B9C4A-1417-48DF-B486-B44384DCE936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "52AC781C-34E0-43B9-AD17-378A47FF25A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7D0D604-C8BC-4CCF-9FC1-2710E48CE131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2D5ABE0E-04CB-42F2-9108-9D0533186B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2AF7EB2D-3562-4859-BD89-8F337793F686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E8CA6A19-7B69-4152-9F75-8F849DA64BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "AB9F91F3-62B2-4BE4-A7F5-70C366FBB20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.26.10:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2E994B25-AE22-433E-85C1-8C4C5419FB89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "74B71CC0-797C-4EE0-979E-6BD700CD3A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.0:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "40700511-3E0E-4440-A721-C4A2A6B9B55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.0:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "37151885-A5DA-4C05-AC4D-B70DC4B77C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "6A486311-4EDD-420E-8F1F-C9004F476BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "8B7B5C2F-F473-4195-A065-5A6801E0237F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "9CDB2916-82CE-482A-8D3C-CC283D4F8E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "830821A9-3600-400B-A80E-4484A1A56997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "CA5FEA1E-DE2F-4041-98A7-DC3A7E0A7BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.27.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "864EACD1-851B-4980-A5DA-C2385768DDD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.28.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C6C26471-E16B-430C-BA2C-E28D535CCD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A7E5D5AB-A37F-49AD-A1AF-2CF429142AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.2:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "E1EC3C1F-41E3-467E-97DA-B361F208B956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.2:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "BAA3D191-936B-4CC7-B774-2F73AD410035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.2:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E760A088-1798-4665-96A8-5F6F6E0B0F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1F3D5F3D-9153-4324-89F0-D08E58716351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.3:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "4CAA946D-3F30-409C-BDE5-7B6D14E57090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.3:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "2443F7ED-2718-4F01-B280-B71440B92DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.3:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6391626F-A316-4C30-B3D8-BBAC2F92858E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "10108A6A-46C8-4F72-864C-123F6AB63468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.4:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3FB44F21-99FC-40A1-964A-E2BA477B467A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.4:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "910A7371-F68E-49C0-9F51-F1B444646C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.4:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "23FCA920-C5E0-4D04-BAF2-3F769D43497C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5D12CF2C-73EB-4731-9D03-90D196DCF026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "87E80F38-EC8A-4344-AC47-D992BAB62E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "BDD1662D-D97C-4FB1-845F-AAD77811313F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "9F61A088-C5D4-4F14-8E7A-F9E9376D72F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "D8B0B16F-1A58-4162-82E9-0AD84108BFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A4D1D831-4AE0-48D7-8C3B-4A97FF60E581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8B158F3B-E8A5-41B2-905D-1E430837E95B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A972FB6D-5354-4AD4-9A31-913153660D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "8DFAB071-37DA-45A3-B8AF-8CF51C543311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "03FBCAD4-0BD2-4E43-8636-E30584C0AEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "1E2F2D26-D681-4F65-9367-AC164C2A6D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C3775B53-001A-48A9-8C49-68E6B40B3A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "159DE2EF-C851-445A-A151-DF2F3B976488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "0C5DD419-9436-44C3-B930-9CFA1F06B1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "67CC159F-64B0-45B5-9247-75F140B975B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "94501469-5554-48C5-800A-FF6DB55456C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C0F3D3D5-C86B-48C3-9519-FA28C75C5108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4F8AF1A9-DDFA-447C-8C92-6DB383C94ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "4F1013F2-175F-4591-A825-E8B741B27D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "A80F43C2-5E16-4C15-8BEF-A3178211C9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7A268994-E3FF-40C5-906A-90C65EAA61B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "47B2C9E1-3A12-49BD-BCCF-183ECB886941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.13:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "1004E5B8-1C53-49FF-8CE3-D9F2F167C8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "5D9CE76C-D04B-4199-8CD4-FF7CA49CC3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "4C7D72BC-8279-40F8-A27E-C5B7D517D307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "0A2A580B-16F9-4DAE-989B-2E010F1C25AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "C43670B5-4892-46D0-9F8B-7A170DDD0191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.14:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "576B726E-02E1-4729-A1BD-D431E61560F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "8621BCAF-8506-448D-B60E-3BE2244C1294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "48366EB7-DE8B-40E2-8E53-27CABB13D005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A958D210-FE58-4CFC-A249-FCF7AC2BE4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "4C4A5F8E-2984-4FA8-BC51-9ED144710B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.15:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D3D4EB7D-1D24-4D37-82DF-D55112B34D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "7C90C982-71C7-440E-B556-88D64AD5DBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "C64482B5-DEC6-4098-973D-699BA136E699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "F926A695-A482-4202-BFD2-C193C6638B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "63162663-3F21-45A5-822D-511CA19E17C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.16:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4563EF7D-9C98-4F3B-9190-22B379B45BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "B286B402-4692-4BC1-95FE-5E9F3733A74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "1D396EC6-0E4A-4EFA-93C7-12B098E48CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7587EB9E-0F41-4A92-92BF-C59E90C4555D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "6535D569-C8A2-4A04-A754-A61FD3A23CC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.17:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "8B262EC2-6908-4D09-B110-D5D65E3DF0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "72F2AC87-D97B-4C83-AC7B-A1F5CAA41A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "58441CCA-A92A-45C7-8E9C-9E955574C625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "0DFEEB36-75FA-465D-8BC7-DE873DE4725F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "DA879B53-16D0-41E7-9D98-C6C6F6C65B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.18:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "EEC4ACB1-DB99-491C-B55A-5DCFF753D280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "91394DF4-2B71-464B-9204-01848BD1E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "72FEACA2-5689-4E5E-BBA1-9858D1348C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "CB6F5A86-25E9-4102-A582-CF74723096CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "608CD4ED-FB6A-4C0B-95B2-169B911AFE2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:messaging:1.11.29.19:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D3D47B67-1ED3-4D7E-8EFB-D159E5AD2547"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18681",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423785/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423785/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0297",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-02T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the (1) EscapeAttributeValue in jsxml.c for E4X, (2) nsSVGCairoSurface::Init in SVG, and (3) nsCanvasRenderingContext2D.cpp in Canvas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-06.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=319872",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=322215",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1339",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=319872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=322215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0298",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-02T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly read sensitive data via unknown attack vectors that trigger an out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-07.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24436",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A677",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0299",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-02T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal \"AnyName\" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-08.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=322312",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24437",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1625",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=322312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as \"root\" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB0E6D4B-724D-4724-82A7-F2C2A966FB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0:*:solaris_s:*:*:*:*:*",
            "matchCriteriaId" : "7D160969-87D2-459B-A62A-B893A1FAA4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_access_manager:7.0:*:solaris_x:*:*:*:*:*",
            "matchCriteriaId" : "19C2F86A-5074-4FB4-B522-4B91014C51B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102140-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102140-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:media2_cms:shop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4B47AD-6A2C-4661-A8C0-5103C345EDD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18683",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423768",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16471",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via the numdays parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en webmailaging.cgi en cPanel permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro numdays."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA69338-184A-4B69-8BB6-6B05BA866F45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113894933522271&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18691",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113894933522271&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the (1) ortak or (2) kat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybershop:asp_ultimate_e-commerce_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC61E35-C835-4A0A-8C09-60943D0D00FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423787/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16473",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423787/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.  NOTE: this candidate does not contain any actionable or distinguishing information.  Perhaps it should not be included in CVE.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:communityserver.org:community_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23991B92-A008-4685-ADC6-774B7C467805"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.  NOTE: some sources say that the affected parameter is \"date,\" but the demonstration URL shows that it is \"sort\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neomail:neomail:1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56161099-5581-4600-BA9A-CD23FD398243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22978",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423901/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423901/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code via a long RCPT TO argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kinesphere_corporation:exchange_pop3:5.0_build_050203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6DB736-B54D-4F7E-A0D9-1FFB0C1A223F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/exchangepop3.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18687",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/exchangepop3.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CipherTrust IronMail 5.0.1, when \"Denial of Service Protection\" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciphertrust:ironmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.1",
            "matchCriteriaId" : "B34DB3F5-C512-4E03-8557-9C72A4BAE825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423898/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423898/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux glibc to report heap memory corruption, possibly because a strcpy in the strdup2 function can \"overwrite some data.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thibault_godouet:fcron:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53632767-EDB4-4AF0-A23A-32A6636A64EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0999.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fcron.free.fr/doc/en/changes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fcron.free.fr/news.php#a20060206a.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423697/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.trustix.org/show_bug.cgi?id=1754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0999.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fcron.free.fr/doc/en/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fcron.free.fr/news.php#a20060206a.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423697/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.trustix.org/show_bug.cgi?id=1754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tachyon:vanilla_guestbook:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FE8F7E-ECC5-470D-9E6A-E62703B3F375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.evuln.com/vulns/54/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423957/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/54/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423957/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to \"posting new messages.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tachyon:vanilla_guestbook:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FE8F7E-ECC5-470D-9E6A-E62703B3F375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.evuln.com/vulns/54/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423957/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426200/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/54/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423957/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426200/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukedweb:guestbookhost:2005-04-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FFA3FDE-70A1-484F-94D3-F936B3A57C74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/56/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424714/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/56/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424714/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encoded Rich Text Format (RTF) escape sequences (1) \\'d1, (2) \\'d2, (3) \\'d3, (4) \\'d4, and (5) \\'d5.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerulean_studios:trillian:3.1.0.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8694251-340A-41B1-92A7-6354FFEF6DB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22877",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/22877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to \"file://\" followed by a large number of \"-\" (dash of hyphen) characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:7.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33815E-5D85-4F0E-A4D1-DB31A64C8801"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.security-protocols.com/advisory/sp-x23-advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16463",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/advisory/sp-x23-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65952A65-78AC-4239-9D15-BA850AF64598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094040BF-4C59-4266-9683-76C59D332F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02151FE-89D6-4FB5-82E2-50A2F1046341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E1B205-864C-4FAD-8891-12FBAC0E090F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047CFF77-7616-41A2-9879-EA0E33B4922C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B321E2E-4AD3-4236-918A-F87804990FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2232ED2E-0323-4DBB-8540-98BD52750025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895472F7-D0F8-4C6A-95C6-15963652ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FAA03-DD05-472D-9F67-3089262F5E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015549",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cyberlords.net/advisories/cl_ubb.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cyberlords.net/advisories/cl_ubb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via \"evilcode\" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in the key parameter.  NOTE: it is not clear whether this vulnerability is associated with an online service or application service provider.  If so, then it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egeinternet:egeinternet:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1699B20D-510F-4893-83A2-1A33F1628A09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423365/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423365/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTH_ALTER_SESSION attribute in the authentication phase of the Transparent Network Substrate (TNS) protocol.  NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DB18 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0265."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "334D29CD-4DE2-4708-91C2-33553D293B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "79C34F0C-C9FD-4414-9443-B4D6D606B4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7180CD-675E-4311-AE7A-6098EE241965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "038355F8-17CC-47FA-B6D0-177EC8474BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD0E80A-7B43-4192-B07F-46AA9CB48CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB36B8C-D90F-41DE-8762-218EDBF2BB51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "85572FA0-7407-4A1C-AD5A-60FF237A20AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041464.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.imperva.com/application_defense_center/papers/oracle-dbms-01172006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/871756",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041464.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.imperva.com/application_defense_center/papers/oracle-dbms-01172006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/871756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DB15 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C90DDF1-FFD7-4CC0-839E-3672216D6F3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/150332",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/150332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DB05 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260.  However, there are some inconsistencies that make this unclear, and there is also a possibility that this is related to DB06, which is subsumed by CVE-2006-0259."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB36B8C-D90F-41DE-8762-218EDBF2BB51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/629316",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_metadata_util.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/629316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_metadata_util.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service.  NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DBC02 from the January 2006 CPU, in which case this would be a duplicate of CVE-2006-0283.  However, there are enough inconsistencies that the mapping can not be made authoritatively."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle_client:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18651415-E012-4C47-AFDB-159C71547B98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/999268",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/999268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors.  NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DB06 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0259 or, if it is DB05, subsumed by CVE-2006-0260."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C8910-D7E7-4B50-A506-58B425B2BE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/983340",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/983340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-018A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-04T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:10g_enterprise_manager_grid_control:10.1_.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916550D9-3EFA-40D6-BB9E-39B07EF745CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:10g_enterprise_manager_grid_control:10.1_.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187A6276-9004-4D45-B9B5-FFECABC48CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "117EF4D2-3EA8-410E-8721-31C3C41A7B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "335143DB-4538-49F4-BAFB-C47802318667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94B7D50-4527-4C14-8A50-D4C0566F36BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7CAAFD-C15A-4124-933F-C6CCFF35BB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "58B58DAF-FDF2-4A07-97E1-3CDE2A84670E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C5E780-C03A-46DB-85A2-2471AF377206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3341ECC8-1E5F-4436-B056-9CA2BAF659E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8347DA-6C8E-4AFB-BBB1-A34F1339F5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98A6CD5A-A66F-4A07-B4FC-09B71B776CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C84852A-1153-46A7-9B82-D05F4A6043D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACC77BE-277F-47F9-B50A-2E9CF5D4A965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:developer_suite:9.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A8D0C-6ABC-43EB-A762-526ED2620C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:developer_suite:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D276CCCB-3975-496A-B97B-C155BFA7E959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:developer_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85E0292-DF98-4EA4-8DCE-3C94E94A12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:developer_suite:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94034D25-B0BA-4B4F-89F3-50227D75B8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57A5AE0-90B5-410E-8878-BD514C3B7946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7EAC35-E890-444A-B070-C91382F2E242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69568B66-122B-4946-B630-2960DAA1885E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FEA4F-B1C7-4250-81FD-AC1289769348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:8.95.f1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D118CD-2C73-4AC8-9028-C828262507F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:sp23_l1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780466DC-6192-4BC0-B1A7-18C70AC4A276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E604B-6C0D-474F-A3A9-B07EF0A7D2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52C2C2-64C3-40BA-86A1-C4A14BEB8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323353FE-7ECD-4668-BDB1-3E5CA8F3F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33627F4-3E7D-4181-8171-2B65F8C60E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A39665-BB49-4135-9850-8CF9E69546FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B5ED54-BAF4-41B3-8B09-F9795AB7A18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EA2727-2F53-470F-AF58-1B33B7A5B7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAD20B6-258F-4093-BEE0-99F11D61A61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B900301-8AC5-43BD-BD2B-639419885820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3E2494-5BAE-425B-8F32-A4D2532B10C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65C2671-2FFE-4461-A570-72E3BBC312D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0C29E8-E7CA-4C96-B32F-695808B99AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle8i:standard_8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FA45BE-C7AB-429C-A0A3-928BEC3E78E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90F6C4F-CEF5-4172-97FC-617B71EAA636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5_fips:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61ECB215-482D-4E47-A1CE-169ADE17812B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61851FB-AC6F-4E56-8CA8-F8CE97D65364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397FC5F3-27E7-4BD7-9348-E671640327FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_portal:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1146E890-0911-4BFB-A1C2-6E158C8EA0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_portal:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19179B0-0048-43D8-B632-66B4788AB1FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_portal:8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E19B32-0C02-4E53-AAD4-B95FB6CA7D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:workflow:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD884F9-1511-4221-A1C7-3B18076222A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:workflow:11.5.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C6DF37-B648-445C-B17A-D232B35DD639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/545804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-06T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin_smilies.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as \"onmouseover\" in the (1) smile_url or (2) smile_emotion parameters, which bypasses a check for \"<\" and \">\" characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-06T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to (1) admin/admin_users.php and (2) modcp.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18693",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-06T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:5.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FA6E05-2048-457E-BCD8-C08477AA2D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C419CCFC-9DDE-4018-BECA-5AB6B3ADDCE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041930.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18725",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015582",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24011562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423946/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vsecurity.com/bulletins/advisories/2006/tam-file-retrieval.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041930.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24011562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423946/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vsecurity.com/bulletins/advisories/2006/tam-file-retrieval.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-06T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluggedout:pluggedout_blog:1.9.9c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D23B42-9346-4962-91B1-0496C23B9164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000530.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/pluggedoutblog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18726",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423948/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000530.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://hamid.ir/security/pluggedoutblog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423948/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-06T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluggedout:pluggedout_blog:1.9.9c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D23B42-9346-4962-91B1-0496C23B9164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000531.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/pluggedoutblog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18726",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015586",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423948/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000531.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://hamid.ir/security/pluggedoutblog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423948/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-06T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:html_help:1.4:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "03C58F93-8D1C-457B-8F64-9308DA10BC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:html_help_workshop:4.74.8702.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1450FF90-A4E5-4E5A-98CB-B89EE440B85B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18740",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://users.pandora.be/bratax/advisories/b008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/124460",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://users.pandora.be/bratax/advisories/b008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/124460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-06T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALS[path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad incluida en el archivo remoto PHP en inc/backend_settings.php en Loudblog 0.4 y versiones anteriores permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro $GLOBALS[path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "041D4BD9-C9F6-4DC2-9071-798CE1B81A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17E5977-B8FF-4D16-9C97-AA1AC3ED4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC60116B-ECDE-425B-8164-B6C6AE4CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C80931-083A-4F93-A69C-CCE0726FC3BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/loudblog_04_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18722",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423947/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0441",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/loudblog_04_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423947/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-06T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (application crash) via LDAP messages that contain Distinguished Names (DN) fields with a large number of elements."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:communigate:communigate_pro_core_server:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75247E71-A404-4B5B-A6B1-5791BF3AA43F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gleg.net/advisory_cg2.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423968/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.stalker.com/CommuniGatePro/History.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gleg.net/advisory_cg2.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423968/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stalker.com/CommuniGatePro/History.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0454",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send, does not properly handle when the ip_options_echo function in icmp.c fails, which allows remote attackers to cause a denial of service (crash) via vectors such as (1) record-route and (2) timestamp IP options with the needaddr bit set and a truncated value."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux en versiones anteriores a 2.6.15.3 hasta la versión 2.6.12, mientras construye una respuesta ICMP en icmp_send, no maneja adecuadamente cuando la función ip_options_echo en icmp.c falla, lo que permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores, tales como (1) record-route y (2) opciones timestamp IP opciones con el conjunto de bit needaddr y un valor truncado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002909.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113927617401569&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113927648820694&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18766",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18774",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18784",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18861",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16532",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0006",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-250-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0464",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24575",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113927617401569&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113927648820694&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-250-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This vulnerability was introduced into the Linux kernel in version 2.6.12 and therefore does not affect users of Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-09-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify Config page is blank, allows remote attackers to access files outside of the web root via \"..\" (dot dot) sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curtis_farnham:files_xaraya_module:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D524485-6A07-432A-B168-E2827EAC9032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curtis_farnham:files_xaraya_module:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A86CE8-F815-4576-94B8-B6512BC5AE4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/0371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xaraya.curtisfarnham.com/articles/Files_0.5.1_-_Security_Fix_and_other_things",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xaraya.curtisfarnham.com/articles/Files_0.5.1_-_Security_Fix_and_other_things",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in throw.main in Outblaze allows remote attackers to inject arbitrary web script or HTML via the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outblaze:outblaze:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7DCD32-2BF2-46E3-8451-03227359740A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18710",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.morx.org/outblazeXSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423915/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.morx.org/outblazeXSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423915/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username field during the registration of a new account.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "A811424F-92A1-4895-BF12-8627CD39AAE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18721",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phpstatus:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A408DF-A4A4-4E23-81AF-944375F62D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/61/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424842/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/61/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424842/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phpstatus:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A408DF-A4A4-4E23-81AF-944375F62D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/61/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424842/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/61/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424842/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phpstatus:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A408DF-A4A4-4E23-81AF-944375F62D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/61/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424842/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/61/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424842/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to (a) editquota.html or (b) dodelpop.html; (2) showtree parameter to (c) diskusage.html; or the (3) mon, (4) year, (5) target, or (6) domain parameter to (d) stats/detailbw.html."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en cPanel 10 y versiones anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios mediante el parámetro (1) email a (a) editquota.html o (b) dodelpop.html; parámetro (2) showtree a (c) diskusage.html; o el parámetro (3) mon, (4) year, (5) target o (6) domain a (d) stats/detailbw.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B33AE8-75A8-4454-A1A3-33F4034015FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4394768-37BE-4FC5-A65A-28C0295A33B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC52A018-43E8-4D86-A84C-81064B6ACD74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC66D8D-01B8-4312-A311-ACAB43699071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E892FB52-DB84-422F-ABB6-29AB95726138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC5C591-69F3-411F-A53A-72D17687CA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92D81000-1A7C-4465-9EE2-E651AED09F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09258895-32E6-49AC-8C96-D2838A0C8E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4F9F98-08A2-430B-BC96-B30DCA165F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D546C9-674B-4683-9EC5-18156CE04B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E915DEA-1BA9-429D-97D5-CA3D37C969B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F23C1C-4F4E-4BFA-8FF2-51BF76EAE0C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113898556313924&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113898556313924&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML via the (1) file extension or (2) mime-type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F23C1C-4F4E-4BFA-8FF2-51BF76EAE0C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0062.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424148/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424148/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-07T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via \"..\" sequences and a symlink attack on the temporary file that is used during conversion."
      }, {
        "lang" : "es",
        "value" : "convert-fcrontab en Fcron 2.9.5 y 3.0.0 permite a atacantes remotos crear o sobreescribir archivos arbitrarios a través de secuencias \"..\" y un ataque de enlace simbólico en el archivo temporal que es utilizado durante la conversión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thibault_godouet:fcron:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEDC35B-0C09-410A-8708-B7DE23E65CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thibault_godouet:fcron:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53632767-EDB4-4AF0-A23A-32A6636A64EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113890734603201&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113890734603201&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs.  NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo.  In such a context, this is a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1",
            "matchCriteriaId" : "E0A5F6D7-FED4-4D69-9800-FCE54AC5B8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F64BD56-0FCA-489B-8AB7-C0F9726A00D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF9D9DF-7709-4127-8CC6-AE692EC118C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E4F6E3-E26C-465F-AF71-0F59E4F537D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E008E77-4062-44A9-AD98-840AC0983D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16818016-0256-4503-8740-6CDBDDDD3C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED019ED4-F39D-412D-A434-CDE919008716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BC15E9-28C1-4578-83F0-C4FAA1E5F6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2847991-B3A8-4AD7-BA6E-33BBCFF942D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A387B777-6D05-4015-9AC2-496138961266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476D6DFF-BA04-4F2C-9A78-D0E896A842D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE248AE-6EC1-4AF9-B960-199910EF3C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C89589-3969-4EFC-ABD6-B982AC81AF45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EF60C0-AF4F-466E-9EBE-3EBA55024019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296E08E8-7F9A-418C-8EEE-6C997B40A7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243C970A-DDE5-4C1C-8E19-DAFF5316343A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90866C6B-32CF-4E08-9103-4F826963364F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maynard_johnson:oprofile:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18D8FFF-BA38-4580-80BA-AEE6B794B6C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.redhat.com/magazine/012oct05/features/oprofile/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424325/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/magazine/012oct05/features/oprofile/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424325/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426: Untrusted Search Path'",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug for Red Hat Enterprise Linux 3\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207347\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue was fixed for Red Hat Enterprise Linux 4 in the following errata:\nhttp://rhn.redhat.com/errata/RHEA-2006-0355.html\n\nThis issue does not affect Red Hat Enterprise Linux 2",
        "lastModified" : "2006-09-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the \"Appearance\" dialog and selecting the \"Additional styles (skins) are available on the Lexmark web site\" option, which launches a web browser that is running with SYSTEM privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:lexmark:x1185:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF37F37-5C45-44C1-A0E2-E0488037C90C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424322/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424322/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters."
      }, {
        "lang" : "es",
        "value" : "Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 no impone reglas CONNECT cuando se usa Deep Content Inspection, lo que permite a atacantes remotos evitar filtros de conexión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bluecoat:sgos:4.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A2D437-2963-41DD-A78C-5E2D0DF34839"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18622",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_connect_denial_ignore.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.secumind.net/content/french/modules/news/article.php?storyid=8",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/advisory_connect_denial_ignore.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.secumind.net/content/french/modules/news/article.php?storyid=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the demux_asf_read_packet function in demux_asf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de enteros en (1) la función new_demux_packet en demuxer.h y (2) la función demux_asf_read_packet en demux_asf.c en MPlayer 1.0pre7try2 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un fichero ASF con un valor de longitud de paquete grande. NOTA: la proveniencia de esta información es desconocida, parte de los detalles son obtenidos de información de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_pre7try2",
            "matchCriteriaId" : "D5D0864C-F35B-432D-8E54-D24D1843354B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted packet to the LDAP port (389/TCP)."
      }, {
        "lang" : "es",
        "value" : "IBM Lotus Domino Server 7.0 permite a atacantes remotos causar una denegación de servicio (fallo de segmentación) mediante un paquete artesanal al puerto LDAP (389/TCP)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E24CCA-5D3F-4F8D-BEF4-937D7B54B8C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002896.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002896.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the (1) GatewayID parameter in an add action in AddGatewaySettings.asp and (2) IP parameter in IPManager.asp."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en Hosting Controller 6.1 Hotfix 2.8 permite a usuarios remotos autenticados ejecutar órdenes SQL de su elección mediante el parámetro (1) GatewayID en una acción añadir en AddGatewaySettings.asp y (2) el parámetro IP en IPManager.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0B0DB0-92F4-4F62-8962-0723633540BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18731",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015584",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Heimdal  0.6.x anteriores a 0.6.6 y 0.7.x anteriores a 0.7.2 cuando se almacenan credenciales remitidos, permite a atacantes sobreescribir ficheros de su elección y cambiar la propiedad de los ficheros mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1CE868-E352-422A-BC84-94A6781D7119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4940AAA1-A24F-46CC-B6EA-AE501D6AADE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603FCBB1-D450-4F34-A391-5C629294F3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5956639B-01FC-44C7-8CA9-1A7F5805C029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127A27A4-D022-468C-9389-7D571D4E1901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE2636-A566-4E90-BA21-E50B5505C79F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C375B952-22B2-4D90-A80F-FCC5C394BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DF5422-8DB9-427F-BDFB-D8C667366F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237363DB-8160-4B5D-B15E-F3D380C31251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18733",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18806",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18894",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19302",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-977",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-14.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pdc.kth.se/heimdal/advisory/2006-02-06/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426043/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-253-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/247-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pdc.kth.se/heimdal/advisory/2006-02-06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426043/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-253-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/247-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en mailarticle.php en Clever Copy 3.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro ID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6ADDC15-B5BE-4443-A4DC-1718041E42F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB805CA-1609-4707-86A3-B7AE9E993742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EF032F-EE7C-4CAA-9A5C-35FFD9B2944B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F04E72-E443-4932-9DC6-31041366AE50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5DD585-BF9F-4AE5-B112-A6D9AB1ACDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4679FE-E971-435C-AED0-6E1DB3E561E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BE426F-A466-4089-A74E-681FC14BECE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/Clever_Copy_V3_sql_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/Clever_Copy_V3_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings."
      }, {
        "lang" : "es",
        "value" : "La función PSCipher en PeopleSoft People Tools 8.4x usa PKCS #5 con una clave DES fija para almacenar contraseñas de usuarios, lo que hace fácil para un usuario local adivinar contraseñas con un ataque de diccionario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peoplesoft:peopletools:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B618A8-48AF-4193-BCD8-7B0F24923860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peoplesoft:peopletools:8.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "805FBA0A-0B52-4E61-A45C-E2C9AD48E555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peoplesoft:peopletools:8.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94A7F77-D984-49BD-B59E-EBBC91C56C66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peoplesoft:peopletools:8.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD78CC13-C007-4AB1-912E-16B37D1D55CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peoplesoft:peopletools:8.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECCB21D3-4FCB-4F0E-8430-B587512D04ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peoplesoft:peopletools:8.45.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396A4024-2F8F-4921-8D88-06CBDF21FA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peoplesoft:peopletools:8.46.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D589760B-C617-403D-8C18-19E9F9FCFBCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424086/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424086/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "12795425-C494-4D99-8B44-956505C7D53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF9241-A175-438C-A793-3D245BE2AE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62AC866-A06F-47DB-AEDF-E345CE0B14A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943D5C5C-FC49-4EDE-AE75-A79CFF42208E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EB6841-0427-479B-8771-06DF62EE3C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A08F-D4C7-46FC-8FE5-972644F85ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B815D9-BC21-4A17-AF00-B8AD181027D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42502347-DD40-4F8C-9861-C0A88A3F8608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF9C64F-9A67-4BA9-A653-75507935E6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D82B89-456D-41CB-A894-B6A22FB4415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FF4E47-AD75-42C7-BB84-42BBA46A58B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E21CE6E-2B33-4225-B1DC-C19F1D578040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B26CE22-E730-4247-853E-5E640DB3ECB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A652453-AB5F-405C-ABDE-CE1B54FEACED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141080AB-48DE-4885-BAB6-6F0937ABD49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB758D76-B7F6-4E87-B88D-620443655CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28655AC5-1512-4F45-9963-CA26F73981CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC05584-F553-4D29-9C46-C9EE5F0CB166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B108A86E-8387-446C-B823-BE6FCAE747A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3F79B8-512A-4B88-868C-7C4ADFD223C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078C3A86-C9F8-4A19-9DDC-1065B54E640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9030923C-356E-4FAB-8E64-03D462B4DB5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0FFABC-8BED-4838-85FE-406DC9CF9B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DB4A00-4F70-4189-81BD-9318C52DF2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B8985B-B927-4928-B1DB-18E29F796992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61125B09-23AA-4D5A-8332-6B5CCD80C7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4690B85-86B9-448E-9249-B3885DEDC60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E215C82-E4AD-4B87-92D8-DD4D486EB6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F4C80-3B1B-45BD-966F-C9DBF98B875D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65E0DC1-40F6-4252-945A-A972343D1E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C07C1A9-1A94-4653-8C57-6FCFC25854E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC57519-AD96-4ECF-A5B2-4E45F7D55298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DE3DE6-A355-41F2-BF5E-E7526449E753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB24B4F-44FF-4F0F-90FA-240A34B9599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "919A6551-DB18-49BD-AB92-4C453B3B728F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C512DAB3-2720-42D2-B27E-28F30FE0FE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB90458F-1F2B-4F4C-88C6-4B670787D126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFFB565-F656-43E3-89E1-E412DC4C9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4336F0E-75FE-4592-9D98-4F689804956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BD2A05-3FCE-4C5D-8228-968630F27E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4430779C-C678-4950-AE9E-82CDFC1A08D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0EC334-AEAD-43CA-A609-C027060F4F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF320BE-F022-4E0E-9815-B8AEED87B384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75532B2D-6814-4D20-8AEB-E7DFD66B6423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83802E30-8E7D-4CAB-B8FC-10056CF833D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423675/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425422/30/6890/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16441",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423675/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425422/30/6890/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multiple parameters in (1) ATTACH_JOB, (2) HAS_PRIVS, and (3) OPEN_JOB functions in the SYS.KUPV$FT package; and (4) UPDATE_JOB, (5) ACTIVE_JOB, (6) ATTACH_POSSIBLE, (7) ATTACH_TO_JOB, (8) CREATE_NEW_JOB, (9) DELETE_JOB, (10) DELETE_MASTER_TABLE, (11) DETACH_JOB, (12) GET_JOB_INFO, (13) GET_JOB_QUEUES, (14) GET_SOLE_JOBNAME, (15) MASTER_TBL_LOCK, and (16) VALID_HANDLE functions in the SYS.KUPV$FT_INT package.  NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that these issues has been addressed by Oracle.  It is unclear which, if any, Oracle Vuln# identifiers apply to these issues."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Oracle 10g Release 1 en versiones anteriores a CPU de Enero de 2006 permiten a atacantes remotos ejecutar comandos SQL arbitrarios a través de parámetros múltiples en funciones (1) ATTACH_JOB, (2) HAS_PRIVS y (3) OPEN_JOB en el paquete SYS.KUPV$FT; y funciones (4) UPDATE_JOB, (5) ACTIVE_JOB, (6) ATTACH_POSSIBLE, (7) ATTACH_TO_JOB, (8) CREATE_NEW_JOB, (9) DELETE_JOB, (10) DELETE_MASTER_TABLE, (11) DETACH_JOB, (12) GET_JOB_INFO, (13) GET_JOB_QUEUES, (14) GET_SOLE_JOBNAME, (15) MASTER_TBL_LOCK y (16) VALID_HANDLE en el paquete SYS.KUPV$FT_INT. NOTA: debido a la falta de detalles relevantes en la recomendación de Oracle, se está creando una CVE separada ya que no se puede probar concluyentemente que estas cuestiones hayan sido dirigidas por Oracle. No está claro cuáles, si es que hay alguno, de los identificadores de Oracle Vuln# se aplican a este caso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B82E1-D1AD-46F2-8B95-117F38563FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC5FDD9-F24C-4DA2-9CE3-96522DB4A10E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDECF110-F375-4A3C-8BA9-1CF69B6EF027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F36775-7D44-405E-8DE3-EBD71C9EE421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94B7D50-4527-4C14-8A50-D4C0566F36BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E604B-6C0D-474F-A3A9-B07EF0A7D2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8667E51F-86A9-4181-8FCC-BECC6F50913B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52C2C2-64C3-40BA-86A1-C4A14BEB8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84E349-48A8-4800-A300-AACEC8659656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323353FE-7ECD-4668-BDB1-3E5CA8F3F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33627F4-3E7D-4181-8171-2B65F8C60E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D1E996-3AD3-4B17-B959-6790BC735F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8975840-9843-4034-BBED-B31A9BA16DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A39665-BB49-4135-9850-8CF9E69546FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2764001-8B54-47AD-A265-0C0B0F691A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B5ED54-BAF4-41B3-8B09-F9795AB7A18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EA2727-2F53-470F-AF58-1B33B7A5B7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAD20B6-258F-4093-BEE0-99F11D61A61F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041498.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041499.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_kupv%24ft.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_kupv%24ft_int.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422423/30/7370/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422424/30/7370/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041498.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041499.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_kupv%24ft.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_kupv%24ft_int.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422423/30/7370/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/422424/30/7370/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en util.php de Gallery anteriores a 1.5.2-pl12 permite a usuarios remotos autenticados engañar a un propietario para modificar datos de álbumes almacenados y posiblemente ejecutar código de su elección mediante vectores no especificados que conllevan un enlace artesanal a un fichero artesanal.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0D3AAC-9BB0-49E9-BD67-27A635DA34CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B821AEB0-7C0C-407E-9CCB-EEB16E1A2719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F517D6BA-9793-4A4D-BDC6-2F5349F0B354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E876B0F6-8363-43E0-8E00-E55B04A05F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131E313-CB18-45D7-9F4C-096EB0337B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2D7CE2-1461-4D01-A4B1-9E6F7A68FB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA0436A-8294-44B4-B7D1-62A73BE4DFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9125286-5A7D-4A1B-B5C4-888581B9798C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54143C9E-0EB0-4137-A01A-3E8C8A7412F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89382A13-8E5D-44DC-8D6B-8FD8DCAFE525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C999044-00FE-4DE1-A235-F036FC9AE09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A59F6E-A44B-4949-8487-CB089BF1CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B3525-BD38-47CF-B60A-F392FABDA357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD453B4B-75B9-476D-B1A6-65AB8E09107E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFCAB08-BADA-4231-96E2-B73462A803D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809BC19B-C814-4855-9E0B-387A4137369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0224.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0286.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gallery.menalto.com/gallery_1_5_2_pl2_security_release",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18735",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015641",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006140293402395.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22944",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16533",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0224.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0286.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gallery.menalto.com/gallery_1_5_2_pl2_security_release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006140293402395.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/22944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the (1) mid and (2) keywords parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en search.php en MyTopix 1.2.3 permite a atacanes remotos ejecutar órdenes SQL de su elección mediante los parámetros (1) \"mid\" y (2) \"keywords\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaia_interactive:mytopix:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9A6354-C13A-41D3-844E-390EF48765A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-249.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423950/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-249.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423950/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to logon.mod.php, which leaks the path in an error message."
      }, {
        "lang" : "es",
        "value" : "MyTopix 1.2.3 permite a atacantes remotos obtener la ruta de instalación mediante una petición directa a logon.mod.php, que filtra la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaia_interactive:mytopix:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9A6354-C13A-41D3-844E-390EF48765A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-249.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423950/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-249.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423950/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax."
      }, {
        "lang" : "es",
        "value" : "MyTopix 1.2.3 permite a atacantes remotos obtener la ruta de instalación mediante un un parámetro \"hl\" no válido en index.php, lo que conduce a una revelación de la ruta, posiblemente relacionado con sintaxis SQL no válida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaia_interactive:mytopix:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9A6354-C13A-41D3-844E-390EF48765A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-249.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423950/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-249.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423950/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions."
      }, {
        "lang" : "es",
        "value" : "Las funciones crypt_gensalt de huellas digitales ('hashes') de contraseñas basadas en DES extendidas con estilo BSDI y basadas en MD5 con estilo FreeBSD en crypt_blowfish 0.4.7 y anteriores no distribuyen las sales equitativamente y aleatoriamente en el espacio de huellas digitales, lo que hace más fácil a atacantes averiguar contraseñas de un fichero de contraseñas robado debido al número de colisiones aumentado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solar_designer:crypt_blowfish:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3C183A-C8DA-4AC2-B708-4EA5CBADC14C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_blowfish/crypt_gensalt.c?only_with_tag=CRYPT_BLOWFISH_1_0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18772",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20232",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20653",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424260/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_blowfish/crypt_gensalt.c?only_with_tag=CRYPT_BLOWFISH_1_0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424260/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "This vulnerability may only be exploited in conjunction with another vulnerability.  The password file (normally shadowed) must first be stolen."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly 8.29 and 9.41, allows remote attackers to execute arbitrary code via unspecified vectors.  NOTE: This information is based on a vague initial disclosure; details will be updated after the grace period has ended."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el servicio de Impresora Compartida de Lexmark LexBce Server (LexPPS) permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados. NOTA: Esta información está basada en vagas revelaciones iniciales; se actualizarán los detalles después de que finalice el periodo de gracia."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lexmark:printer_sharing:8.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000A1DD9-B339-4556-A7A7-0ADF2F254EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lexmark:printer_sharing:9.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F9CD0B-82D6-4F1C-8FDE-287680533D8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424273/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0481",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424273/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EB6101-6BD0-4D6A-B681-7607B9424977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2AB1FF-B81B-4F19-9192-1E1CB66516D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D4A233-7466-4F44-8468-779AA6A60850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29821D4F-1EF2-4DA0-8CAB-67700D0B1A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1DCE7B-E049-4FA0-A972-D39BCE79E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D79B94-BBA2-47D2-9D2C-5EF59FE6D7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92E863F-C72B-428E-A134-2CA5CA7058B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC61337-9477-46AC-AA5E-7722F594BCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716EE68-D01C-4C5B-ACA5-30E58B834C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBE45DB-64DA-4EC5-9DF0-749D533E7510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59B4A30-B3F1-4200-844E-E3F7EEA91214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B24DACA-1F61-4AD6-9074-F330EFB28B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2252C51-1FA4-469B-B241-8EDB1D3DFB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5335762A-EA49-48D3-8A0C-0C031FECBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.207:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A8E77C-4687-4A3E-8112-52717E885C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CDAEAF-9E2E-42F4-B7D7-EF121CC5F978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15B4762-66F2-4277-A975-00401C78F381"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php-fusion.co.uk/downloads.php?cat_id=3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php-fusion.co.uk/downloads.php?cat_id=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0023",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-02-08T02:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka \"Permissive Windows Services DACLs.\"  NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows XP SP1 y SP2 anteriores a agosto de 2004, y posiblemente otros sistemas operativos y versiones, usa ACLs inseguras por defecto que permiten al grupo Usuarios autentificados ganar privilegios modificando información de configuración crítica de los servicios (1) Protocolo de Descubrimiento de Servicio Simple (SSDP) y (2) 'Plug and Play' Universal (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP y (6) servicios DnsCache, tcc \"DACLs de Servicios de Windows Permisivas\". NOTA: Los servicios NetBT, SCardSvr, DHCP, DnsCache ya requerían acceso privilegiado para acceder a la explotación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18756",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19313",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015595",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015765",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/953860",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/914457.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423587/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0417",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=391523&RenditionID=",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-011",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24463",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1671",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1696",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/953860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/914457.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423587/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=391523&RenditionID=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, or (6) admin/edit_filter.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phphg_guestbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A9A1FD-5FDE-4408-8DFC-B8CEB2555569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/58/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18758",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015620",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424740/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0480",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://evuln.com/vulns/58/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424740/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) location, (2) website, or (3) message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phphg_guestbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A9A1FD-5FDE-4408-8DFC-B8CEB2555569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/58/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18758",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424740/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0480",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://evuln.com/vulns/58/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424740/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phphg_guestbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A9A1FD-5FDE-4408-8DFC-B8CEB2555569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/58/description.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18758",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424740/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/58/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424740/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the (1) Handle or (2) Message fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unknown_domain:shoutbox:2005-07-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD04DE30-8454-4309-BDBE-3DA19B32D693"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/55/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18759",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424679/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/55/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424679/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unknown_domain:shoutbox:2005-07-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD04DE30-8454-4309-BDBE-3DA19B32D693"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/55/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18759",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424679/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/55/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424679/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phphd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D57F20-01A0-4472-8561-AEA7DDB30BE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/60/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/60/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to check.php or (2) unknown attack vectors to scripts that display information from the database."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phphd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D57F20-01A0-4472-8561-AEA7DDB30BE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/60/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/60/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in add.php in Hinton Design phphd 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phphd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D57F20-01A0-4472-8561-AEA7DDB30BE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/60/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424827/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/60/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424827/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the fm_data[id] parameter to calendar.php and (2) the $ad['acc'] variable in adminlogin.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en 2200net Calendar system 1.2, con gpc_magic_quotes incapacitado, permiten a atacantes remotos ejecutar comandos SQL arbitrarios y eludir la autenticación a través de (1) el parámetro fm_data[id] para calendar.php y (2) la variable $ad['acc'] en adminlogin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2200net:2200net_calendar:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4736F3C5-2E8F-4371-96CD-A5BA7ED8EFA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=114003781801861&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/62/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425094/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114003781801861&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/62/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425094/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en compose.pl en @Mail 4.3 y en versiones anteriores para Windows permite a atacantes remotos subir archivos arbitrarios en ubicaciones arbitrarias a través de .. (punto punto) en el parámetro unique."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atmail:atmail:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90355215-D661-4C36-B177-39F0075B5AE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.atmail.com/view_article.php?num=374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18646",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.atmail.com/view_article.php?num=374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Powersave daemon before 0.10.15.2 allows local users to gain privileges (unauthorized access to an X session) via unspecified vectors. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powersave:powersave:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.10",
            "matchCriteriaId" : "BC743E4D-819B-4B96-9E8B-CD0563F16923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18651",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=379792&group_id=124576",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=379792&group_id=124576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Java Web Start after 1.0.1_02, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain privileges via unspecified vectors involving untrusted applications."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0_update5",
            "matchCriteriaId" : "A8EB369F-47FF-47C6-8F5F-769A7BB1B4B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18762",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102170-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/652636",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102170-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/652636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08 allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"first issue.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9B6F3-906D-4CCC-9655-99A1496B1475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "15AFED7D-005C-4BDF-9E98-D79A5164BF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "896AD81D-C7D9-4CF4-B7E7-C4FFDF3477FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBBA0B7-B05D-438C-BB0B-3FEE4D11D1F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "1.3.1_16",
            "matchCriteriaId" : "5C45EF9E-57AE-4EB1-B787-ECAC8353A329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndIncluding" : "1.4.2_8",
            "matchCriteriaId" : "88A9881D-77F9-4872-B363-BF47977FF4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3241D774-D0F4-4529-A779-2F4F11813D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE265F4-C6C3-4266-8C1C-A058C6AD06E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "94DC01AD-8FDB-44E0-B341-1E85CB6E11C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "C89AE14B-16C8-453D-9728-D8E08EAB864A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "1.3.1_16",
            "matchCriteriaId" : "3C309E8B-4C1E-47F0-A173-72D5C3E75245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndIncluding" : "1.4.2_08",
            "matchCriteriaId" : "8526B561-0B12-40D1-9B40-EF2D3EA8C9C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18760",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18884",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015596",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759996",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0467",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0828",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"second and third issues.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D57BC929-6C98-4F36-B31B-6B946F986D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "787DCE54-6991-4A1A-836B-3C46A02C7400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18760",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18884",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015596",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759996",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0467",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0828",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/18760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"fourth issue.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update4:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "24DB775C-F680-489B-B96D-454C229325C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update4:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "8B119413-79D0-4116-9F2A-31FBFE855880"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18760",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759996",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the \"fifth, sixth, and seventh issues.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:*:update5:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "B0F1E0AF-339A-47B6-9BDE-AF065C737EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:*:update5:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "692AC8F4-5510-43A1-99B4-CDFA8D84F92B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18760",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759996",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/759996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:neutrino_rtos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5501BAB-2AE8-4E04-8DDE-3BA4310481B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F795DA5-84CB-4772-BC54-91B1DB760BEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FCCA0BA-C9AB-4E79-B9B8-4BB31BE09296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48EB2D8-393D-4BBC-8F04-7DA6EB5E16CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4BA42D-1272-4909-B292-3362A3E51D66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passwd commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3A983E-7A0C-4BA9-AC9C-131437BFE793"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a \"break *0xb032d59f\" command to gdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F795DA5-84CB-4772-BC54-91B1DB760BEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F795DA5-84CB-4772-BC54-91B1DB760BEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webeveyn:whomp_real_estate_manager_xp_2005:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54ADFE5F-A14C-419E-AE64-6A2DABAB8D03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424389/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16544",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424389/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via \"..\"  sequences in the GLOBALS[type_urls] parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file parameter to spip_acces_doc.php3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.8.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1801D09-E761-41F5-97E8-4C4F882D6C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3C57F2-B911-4EE3-9988-913D9D11567D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.8.2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8D5C97-A36D-4E53-A591-20FE20AF00B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/spip_182g_shell_inj_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16556",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/spip_182g_shell_inj_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.8.2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8D5C97-A36D-4E53-A591-20FE20AF00B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/spip_182g_shell_inj_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16551",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/spip_182g_shell_inj_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-09T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Referer or (2) X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5DD585-BF9F-4AE5-B112-A6D9AB1ACDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4679FE-E971-435C-AED0-6E1DB3E561E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1D3337-9CF7-4AB2-AAE1-01641C1F867A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/64/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/64/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not properly handled as part of the PATH_INFO environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dale_ray:myquiz:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68DEFF9-1C71-49E6-B31E-199D870E4C17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000537.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.corantodemo.net/coranto/viewnews.cgi?id=EpApAAAVkyirPGThSf&style=dldetails",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.evuln.com/vulns/57/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423921/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424266/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000537.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.corantodemo.net/coranto/viewnews.cgi?id=EpApAAAVkyirPGThSf&style=dldetails",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.evuln.com/vulns/57/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423921/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424266/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in AOL Instant Messenger (AIM) 5.9.3861 allows user-assisted remote attackers to cause a denial of service (client crash) and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:instant_messenger:5.9.3861:*:*:*:*:*:*:*",
            "matchCriteriaId" : "911FE685-E196-4407-9B99-A0B096F29676"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0948.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423906/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423920/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0948.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423906/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423920/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messages, instead of the real headers, which is in violation of RFC2046 header merging rules and allows remote attackers to spoof the origin of e-mail by sending a fragmented message, as demonstrated using spoofed Received: and Message-ID: headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5896B50B-719E-4BCD-B481-B6C5A2783D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DE6F73-C434-4760-A07C-5AE9F5280F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFE95B-1557-4D99-93DB-A3DE2E3A7A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287557CC-0854-4F6F-9E3A-9592A817BE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.0.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45AF103-012C-4ED1-B241-233DA9780E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.0.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90B7F9BE-993C-4675-B000-4349DFF2698B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC28D8E5-D0AA-4967-9048-3D899AFC7B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D97DBB-CC22-49E9-A74B-C40BFCD9BEC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041973.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/advisories/thebatspoof.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424129/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.ritlabs.com/bt/bug_view_advanced_page.php?bug_id=0003029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041973.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/advisories/thebatspoof.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424129/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ritlabs.com/bt/bug_view_advanced_page.php?bug_id=0003029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a \"spam proxy\" by modifying mail headers, including recipient e-mail addresses, via newline characters in the Subject field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erik_c._thauvin:mailback:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B43067E-CD81-4310-9AFF-7F14FEFA9192"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2006/Feb/0094.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/Feb/0154.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vc.thauvin.net/cvs/cgi/mailback/mailback.pl?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22955",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/Feb/0094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/Feb/0154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vc.thauvin.net/cvs/cgi/mailback/mailback.pl?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key (\"validation ID\") that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or create new accounts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.r-security.net/tutorials/view/readtutorial.php?id=4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424074/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.r-security.net/tutorials/view/readtutorial.php?id=4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424074/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to a user with a lost password, which might make it easier for remote attackers to guess the code and change the password for an IPB account, possibly involving millions of requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisionpower:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C99FFB-7A97-4F26-97BA-3B3593B7AE01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/lofiversion/index.php/t200085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.r-security.net/tutorials/view/readtutorial.php?id=4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.invisionpower.com/lofiversion/index.php/t200085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.r-security.net/tutorials/view/readtutorial.php?id=4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the \"i>sizeof(int)\" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:borland_software:c\\+\\+_builder:6:enterprise_update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B29490-8A88-4E71-82BA-D9DC0271E91A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015588",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424085/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xfocus.net/releases/200602/a849.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424085/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xfocus.net/releases/200602/a849.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tiny C Compiler (TCC) 0.9.23 (aka TinyCC) evaluates the \"i>sizeof(int)\" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabrice_bellard:tiny_c_compiler:0.9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321FB791-DCBE-4985-AF60-9C4571719FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/22956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424257/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424257/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attackers to execute arbitrary PHP code and possibly conduct other attacks by modifying critical assumed-immutable variables, as demonstrated using PHP code in the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C9B6C0-DF66-4592-BD8E-F0E7E06DC8F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6255DDE-ABAC-440E-BD17-E121B4E40EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.1_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB7BD4C-EB42-43B0-B492-F5F03A339CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4174D891-C2CB-47F7-95C3-03292BF11B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.2_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFCEF02-41F5-4C4D-8266-1D6AA09D6DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.2_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC1C715-5440-4673-AC2E-9A7CBDD16A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.2_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99490285-2E1F-4E6F-AFF7-2A3E84CEE134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3260F95-A78A-4115-9C93-6731218A4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.3_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FC74C0-9943-4723-8538-26C366FB2006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.3_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E79EAD-72FD-4843-8852-441FEF825D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021FDB55-22B2-4A39-A5FD-E85EFB4024D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.4_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B150B0-0AC8-4F67-AB97-5113E1B542E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AACA458-4CE7-4DCA-AA04-D31530318B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.5_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16543AB3-42F8-4074-92AB-4376B254D105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A861A748-968A-4ABC-B484-2229F5EACB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F3C522-2CCA-443C-902F-53D7AC3A5B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F2B54D-3B7E-426E-9028-104B1340FB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BE703A-8086-4EE2-83F1-646B95DB52ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00096-02072006",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424329/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00096-02072006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424329/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument, as demonstrated by Worldmail.pl. NOTE: this is a different vector and a different manipulation than CVE-2005-4267, so it might be a different vulnerability than CVE-2005-4267."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualcomm:eudora_worldmail:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F473BD-42CD-4E8A-AD2D-D0D6F530DBA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/424157/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424157/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in moderation.php in MyBB (aka MyBulletinBoard) 1.0.3 allows remote authenticated users, with certain privileges for moderating and merging posts, to execute arbitrary SQL commands via the posts parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-02-07/mybb103moderationphpsqlinject-while-merging-posts.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424335/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-02-07/mybb103moderationphpsqlinject-while-merging-posts.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424335/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in MyBB (aka MyBulletinBoard) 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter, as demonstrated by %3Cscript%3E."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-01-14/mybb-102searchphpxss-attackandmore.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424334/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424375/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-01-14/mybb-102searchphpxss-attackandmore.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424334/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424375/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command to change the permissions of the /private/etc/uc.app/Contents/MacOS/uc file, which prevents the service from being started in LaunchDaemon."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbicule:undercover:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A43D5FCB-CD05-4477-9B59-2B5380754BDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423955/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423955/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended remote destination."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbicule:undercover:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A43D5FCB-CD05-4477-9B59-2B5380754BDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/423955/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423955/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configuration setting of \"Do not scan compressed files when Extracted file count exceeds 500 files,\" which may be too low in certain circumstances, which allows remote attackers to bypass anti-virus checks by sending compressed archives containing many small files. NOTE: since this is related to a configuration setting that has an operational impact that might vary depending on the environment, and the product is claimed to report a message when the compressed file exceeds specified limits, perhaps this should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_messaging_security_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42ECD45D-EB0D-4B7B-A2F6-529EA9BD3746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:interscan_web_security_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459E1A3E-1EF9-4544-B2F9-28654A2D565E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:serverprotect:5.58:*:emc:*:*:*:*:*",
            "matchCriteriaId" : "1364240C-2070-4CEA-BAE9-E94EAFFBBF1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.packetstormsecurity.org/0602-advisories/Bypass.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/filedesc/Bypass.pdf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423896/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423913/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423914/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424172/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424598/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0602-advisories/Bypass.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.packetstormsecurity.org/filedesc/Bypass.pdf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423896/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423913/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/423914/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424172/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424598/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WiredRed e/pop Web Conferencing 4.1.0.755 allows remote authenticated users to inject arbitrary web script or HTML via the topic name of a conference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wiredred:e_pop_web_conferencing:4.1.0.755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC409927-1B3D-4FAA-9E60-DCBB4ECB2572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in (1) the newlang parameter and (2) the installlang parameter in a cookie, as demonstrated by using error.php to insert malicious code into a log file, or uploading a malicious .png file, which is then included using install.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.6_.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A48B468-C364-446A-B0F5-94BB6FAE566F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dragonflycms.org/Forums/viewtopic/p=98034.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/p=98034.html#98034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/dragonfly9.0.6.1_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424439/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16546",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/p=98034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/p=98034.html#98034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/dragonfly9.0.6.1_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424439/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0645",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-10T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via \"out-of-bounds access\" caused by invalid input, as demonstrated by the ProtoVer SSL test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D499D565-3346-470E-BA08-B894C85B0312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03BD64EF-3350-4C9B-AC99-FF920D469749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3003BBC5-47C2-4420-93C9-67144BD7E0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D263ACB-5F52-4E89-A2C2-2D34603221D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D228B3-3B1D-49B0-A6E2-047D10F26297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DD62D0-E4C8-4198-A00E-3F9061029A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9C3DA5-B783-4295-B5FA-7C5EAEEAD302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF60A33-0EAD-4A76-B863-80A3B033705D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F145DEE-054A-45BB-B4FB-6421F99150BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3FD24E-DCE0-4228-B94D-9EE2DF151BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751C6875-E572-4374-97F0-9E6C93BA7B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA0716-91A0-4EBD-A836-2CF57F77B158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A4EA1F-785D-4F26-8C60-622DC92D5019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22677DF-9598-47EF-8808-FB59138F6195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1222294B-6698-47A6-9C4F-60EAA4F97D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A787FA74-6C38-4992-A68F-5AD5281A0B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E454AAA-CA25-45D4-B5B0-D66F1B425E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4452648C-2AB8-43E5-8617-00134E48C7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA90F4-F2FE-47FA-8F8F-150274082981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48CE0BF-19FA-48AE-866E-3AD4E8B6806A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9AD82D-5320-4D1B-B222-BC7F507D9CB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001059.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001060.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0207.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18815",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18898",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18918",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19080",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/446",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015612",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-986",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-08.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gleg.net/protover_ssl.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:039",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/23054",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00043.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424538/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16568",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0496",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24606",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/251-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001060.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0207.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gleg.net/protover_ssl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424538/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/251-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-11T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an attacker-controlled library file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3EA56868-ACA1-4C65-9FFB-A68129D2428A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1BA2E629-58C6-4BA0-A447-F8F570B35E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C89BA3B6-370B-4911-A363-935A9C9EACF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0046",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DEB2CA-D5BE-4845-9BDF-7B2249167177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27B4924-3FF2-4FB9-AF44-EA8B44721343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16454B8B-017D-4B6A-8320-E0102700B227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B5E582-F139-4EC9-8749-45E696CEE7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7403CC7-2865-44E9-B621-07ED028DC511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174EC224-7498-4974-907F-3A63DD720D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DF468E-1D9E-47B2-BC92-B37F77B8469F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD41FE19-CA35-4E54-BF80-4DCF00CD89FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B26B0D-26A5-4757-A8C2-6DEE728107BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_simpson:adzapper:2006-01-29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E5E0B2-EF17-4A8B-BEC5-B1E80DF2EFBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://adzapper.sourceforge.net/cvslog.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/squid_redirect.diff?bug=350308%3Bmsg=5%3Batt=1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350308",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18771",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18777",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-966",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22900",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16558",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0491",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24640",
        "source" : "security@debian.org"
      }, {
        "url" : "http://adzapper.sourceforge.net/cvslog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/squid_redirect.diff?bug=350308%3Bmsg=5%3Batt=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0056",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer that was created by the pam_get_item function.  NOTE: this issue only occurs in certain configurations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules before PAM-MySQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89B29AFD-6EA6-4AEE-83F7-94AE927C5AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFC22D-75CF-4104-87D1-E71CB054905E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B82080-5499-46A8-8F3A-EB9BAB36C5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87D5EFC-27F3-4F37-87CA-AC120C9A9D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D23FBC9-0628-4CF2-AB25-0FC59FE539DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425E4F3B-4B28-4283-ACD5-494BEE2A1866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0530FA7E-BD7A-4D5F-A3F5-3A7BD6C37030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.7_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E62A7D-FD21-484D-89D2-DDC398A18CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam-mysql:pam-mysql:0.7_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE9F00A-6938-487C-AC29-61AF37A25B12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/cert/JVNVU%23693909/index.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/18598",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20690",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015603",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=499394",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/693909",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22994",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.osvdb.org/22995",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16564",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0490",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://jvn.jp/cert/JVNVU%23693909/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=499394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/693909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/22994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0597",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service (application crash) and possibly execute code via long \"revision attributes\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E4BEE-A5B1-474C-892A-08680690E784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266F578-79ED-48F9-A686-BBBBDF1CCB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589737-6A1F-4F63-8330-CE1374A7F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BE6CD0-2901-44EC-A065-EDA5FF4831E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC1C1A-DEC0-45DA-B09A-B029426732A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E19C713-B881-4CC9-AB40-A5B12B7D14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E77FC6F-10A7-489B-8644-FBFA8C9E5326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B9943E-81C9-43A4-A5E2-9BDD62456EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB784D24-C980-4030-9E0E-9F7AE3FFD429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158E603A-4C79-4C29-85CE-0BEBB485F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33629F82-9C9A-44C4-85A9-6B61F8760767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/0001-r1333-Fixed-crashes-with-very-long-revisions-attributes.txt?bug=349528%3Bmsg=15%3Batt=1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16579",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24704",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/0001-r1333-Fixed-crashes-with-very-long-revisions-attributes.txt?bug=349528%3Bmsg=15%3Batt=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0598",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables, when writing to the log file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E4BEE-A5B1-474C-892A-08680690E784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266F578-79ED-48F9-A686-BBBBDF1CCB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589737-6A1F-4F63-8330-CE1374A7F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BE6CD0-2901-44EC-A065-EDA5FF4831E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC1C1A-DEC0-45DA-B09A-B029426732A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E19C713-B881-4CC9-AB40-A5B12B7D14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E77FC6F-10A7-489B-8644-FBFA8C9E5326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B9943E-81C9-43A4-A5E2-9BDD62456EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB784D24-C980-4030-9E0E-9F7AE3FFD429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158E603A-4C79-4C29-85CE-0BEBB485F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33629F82-9C9A-44C4-85A9-6B61F8760767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/0002-r1335-Applied-patch-from-Emiliano-to-fix-possible-buffer-overflow.txt?bug=349528%3Bmsg=15%3Batt=2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16579",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24705",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/0002-r1335-Applied-patch-from-Emiliano-to-fix-possible-buffer-overflow.txt?bug=349528%3Bmsg=15%3Batt=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0599",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E4BEE-A5B1-474C-892A-08680690E784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266F578-79ED-48F9-A686-BBBBDF1CCB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589737-6A1F-4F63-8330-CE1374A7F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BE6CD0-2901-44EC-A065-EDA5FF4831E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC1C1A-DEC0-45DA-B09A-B029426732A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E19C713-B881-4CC9-AB40-A5B12B7D14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E77FC6F-10A7-489B-8644-FBFA8C9E5326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B9943E-81C9-43A4-A5E2-9BDD62456EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB784D24-C980-4030-9E0E-9F7AE3FFD429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158E603A-4C79-4C29-85CE-0BEBB485F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33629F82-9C9A-44C4-85A9-6B61F8760767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/0003-r1472-Do-not-distinguish-between-invalid-user-name-and-invalid-password.txt?bug=349528%3Bmsg=15%3Batt=3",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16579",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24706",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/0003-r1472-Do-not-distinguish-between-invalid-user-name-and-invalid-password.txt?bug=349528%3Bmsg=15%3Batt=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0600",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service (infinite redirection) via a request with the fail parameter set to 1, which redirects to the same request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E4BEE-A5B1-474C-892A-08680690E784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266F578-79ED-48F9-A686-BBBBDF1CCB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589737-6A1F-4F63-8330-CE1374A7F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BE6CD0-2901-44EC-A065-EDA5FF4831E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC1C1A-DEC0-45DA-B09A-B029426732A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E19C713-B881-4CC9-AB40-A5B12B7D14BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E77FC6F-10A7-489B-8644-FBFA8C9E5326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B9943E-81C9-43A4-A5E2-9BDD62456EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB784D24-C980-4030-9E0E-9F7AE3FFD429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158E603A-4C79-4C29-85CE-0BEBB485F287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33629F82-9C9A-44C4-85A9-6B61F8760767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528",
        "source" : "security@debian.org"
      }, {
        "url" : "http://savannah.psi.ch/viewcvs/trunk/src/elogd.c?root=elog&rev=1487&view=diff&r1=1487&r2=1486&p1=trunk/src/elogd.c&p2=/trunk/src/elogd.c",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16579",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24707",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://savannah.psi.ch/viewcvs/trunk/src/elogd.c?root=elog&rev=1487&view=diff&r1=1487&r2=1486&p1=trunk/src/elogd.c&p2=/trunk/src/elogd.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attackers to cause a denial of service (memory allocation error) via an LDAP packet with a crafted subtree search request, as demonstrated using the ProtoVer LDAP test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083E8ACF-7A6B-4C7C-B1E1-1567D09A8E4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002914.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002916.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18769",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102294-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002914.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002916.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102294-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the (1) getdate and possibly other parameters used in the replace_files function in search.php and (2) $file variable as used in the parse function in functions/template.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B902EBA5-32AA-4944-A2CA-321ABB86839D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C478599-DCFC-4FEA-BCCF-1E76BD27B1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869538E6-ECAA-4768-9368-ECEA2CD9ADEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/70/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://phpicalendar.net/forums/viewtopic.php?t=396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18778",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424424/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/70/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://phpicalendar.net/forums/viewtopic.php?t=396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424424/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in DataparkSearch before 4.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F5C69-448C-4A63-A4B7-81C6841C10EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98A5367-50C9-4A8B-960A-28F436BEABAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD3061-01D5-41CD-B679-86F87C742961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B8434F-7960-4F39-9F87-550AD21F8EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0863184-6BBB-4C14-A669-964785565923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E045B79-1625-474C-8D68-0A9448EDBB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81181C64-4DF1-4229-9A76-D5CDACA260CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8D4F44-AEE0-4378-BC6E-111D15C3417F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF067E3D-0082-48A0-9898-656E2D11CB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B658A8E2-EA46-4A08-936F-EE169F2E34B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE93BFBF-EFFC-4E74-BD54-C597A82C222C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38521F36-D3A6-4EEF-9F6E-7F28D4BDDF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E71247-4DDA-4ADB-B3E1-44C0623A9444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43416CEC-E835-4822-90B8-B86012B6AB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1B579C-8725-41A7-8898-0610DF06BF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A573E50-BB2A-4725-AB9B-B7767D885AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BA039F-F719-4782-ADA7-8401F83A371C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8841C8-9731-4C48-AF06-0A037CBF826A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70498162-CC10-4A21-B33E-392872149914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0391691-FA02-44EB-BC46-E457FE63B405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A0B7558-E96F-4EE4-BD65-78A4149FB588"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18751",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dataparksearch.org/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.dataparksearch.org/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scripts, allows remote attackers to inject arbitrary web script or HTML via the cpaint_response_type parameter, which is displayed in a resulting error message, as demonstrated using a hex-encoded IFRAME tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2AAE9DB-2CBA-4F2D-AEB5-052137E1ED7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A93AB53-43AC-4694-AEFE-A3FF7551FEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39CEF80-EAF6-49D3-9A61-2A986B9A3683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED126FD2-0BE5-4F49-BDFC-7D9D31E9A0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.3_sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BE17ED-6A16-4199-B0C7-0386C7918760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:1.3_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FCC607-60D7-41E4-9CA9-DB6B5FFE342F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B9AA74-E90F-4DC0-94BB-50EE6F66008C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF51E3F-0D03-4D04-B31D-78E628CC9F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB028DBD-5086-4448-855A-AE9B1C2D46BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpaint:cpaint:pre1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DADF62-8883-48D4-A0EC-CBC55F140E86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cpaint.booleansystems.com/forums/viewtopic.php?t=98",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00097-02092006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cpaint.booleansystems.com/forums/viewtopic.php?t=98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00097-02092006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwdev:vwdev:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727D9107-7256-444C-A186-A7ECADEFEEF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16547",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/22991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WHMCompleteSolution (WHMCS) before 2.3 assigns incorrect permissions to \"resellers\", which allows remote authenticated users to perform privileged actions or obtain sensitive information.  NOTE: this report is based on a vendor bug report that identified \"incorrect permissions.\"  However, the vendor did not label it a security issue, and there was no statement regarding whether or not the permissions were actually more permissive than intended.  If in fact the permissions were more restrictive than intended, then this would be a functional problem but not a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whmcompletesolution:whmcompletesolution:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2BB2BE-ECB3-4E22-9C99-EEC7BEED1C21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whmcompletesolution:whmcompletesolution:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A31BE63-5970-471D-9210-21A9D2DC1ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whmcompletesolution:whmcompletesolution:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F71FABA-A678-4845-806F-7C5ABD93404B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16560",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.whmcs.com/changelog.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.whmcs.com/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary SQL commands via multiple vectors including the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phpht_topsites:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6F1CE2-15D1-4BFD-AC8B-3844EDD5F1BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/59/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18782",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424741/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/59/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424741/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phpht_topsites:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6F1CE2-15D1-4BFD-AC8B-3844EDD5F1BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/59/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18782",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424741/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/59/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424741/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (1) link_edited.php and (2) link_added.php in Hinton Design phpht Topsites 1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phpht_topsites:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6F1CE2-15D1-4BFD-AC8B-3844EDD5F1BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/59/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18782",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424741/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/59/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424741/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D430EB3C-EF10-4E39-821B-C4CFB91FCA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:4.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFA4EDE-1BF2-4E45-AB4A-23E981104ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:4.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "202984FE-E221-4E2E-A9A4-236D41EB7D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441A0127-F774-4D68-9663-94FBBD13A8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:5.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "59AA99D8-868E-446C-8DA0-988CEAF86174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:5.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDB329C-240D-4D81-AF90-A005BF72517E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:systems_insight_manager:5.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFFA879-49E9-42C8-B180-4178115752A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18789",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inject arbitrary web script or HTML, and corrupt data, via the (1) username and (2) password parameters, which are not sanitized before being written to users.php.  NOTE: while this issue was originally reported as XSS, the primary issue might be direct static code injection with resultant XSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softcomplex:php_event_calendar:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6127EAEE-19AC-435D-9110-34539C9E4E22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/63/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/63/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions that are not listed in the Config[DeniedExtensions][File], such as .php.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A396BB3-7329-4522-8C5F-99CCA41C9DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2823302-CCF1-438B-B962-6EE49D371A28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/fckeditor_22_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/3702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/fckeditor_22_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/3702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://cwe.mitre.org/data/definitions/184.html\r\n'CWE-184: Incomplete Blacklist'"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen enabled, allow remote attackers to execute arbitrary code via the bbPath[path] parameter in (1) class.forumposts.php and (2) forumpollrenderer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "FE1DF541-6581-4C0C-9B25-DA84983D89FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA5EE4F-F255-456D-9C23-EA00F77838B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/runcms_13a_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18800",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16578",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://retrogod.altervista.org/runcms_13a_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorImpact" : "Successful exploitation requires that both \"register_globals\" and \"allow_url_fopen\" are enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via \"..\"  or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB2CEC8-7EFF-410F-A4E2-CDC515F9E38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F6F8CFD-D03F-494E-96E0-A8C9CCDC6355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3F0B6F-F519-4717-B1A4-5CE599DB611F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.farsinewsteam.com/index.php?showtopic=71",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.farsinewsteam.com/index.php?showtopic=76",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/farsinews2-5.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424720/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16580",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.farsinewsteam.com/index.php?showtopic=71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.farsinewsteam.com/index.php?showtopic=76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/farsinews2-5.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424720/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptme:sme_blog_host:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B71666-6E03-46ED-9EF5-722A395CBFCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptme:sme_gb_host:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C46DA-E61A-472C-8418-E2B9B013F215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/65/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/65/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly rendered in the browser."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_inotes_client:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DD0C18-764C-4B8D-A052-F52613D14ED4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16340",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-38/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-38/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) an email subject; (2) an encoded javascript URI, as demonstrated using \"java&#13;script:\"; or (3) when the Domino Web Access ActiveX control is not installed, via an email attachment filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_inotes_client:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DD0C18-764C-4B8D-A052-F52613D14ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_inotes_client:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EA18F-61AA-45E4-9DB0-BAFD6DEBCC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16340",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-38/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015610",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23078",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23079",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16577",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0499",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-38/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nIBM, Lotus Domino iNotes Client, 6.5.5\r\nIBM, Lotus Domino iNotes Client, 7.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  An original vendor bug report is referenced, but not accessible to the general public."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8462CB86-30B1-43D8-B306-271709423DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131A96BB-EF2E-4AE2-9334-91CA96222BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DC6205-7016-40C3-921A-B5AEC8513CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721A536A-9626-4BD7-B84A-E3C4074F1217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89786096-AE1B-491B-8284-DBCC2F6112F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC255D-6B0F-412D-B639-B9F9656E4839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202C65A-33FB-4742-8706-2BDD5B442030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E7658F-A543-46F5-B79D-E0E25B7C574F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92E018-C25C-468D-9EF5-5665F0B42EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16561",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impact and attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  An original vendor bug report is referenced, but not accessible to the general public."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8462CB86-30B1-43D8-B306-271709423DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131A96BB-EF2E-4AE2-9334-91CA96222BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DC6205-7016-40C3-921A-B5AEC8513CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721A536A-9626-4BD7-B84A-E3C4074F1217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89786096-AE1B-491B-8284-DBCC2F6112F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC255D-6B0F-412D-B639-B9F9656E4839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202C65A-33FB-4742-8706-2BDD5B442030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E7658F-A543-46F5-B79D-E0E25B7C574F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92E018-C25C-468D-9EF5-5665F0B42EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16561",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espace_membre module.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwsphp:pwsphp:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9030D3-F6FA-4AA3-A99B-028986C694A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19023",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16567",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16567/exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16567/exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the (1) Forum and (2) pages parameter.  NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database.  SecurityTracker's research indicates that the original problem could be due to a vbscript parsing error based on invalid arguments"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gasoft:gas_forum_light:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0264A83C-220E-45FB-B12D-08C69108D119"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015600",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-February/000561.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16563",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-February/000561.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de bufér en l2cap.c en hcidump 1.29 permite a atacantes remotos provocar una denegación de servicio (caída) a través de una conexión inalámbrica de Bluetooth a través de un paquete Logical Link Control and Adaptation Protocol (L2CAP) malformado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluez_project:hcidump:1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1618DA60-7B3D-4F35-AE1D-839EC44D2AB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=113924625825488&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18741",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.secuobs.com/news/05022006-bluetooth9.shtml#english",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-256-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113924625825488&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.secuobs.com/news/05022006-bluetooth9.shtml#english",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-256-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187945\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 or 3.",
        "lastModified" : "2006-09-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet whose length field is less than the actual length of the packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en teléfonos móviles Sony Ericsson K600i, V600i, W800i y T68i permite a atacantes remotos provocar una denegación de servicio (reinicio o apagado) a través de una conexión inalámbrica de Bluetooth a través de un paquete Logical Link Control and Adaptation Protocol (L2CAP) malformado cuya longitud de campo es menor que la longitud actual del paquete."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:k600i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD89FE3-815B-432D-BBDC-145932B7761B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:t68i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2C8531-E51E-4BA3-8174-D205634AA177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:v600i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD94711-0642-41B2-AA28-6A179CB2F03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony_ericsson:w800i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899F4042-19CC-47C2-8805-1859068083DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113926179907655&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113924661724270&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18747",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.secuobs.com/news/05022006-bluetooth7.shtml#english",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113926179907655&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=113924661724270&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.secuobs.com/news/05022006-bluetooth7.shtml#english",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP PSC 1210 All-in-One Drivers before 1.0.06 has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:psc_1210_all-in-one:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABA922B-64D0-43E6-B56A-3865D00B4F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:psc_1210_all-in-one:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7954346-B26E-4B87-817A-13959E1DF530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:psc_1210_all-in-one:1.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FAECB6-4B65-406B-8681-7BE85E9F9FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?dlc=en&lc=en&os=228%20&product=90764&lang=en&cc=us&softwareitem=oj-37641-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18770",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0498",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?dlc=en&lc=en&os=228%20&product=90764&lang=en&cc=us&softwareitem=oj-37641-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) $total_login and (2) $total_password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reamday_enterprises:magic_calendar_lite:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC101F99-E9FE-46BC-881F-4306CF1ED025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/71/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/71/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of service (crash) via a long iftype argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&q1=IY81424&uid=isg1IY81424&loc=en_US&cs=utf-8&cc=us&lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY81476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16584",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&q1=IY81424&uid=isg1IY81424&loc=en_US&cs=utf-8&cc=us&lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY81476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glen_campbell:siteframe:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06989DC7-D625-4442-BF6D-C591987F65C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kiki91.altervista.org/exploit/siteframe5.0.1a_xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://siteframe.org/p/xss_vulnerability_in_siteframe_501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424844/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kiki91.altervista.org/exploit/siteframe5.0.1a_xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://siteframe.org/p/xss_vulnerability_in_siteframe_501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424844/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1BC17-2A99-495A-B462-D02B66F00D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820C37B-1503-4494-8123-ECAF28386231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18820",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424956/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-44.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424956/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-44.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0677",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-02-14T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service (server crash) via unknown vectors that trigger a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1CE868-E352-422A-BC84-94A6781D7119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4940AAA1-A24F-46CC-B6EA-AE501D6AADE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603FCBB1-D450-4F34-A391-5C629294F3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5956639B-01FC-44C7-8CA9-1A7F5805C029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127A27A4-D022-468C-9389-7D571D4E1901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DE2636-A566-4E90-BA21-E50B5505C79F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C375B952-22B2-4D90-A80F-FCC5C394BFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DF5422-8DB9-427F-BDFB-D8C667366F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kth:heimdal:0.7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237363DB-8160-4B5D-B15E-F3D380C31251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18894",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18961",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19005",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/449",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-977",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/23244",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426043/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16676",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-253-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0456",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0628",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0653",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24763",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/18894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426043/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-253-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0005",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-02-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:datacenter_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3249AF-05B0-4C34-BFBB-56B028806920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED93DC7D-4A15-4D31-8509-07EDFD2F2907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FF5726-8AEC-43D9-834E-554326851007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0D9B07-41F4-4B04-9CFB-11D8AE8346CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:datacenter_server:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "A35E805B-ACED-4999-B365-2EAEA7BDBCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:xp:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "5C974913-1C52-48FD-8C50-E1BD1484DD81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA18974-CD68-44C2-84A7-7C43CE392A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8B72F9-B944-4192-B1B9-2157B2824D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows-nt:xp_tablet_pc:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F34464-B0E5-4D03-B5BD-79B46B8671A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:pro:*:*:*:*:*",
            "matchCriteriaId" : "13FBAE6F-2EFF-447F-8392-ECB0FADD51D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:pro:*:*:*:*:*",
            "matchCriteriaId" : "99970D48-98C0-44B4-803A-64D8A82E6823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:pro:*:*:*:*:*",
            "matchCriteriaId" : "C805DC16-8660-4A9C-84A5-ADD108DA0509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:pro:*:*:*:*:*",
            "matchCriteriaId" : "C6C99A6D-BE32-4634-9261-81E26983FB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F1981-EA61-4A00-89F8-A748A88962F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C83CA0-6BF9-4A9B-9078-ED0FEBE106A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_advanced_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75E7A74-DA7D-49D8-AF65-A96496F28542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_advanced_server:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2C8535-5107-4772-AF13-EBC710C9254A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_advanced_server:sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1392664E-9EBF-4009-9DC6-4A1327B5C77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000_advanced_server:sp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEE2351-7780-4276-8259-F8B51A9057BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D8321-EB2F-4626-A16B-F3C2B771EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F633513-6E9A-4F2D-964A-6AFDE5307AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0095FE21-F45F-4D50-A22B-6AEF5ED4D691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AF27C8-C2FA-477D-8332-B96277530B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E296F83E-39E1-4DA0-A410-DDD17BDB3939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2000:none:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C01123-902E-4D3E-A752-30468074C859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2000:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484FF31A-2A02-4178-BBBD-9122823C6555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2000:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6E14CB-0248-483C-BCBB-490CF016B04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2000:sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC091471-7FC0-4FA0-89DB-AEA9B600C631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:datacenter_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A3A431-9CB0-45F6-8E9E-84A445B117B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:enterprise_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31390E94-0808-490A-B539-E46786CBC2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:standard_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B4B063-005F-4429-8CF9-402E24A7E420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:web_edition_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83E3F8C-E5C0-4616-81B7-9BFE4555B597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "19DA594E-B495-4C5D-BC94-79582D3983C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:*",
            "matchCriteriaId" : "E78E8FC4-9D64-4ADC-B318-55F4337B7EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro:*:*:*:*:*",
            "matchCriteriaId" : "261215DA-7018-4CE5-B055-0935DF9089A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18852",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015628",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=393",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/692060",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16644",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-045A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0575",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24493",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1559",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/692060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-045A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0008",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-02-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the \"shell about dialog box\" and clicking the \"End-User License Agreement\" link, which executes Notepad with the privileges of the program that displays the about box."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18859",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015631",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/739844",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.ryanstyle.com/alert/my/5/ms06_009_eng.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425141/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16643",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0578",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-009",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24492",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1595",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1650",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1664",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1688",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A727",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/739844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.ryanstyle.com/alert/my/5/ms06_009_eng.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425141/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0013",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-02-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18857",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015630",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/388900",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16636",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0577",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-008",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24491",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1220",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1547",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1602",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A683",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A716",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/388900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0021",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-02-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the \"IGMP v3 DoS Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015629",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/839284",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5PP0T0KI0O.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482658/30/4350/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16645",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-045A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0576",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-007",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24489",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1310",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1425",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1647",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1662",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1599",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/839284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securiteam.com/exploits/5PP0T0KI0O.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482658/30/4350/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-045A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via \"knowledge of the backend protocol\" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B9704E-4BA9-4389-83AB-62BC65F81D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEC35A2-B17C-46EC-8697-9E03568339BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00562C18-DD81-4B09-AF93-739AF8757A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.postgresql.org/pgsql-announce/2006-02/msg00008.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/567452",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425037/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2006-02/msg00008.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/567452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425037/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of PostgreSQL as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.7,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A96D-84D5-4257-9981-1139CD4CD08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98290E4-2919-4492-BD14-BB24BA85C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56E9F72-6CBF-4784-89CD-435A030AC0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B480F0-8FFC-4463-ADC6-95906751811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF44286-0DBF-4CCA-8FFB-993976C18CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629881D2-2A6D-4461-8C35-6EE575B63E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C91580-6428-4234-92DF-6A96108FCF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A19EB5-A1AF-4293-854D-347CD21065DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18ED293-B408-435F-9D1F-2365A2E51022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7106B29-76F3-43FD-BF57-4693D5B55076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B804CD-AE47-4B46-9B37-7F46D4C9A332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23E89A3-551D-42E2-90EC-59A9DAB4F854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC46594-100B-459F-BCB7-1FA9D0719D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C8302B-631A-4DF7-839B-C6F3CC39E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5913A53B-7B72-4CBD-ADAE-318333EB8B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC7F18-B227-4C46-9A33-FB34DDE456CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB903F-0C89-4E65-857E-553CF9C192E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105E9F52-D17E-4A0B-9C46-FD32A930B1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE2055D-AAA4-4A6A-918F-349A9749AF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12409B2-161B-4F78-B7AD-3CF69DDCC574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2F1DA4-6625-469D-988B-5457B68851A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870F4348-6001-4C2F-A547-61964074E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF590F2-899F-42E1-8A57-6F514C94CE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEC35A2-B17C-46EC-8697-9E03568339BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00562C18-DD81-4B09-AF93-739AF8757A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425037/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-258-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425037/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-258-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0004",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-02-14T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder (TIFF)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18865",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015632",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/963628",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16634",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0579",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-010",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24490",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1555",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/963628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0006",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-02-14T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66EBE04-CE6A-4B81-BC09-60DC5DB121E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28602CC-7866-4C30-B518-055923599A18"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18835",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/423",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015627",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060214.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/291396",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424983/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425158/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16633",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-045A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0574",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-005",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24488",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1256",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1578",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1598",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1661",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060214.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/291396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424983/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425158/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-045A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-14T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an undocumented system call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Feb/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0451",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-14T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (memory consumption) via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the ber_scanf call, as demonstrated using the ProtoVer LDAP test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:1.0:*:directory_server:*:*:*:*:*",
            "matchCriteriaId" : "883A1946-9017-4FA7-9517-2D074E764B14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18960",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16677",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0452",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-14T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via a ModDN operation with a DN that contains a large number of \",\" (comma) characters, which results in a large amount of recursion, as demonstrated using the ProtoVer LDAP test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:1.0:*:directory_server:*:*:*:*:*",
            "matchCriteriaId" : "883A1946-9017-4FA7-9517-2D074E764B14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18960",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16677",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24796",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0453",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-14T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (crash) via a certain \"bad BER sequence\" that results in a free of uninitialized memory, as demonstrated using the ProtoVer LDAP test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:1.0:*:directory_server:*:*:*:*:*",
            "matchCriteriaId" : "883A1946-9017-4FA7-9517-2D074E764B14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18960",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16677",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE19D6-9420-4D1D-BCC2-D640EFA558E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB4CDE9-CDE3-4B6A-AC99-31A0702EB092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C76208E-F6F9-42FD-8395-9FEAB0900E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116E72DD-961C-419B-98FA-424D5A51A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18B1038-29C4-4EC2-81EA-052F513CBB8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D55D1D-E8F8-4BA2-AA7C-DE8998C66B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734DC48C-5382-409E-908B-BDC31538F4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C053BC-5FF5-4712-9EF8-4ACB49ECA905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C31D70B-C56B-471A-8267-8D65F6898721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD11755-448B-497C-BB57-38E9938FB69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55992D43-86FD-4A19-AAB0-7F98AA090A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA01CA90-9497-4962-A411-A3E7D0780C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.6_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DE1ED38-1AD8-459A-8599-C2E1023AAB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.7_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E808197-58DD-44D5-BEF5-18F80AE71BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.8_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5C6754-89BE-429F-B370-05A74EFE1963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.9_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86825A2-3612-4C2E-A6E4-A0906955D48D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.10_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A80D91-6829-4FD0-A237-0B736133FE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.2.11_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E4C682-8357-42A1-B05A-A67BE6491673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.3.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC7A15A-CC25-4246-8E20-6DD2835505A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.4.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0BFA73-C127-4F3C-9264-9F7AF662EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A94D77-7CFD-45C7-97BC-99CB02461E19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA19BEB3-B893-41E9-A136-981F06E85327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895A15BB-6CD4-436C-AD8F-CD63DF918342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E8CFA8-4C68-4569-8B35-13155709453F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.4_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CBB373-CEC4-44A0-9AC5-BCBED479E3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.5_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EB08FC-0D48-4AD8-AD38-3995B01007C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.5.6_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAD6F9-34EF-4C12-AF2C-C8D4F7E31754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A7A54C-EB1E-41F7-91B9-F3DA5B3F3D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171B8F2A-4EB0-4A29-8F2E-6B073B1490CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.2_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F897FC-CC83-43A6-8D40-3825FEC517BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.3_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9CE5C0-DB9A-45CD-8C1C-26C664A79477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.4_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C519572D-9CB8-40F1-A74D-D0246873DEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.6.5_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0642CAD-4655-46A0-9AFD-CC2C021BB55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9073E8-E3B5-416C-8D9B-1943F67BDE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99ADD3A-FE1D-4B67-9945-9CBB3D4BEBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDBDCD-6BF0-4213-91D0-501D107DB512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.3_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3236FC46-7E1E-49A1-8239-B67C03D47B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.4_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB7FE74-41AF-4E99-B808-A9349BED0575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.5_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D646596-6247-4E58-B84F-7BD87B8B71DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.6_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386BF292-8E87-4442-A4CF-A3A105ECBBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.7_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23D1DB6-6C4F-4C0A-A8EE-CB51E16F89A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.7.8_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282EF8C4-E4D1-42FD-A56F-3FA3AB8EE6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.8.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B79656F-BE0B-403B-8E2B-C384AEDF21C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.8.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DEC170-B84D-47B9-8A91-13374B8021FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.8.3_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382B4D87-4CE1-4E06-A6EC-4725FC209D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.8.4_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3154B61C-7781-4AFF-B518-6C33D0F74392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plain_black:webgui:6.8.5_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C926D1D-4D76-40BB-BA15-F9DF61F40DA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18819",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.plainblack.com/getwebgui/advisories/webgui-6.8.6-gamma-released",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.plainblack.com/getwebgui/advisories/webgui-6.8.6-gamma-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the WHATIDO variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:power_daemon:power_daemon:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB69D09-4FE3-4C81-8DEF-20E270BAC57A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:power_daemon:power_daemon:2.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC6DE88-B9D5-4E6E-9BC5-3BD7D0CBB370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:power_daemon:power_daemon:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A93EDD1-82AD-4658-BCF2-D32C221226C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:power_daemon:power_daemon:2.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66784A58-4693-4F01-8EC2-43157FC2DCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:power_daemon:power_daemon:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B9135C-270C-440F-8505-01CF83ADA6B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gotfault.net/research/advisory/gadv-powerd.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18841",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gotfault.net/research/advisory/gadv-powerd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AB914E-D616-45D2-A451-1C247B8B6E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA03C1AC-97EA-47ED-9558-A7CA48420AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437C4251-886C-4E94-B7F6-AE34A0142A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D4EE9-0D54-4370-BCBC-3C23481C127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11E3F9E-708E-44CB-8FD2-E4961028B732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F38EB42-437C-4381-B36A-FD3DB78E724E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4B3A4-2563-4C06-A484-5C02CD8F7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E80F85C-61AD-49C0-9EBF-B79F728F6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE097FC-A525-4599-9FDA-1A011EECE767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF51B0D-E020-491D-92A9-D2A01A7417AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692341-8DF2-4943-853A-4AAF1F313914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75197306-53DB-4C94-959B-C46D3FB1F42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C5C91C-C1C5-457D-9E09-24C7CACCC280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB88C92-4F62-471A-8C10-C13C890E764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5585DC36-C65F-4FCA-B26F-E4A7901863E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD56C-66F7-421C-B211-07C7856112C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E14B108-228D-454F-AF16-9D9086E4C10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C91C45-9A96-4E69-8A0A-D619AB45BC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7C68F4-9ECD-41A9-B4AE-48F028841428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AA824A-CEE6-460B-A668-92FC3A822305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17F613A-6BE1-4B45-8E40-8E44E0EEA756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB33E9-9AB8-482A-A196-768A2085A49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E294FE-F0A2-45FC-BB67-D988DD89D2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9640315B-7F04-4F5A-B213-8FAF509DFF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF75A192-81C1-4F58-A660-7EFE4F33E58B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4189588A-A887-4D27-B3A0-48A3DBBD5E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549E7FF-4329-49F6-BF59-081DA7874BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA26A71E-F1E6-4EA0-9165-F7989FB89B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C90BAB9-2ACE-48E4-BC15-E88C2C370B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD219A3-4958-4EA9-A914-37D4F0A8A24D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3417C70B-E531-49C8-971E-CC349FB5AA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5EF2F8-0A65-4C8C-A4A3-9B9B1151509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FBE3F6-7685-43BA-B63B-28AA79330323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CC3B56-F1FC-452A-A0A7-4CF60089C1E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.4_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7524B12E-3D05-4CD1-B582-8A66EEC3F6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "590FE150-07AF-4E25-B8F8-D0E8500D73B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e107.org/comment.php?comment.news.776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18816",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e107.org/comment.php?comment.news.776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly handled when the administrator uses the admin log utility to read the log file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.6.2",
            "matchCriteriaId" : "D3725CCD-A9A9-48AD-9D5A-0E1F33C92529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.4.7.1_patch_v.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814F008E-1E3C-4832-AF78-1945C167B61D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18799",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424816/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424816/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers to gain unauthorized access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.7.1",
            "matchCriteriaId" : "A0DABFBB-2D8C-41B2-9837-23E586579099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18799",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424816/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424816/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.7.1",
            "matchCriteriaId" : "A0DABFBB-2D8C-41B2-9837-23E586579099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18799",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424816/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424816/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.7.1",
            "matchCriteriaId" : "A0DABFBB-2D8C-41B2-9837-23E586579099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18799",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424816/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424816/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows remote attackers to include arbitrary local files or possibly remote files via a modified includeModule and siteModInfo variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docmgr:docmgr:0.54.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5598D-69F3-45BF-A3C3-97F16F4FB7AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/docmgr_0542_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18803",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424818/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/docmgr_0542_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424818/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allows local users to cause a denial of service (system crash) via unknown vectors related to EMULATE_VMX."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18795",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY79595&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16624",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY79595&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicecoder:indexu:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A17436-ECBF-4D2B-88AD-85DD6A0DCD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicecoder:indexu:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4142AEA-F131-46DE-B373-1F0CB3531D91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv26-K-159-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv27-K-159-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424549/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://echo.or.id/adv/adv26-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://echo.or.id/adv/adv27-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424549/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scheduling_management.com:time_tracking_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1F2E80-37B8-4312-B0C4-F5946C0746F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/69/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425505/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/69/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425505/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scheduling_management.com:time_tracking_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1F2E80-37B8-4312-B0C4-F5946C0746F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/69/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425505/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/69/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425505/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scheduling_management.com:time_tracking_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1F2E80-37B8-4312-B0C4-F5946C0746F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/69/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425505/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/69/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425505/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the (1) yr, (2) month, (3) day, and (4) job parameters in (a) index.php and (b) changehrs.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carey_briggs:php_mysql_timesheet:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A725C5-3328-4018-865B-3503E2074FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carey_briggs:php_mysql_timesheet:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE3C8C8-FDB9-46AB-ABBA-2BE0B13AFD56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/67/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425316/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/67/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425316/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has supplied a patch which is available at:\r\nhttp://www.hotscripts.com/Detailed/51138.html"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the (1) login and (2) password parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roberto_butti:calimba:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D351C9-21D5-47F3-BFB4-F6BA3E4ABCA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roberto_butti:calimba:0.99.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE078426-C367-42BB-9AE8-221A7C5579AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/68/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425364/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/68/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425364/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving \"converting files accessible by the webserver\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ansilove:ansilove:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18FD1316-0CC9-4CCF-BD5C-3D9FD12416D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ansilove:ansilove:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44903256-1529-4326-A818-B5893A74CD7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18810",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392826",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ansilove:ansilove:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18FD1316-0CC9-4CCF-BD5C-3D9FD12416D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ansilove:ansilove:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44903256-1529-4326-A818-B5893A74CD7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18810",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392826",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E59290-86CB-45C6-A3D7-1308C5EF0B4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B44805-3477-4AB5-97F9-4686C43EA77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260635F8-5F63-4B63-9630-5AB9F347230F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B8F67D-AAC5-4659-A7DE-7C3310261D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF502ECD-C966-4F41-8B1B-0827259BD4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C8BCE1-3959-4CF1-B45D-9C9C5437C7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.1_patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A3AD01-366B-488E-868B-972749150316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB8EFC7-DC11-49D0-BDFB-5C9460459A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69984850-EDA0-4F5E-9F79-48AA660D931B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55577877-7456-4AA3-95B9-A3BA7A31B60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CC34F0-22C9-421E-8160-D2A751A1B317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD91623-8C40-45C9-B4AD-6307D5FF2FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.5d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF4D70-7368-4048-9E8C-A170B4A21811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADD93A8-E710-4348-A738-A8C64C8235D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392886",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.6d",
            "matchCriteriaId" : "DA2B085E-8101-425A-A186-3DC81FD3AF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C929C74-3510-4A89-96CF-2109271008E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1E7B9-BE05-4F16-8A3C-F0E8B23FF585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27DEB51-7745-4B5A-9E23-5491526E857E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "36122EF6-499E-4F19-83EF-EA4961A8CF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96BA0248-CF20-4DF4-AF6B-4E9CACE8109B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FF3EA3-FF9F-4E21-B485-C570DB62E0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271B7AA0-13C1-409A-A6CA-9532757B864B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD3CD1F-4BE7-436B-A0BE-2F96162AD76B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82CED1DF-15F5-47A2-9C70-F276B466167E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.2.5d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A866A952-5EE5-4B11-826E-123B19A98D9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392886",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to \"other attempted exploits\" other than SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E59290-86CB-45C6-A3D7-1308C5EF0B4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B44805-3477-4AB5-97F9-4686C43EA77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260635F8-5F63-4B63-9630-5AB9F347230F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B8F67D-AAC5-4659-A7DE-7C3310261D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.1.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF502ECD-C966-4F41-8B1B-0827259BD4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C8BCE1-3959-4CF1-B45D-9C9C5437C7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.1_patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A3AD01-366B-488E-868B-972749150316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB8EFC7-DC11-49D0-BDFB-5C9460459A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69984850-EDA0-4F5E-9F79-48AA660D931B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55577877-7456-4AA3-95B9-A3BA7A31B60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CC34F0-22C9-421E-8160-D2A751A1B317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD91623-8C40-45C9-B4AD-6307D5FF2FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.5d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF4D70-7368-4048-9E8C-A170B4A21811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADD93A8-E710-4348-A738-A8C64C8235D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392886",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows remote attackers to inject arbitrary web script or HTML via the query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26FA3A2-180C-4DA8-95C7-49F0F618F4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B46EF3-1A3D-4855-BD05-A7C79D2ACE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7D5D2-1A41-44CE-9FFB-2545B5BA90E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE80A27-696F-43B2-91F9-4A9C56414C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52446CE-AA8E-43D6-8E75-806C425005CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB74F950-B583-4544-9560-30470A90D428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2FC6ED-6F45-4BDF-A1A7-B4ABEF2620A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467C28D8-7790-4081-B696-E65DFCB3E434"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://insecurity.altervista.org/index.php?m=02&y=06&entry=entry060213-221217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18814",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://insecurity.altervista.org/index.php?m=02&y=06&entry=entry060213-221217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagevue:imagevue:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D4EB0C-CA76-4F21-8A4C-7C51BE33B41C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424745/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0570",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424745/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagevue:imagevue:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D4EB0C-CA76-4F21-8A4C-7C51BE33B41C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424745/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424745/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter.  NOTE: due to the lack of details, the specific vulnerability type cannot be determined, although it might be due to directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagevue:imagevue:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D4EB0C-CA76-4F21-8A4C-7C51BE33B41C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424745/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424745/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagevue:imagevue:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D4EB0C-CA76-4F21-8A4C-7C51BE33B41C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424745/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440586/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450047/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424745/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440586/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450047/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iE Integrator 4.4.220114, when configured without a \"bespoke error page\" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, web server name, IP, and port, session cookie information, and the IIS system username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ie:ie_integrator:4.4.220114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF11C2B-5E15-4F3C-8033-FD65182CA8BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18813",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irmplc.com/advisory016.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irmplc.com/advisory016.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:attachmatewrq:reflection_for_secure_it_server:6.0:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "9D773D86-26DA-4483-A16E-005232B9DF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:attachmatewrq:reflection_for_secure_it_server:6.0:*:win:*:*:*:*:*",
            "matchCriteriaId" : "007F8B68-5E11-4FC8-9D18-719DF0A1F904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828E1D3E-C888-4E28-8676-E1D6298BD339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D379AB4-74F4-4E03-967B-57F34697941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.1:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "37D85A8A-3A63-45D2-A8FF-8C7E418232FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E965836B-EA89-4BA9-8D4A-562F8C6C3632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE6E187-92F4-4940-BCB2-D5666D8776D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC639035-D459-4964-AE75-478BC6CD0AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB5E609-2C26-4A02-A7C9-2C4648595321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72EB2B8C-9A8E-4132-B063-C68F85C337FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99906561-4B53-4761-BE99-9A061E088EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F8096D-CAAA-4C97-A6D7-4417E687536C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F92DCFF-1403-44D5-9ED3-EA6EB3B4E9E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808266FA-E939-4975-A0A3-280E7244C528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "609AAA1C-8C26-4337-B34F-0DB51450FEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0_build9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671E1719-E51E-442A-ADCA-2FB1998D1D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.2.0:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "ECCBEC85-7431-413A-9CCE-0209E255847D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:3.2.3:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "A554C5FE-DBB1-40FD-BF11-9857B48CF409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9396490-9409-461D-8102-3243EDB80434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:5.1:*:win:*:*:*:*:*",
            "matchCriteriaId" : "96F807C2-CF24-4686-BC45-C43A767A180D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:5.2:*:win:*:*:*:*:*",
            "matchCriteriaId" : "39842C81-82F2-40A4-9271-5CFC75F6F51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_ssh_server:5.3:*:win:*:*:*:*:*",
            "matchCriteriaId" : "CF12909D-0AFA-40B5-A38C-CC9A1DC1F20C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=120654385125315&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18828",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18843",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29552",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200703-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015619",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.wrq.com/techdocs/1882.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/419241",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16625",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0554",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0555",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1008/references",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=120654385125315&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/29552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200703-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.wrq.com/techdocs/1882.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/419241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1008/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the URL, which is used in the homepage parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en eintrag.php en Gästebuch (Gastebuch) en versiones anteriores a 1.3.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de la URL, la cual es utilizada en el parámetro de página de inicio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gastebuch:gastebuch:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "0E74F867-2EDE-49AD-B754-2B71572A5E78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=113986789801121&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18849",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php4scripte.de/index.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16615",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=113986789801121&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php4scripte.de/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nGastebuch, Gastebuch, 1.3.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash) characters, which is accessed using the PATH_INFO variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyblosxom:pyblosxom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "45E3F051-BBDC-4300-AA2A-779BDD45742A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyblosxom:pyblosxom:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070BF172-51FA-401D-9F8D-414F4ABF2375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyblosxom:pyblosxom:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F3A7500-A98C-42C6-92E0-40067F9DAEF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18858",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=391800",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=391800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containing a long URL ending in .wma, (2) a pls file containing a File1 field with a long URL ending in .wma, or (3) an m3u file with a long filename, variants of CVE-2005-3188 and CVE-2006-0476."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828226F9-29AA-437F-8385-B75A6F4F3B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD7DE0D-1018-4E04-A771-B2C619E95C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D38D15-3588-49E4-9396-11DB96FBD448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF40252-7E87-4EE6-B2C7-19E8D78C4025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF272FF7-68ED-4D8B-9C17-D9D46AA33335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FAD29A-6A61-4201-A0E6-1F04BF093600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4497A5-6E95-4CB3-999E-53BF890A23F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057B033C-7836-41E0-B184-F9D5DFC42C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20168350-2AD1-4AF4-B0AA-4C2EBF616259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A6931-A3CD-44A7-B170-53B803F321AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A651DB07-0A59-41C5-8788-6A3594A5023C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6A1F15-A3FA-40FB-980A-569F77E1D104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684ABC3F-57CB-490B-ADCB-501E0D234E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB30030-A195-4626-AAED-D421454D911D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.winamp.com/showthread.php?s=&threadid=238648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015621",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424903/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.winamp.com/showthread.php?s=&threadid=238648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424903/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metamail_corporation:metamail:2.7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6703A77-3E4D-47D7-A21B-AA658C19F87E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18796",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18987",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19000",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0217.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16611",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0217.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isode:m-vault_server:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2803AA5-3D65-45E6-8940-124D338438D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002925.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18818",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16635",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002925.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neomail:neomail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.28",
            "matchCriteriaId" : "17E8BFF8-3D6F-4E65-920C-E83E17B205F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18785",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-3/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392562&group_id=2874",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-3/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=392562&group_id=2874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, which allows remote attackers to bypass spam filters by injecting SMTP headers, probably due to a CRLF injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squishdot:squishdot:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28514472-52C3-44AD-99F4-688A0D95F30E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squishdot:squishdot:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A027BB31-F34B-4060-8B37-D4D9974EA5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squishdot:squishdot:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B57484D-FE63-4F21-BC73-C56AE4BB972B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squishdot:squishdot:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167C86AB-8BC4-4E73-96B5-7C2738E188E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squishdot:squishdot:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B6872F8-F947-43F1-B7E7-701D4A432334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squishdot:squishdot:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19789B4-446D-40B6-8395-61288C4A9E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squishdot:squishdot:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2189D8-4ACE-4113-BB74-721EA2AC95FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squishdot.org/1139510883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squishdot.org/1139510883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) lang parameter in docs/index.php and the language parameter in (2) install/install.php, (3) install/sec_stage_install.php, (4) install/third_stage_install.php, and (5) install/forth_stage_install.php.  NOTE: direct static code injection is resultant from this issue, as demonstrated by inserting PHP code into the username, which is inserted into linpha.log, which is accessible from the directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EE653B-2731-4C3E-A7D0-3465276E879C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108B066B-28C1-4888-B696-78F816A89B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9113509A-C884-46F4-BE97-C49382536FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD294BF-79FE-4940-B2D1-CB2506370EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E9B8B3-87E5-46A5-8242-04E620D54086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F46907-9618-4F1C-8C68-E33EBC8E32B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/linpha_10_local.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18808",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/linpha_10_local.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the adodbpath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flyspray:flyspray:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10D55FA-08EA-4389-8DF6-C632C4F70022"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/egs_10rc4_php5_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18847",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424902/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16618",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/egs_10rc4_php5_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424902/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solucija:snews:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA10A3F0-0A9F-4D4A-A382-D7C04A7CB763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424958/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16647",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424958/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solucija:snews:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA10A3F0-0A9F-4D4A-A382-D7C04A7CB763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424958/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16647",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424958/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002921.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21230820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16593",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002921.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21230820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vsu_100:3.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A1F76C-D381-4C4D-8204-371494C1CBFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vsu_10000:3.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA831AA-8F78-45CF-BBDB-AAE6BFE7A9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vsu_2000:3.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "519AEC26-EAC3-4D67-A90D-AAED11D0247C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:vsu_7500:3.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F12445-A8D9-4FA3-9B23-B57B21C7344B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:avaya:csu_5000:3.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C499F7A-E22D-4856-BBF6-9687D5134751"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-043.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-043.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/226364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0455",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-15T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded.  Note: this also occurs when running the equivalent command \"gpg --verify\"."
      }, {
        "lang" : "es",
        "value" : "gpgv en GnuPG en versiones anteriores a 1.4.2.1, cuando se utiliza verificación de firma desatendida, devuelve un código de salida 0 en algunos casos, incluso cuando el archivo de firma acompañante no lleva una firma, esto puede provocar que los programas que usen gpgv asuman que la verificación de la firma ha tenido éxito. Nota: Esto también ocurre cuando se ejecuta el comando equivalente \"gpg --verify\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E054978B-8466-4D12-B7DC-7E72CC57F0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38F964B-C5D1-4177-BD31-7AB4083CC431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF7811A-B254-4829-AED2-C70BD5C82592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ED862B-6278-41ED-9619-115E6552AFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1869E888-E83C-4A62-AA84-F2C9F2AF12FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D51820-D735-44FC-95BB-A473FFDE9D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FB2C28-0E4D-4AE3-A2CC-0197FE578074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2224AF-EA7B-4A3D-8B23-7FC59D66E611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2B3B44-941E-4007-B58A-16E85B87CB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A642D7-007E-479D-963E-A74AAE195A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86144B81-D321-4ECA-937F-FFA8A043FCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A93CAE1-0DFC-43E1-997D-22CDC338D3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9896332E-819B-4392-B704-B143DBBE90A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B641ED5-4326-43E7-BF42-982B44478A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CAFD24-E53F-488C-BD9F-BE31D30828AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3628A-3BDD-4C6F-AE7D-C81FC3EE1630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589745-A9A6-44DB-B4F0-B61B663ECA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2B99CB-5950-42E7-ACD5-38457CBE9095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81AF47A-56BA-4D90-A4D4-D7A37333A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55DBB73-EF6C-4C46-9E5A-7C35D7FD190C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C014A-236B-44CF-A92D-B4D6392FF9A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F412ECF0-DA84-47B8-98FD-06019C9E63E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE04D970-A467-4648-B99C-895BA8BEE79B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA-2006-116.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000211.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=gnupg-devel&m=113999098729114&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18845",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18933",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18934",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18942",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18955",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18956",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18968",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19249",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-10.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_09_gpg.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_13_gpg.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.001-gnupg.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23221",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0266.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425289/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433931/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16663",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.476477",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-252-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-978",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0610",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24744",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10084",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fedoranews.org/updates/FEDORA-2006-116.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000211.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=gnupg-devel&m=113999098729114&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_09_gpg.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_13_gpg.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.001-gnupg.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0266.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425289/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433931/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.476477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-252-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-15T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, and (2) password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2E8AE8-3B62-472D-B3BD-AC780B2D1340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EBB2F6-D866-46DD-AB80-0443D47C607D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E29ACE-2333-49D0-98B4-E6535152EA8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.deltascripts.com/board/viewtopic.php?id=7234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424955/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16642",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.deltascripts.com/board/viewtopic.php?id=7234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424955/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the to_userid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en pmlite.php en RunCMS 1.2 y 1.3a permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"to_userid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DC85FB-F2DE-493A-B134-ED386CCEB253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4ED0719-A061-40E8-8B53-A9AE9BAD2D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.3a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA514AB-F035-480E-9502-1D011443FA5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/runcms.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18831",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.runcms.org/public/modules/forum/viewtopic.php?topic_id=4003&forum=18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16652",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/runcms.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.runcms.org/public/modules/forum/viewtopic.php?topic_id=4003&forum=18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized."
      }, {
        "lang" : "es",
        "value" : "settings.php en Reamday Enterprises Magic Downloads 1.1.3. cuando \"register_globals\" está habilitado, permite a atacantes remotos modificar la conducta del programa, potencialmente evitando controles de autenticación, modificando las variables (1) action, (2) passwod, (3) admin_password, (4) new_passwd, y (5) confirm_passwd, que no son inicializadas.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reamday_enterprises:magic_downloads:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7736B9-CDC3-486F-B79F-AC7CED2D49A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/73/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425601/30/6830/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/73/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425601/30/6830/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path parameter."
      }, {
        "lang" : "es",
        "value" : "preview.php en Reamday Enterprises Magic News Lite 1.2.3, cuando \"register_globals\" está habilitado, permite a atacantes remotos incluir ficheros arbitrarios mediante una URL en el parámetro php_script_path, que no es inicializado.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reamday_enterprises:magic_news_lite:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD86269-B9BB-40F6-A5EE-9A305C044B89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/72/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/72/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized."
      }, {
        "lang" : "es",
        "value" : "profile.php en Reamday Enterprises Magic News Lite 1.2.3, cuando \"register_globals\" está habilitado, permite a atacantes remotos modificar el comportamiento del programa, potencialmente evitando controles de autenticación, mediante la modificación de las variables (1) action, (2) passwd, (3) admin_password, (4) new_passwd, y (5) confirm_passwd, que no son inicializadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reamday_enterprises:magic_news_lite:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD86269-B9BB-40F6-A5EE-9A305C044B89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/72/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/72/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the _PX_config[manager_path] parameter.  NOTE: this is a different executable and affected version than CVE-2006-2645."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plume-cms:plume_cms:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B174BD-A02F-46FF-BFD7-0EABDBCAB0C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://plume-cms.net/news/77-Security-Notice-Please-Update-Your-Prependphp-File",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18883",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0599",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://plume-cms.net/news/77-Security-Notice-Please-Update-Your-Prependphp-File",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6575D4F3-6072-4B6C-9E01-522BCBF01B5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dragonflycms.org/Forums/viewtopic/t=14751.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/cvs/html/includes/functions/linking.php?b=9.19.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/cvs/html/includes/functions/linking.php?d=9.23-9.22",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/t=14751.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dragonflycms.org/cvs/html/includes/functions/linking.php?b=9.19.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dragonflycms.org/cvs/html/includes/functions/linking.php?d=9.23-9.22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nuke Dragonfly CMS, allows remote attackers to trigger path disclosure from a SQL syntax error, and possibly execute arbitrary SQL commands, via certain query data, probably involving the profile name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musox:df_msanalysis:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4391FD-05D2-43A2-BCD0-CD0C516F1094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dragonflycms.org/Forums/viewtopic/t=14751.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/cvs/html/includes/functions/linking.php?b=9.19.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/cvs/html/includes/functions/linking.php?d=9.23-9.22",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/t=14751.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dragonflycms.org/cvs/html/includes/functions/linking.php?b=9.19.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dragonflycms.org/cvs/html/includes/functions/linking.php?d=9.23-9.22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the title_op parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.01.00",
            "matchCriteriaId" : "F1C094CF-58C4-4E2A-8A18-35E3C773B2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18885",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.webspell.org/index.php?site=news_comments&newsID=49&lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webspell.org/index.php?site=news_comments&newsID=49&lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teca_scripts:teca_diary:personal_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47FD2F1E-18B3-4C0E-8789-53C256DEC3AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/75/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425892/30/6800/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/75/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425892/30/6800/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) \"potential hangs\" in the APPEND command and \"potential crashes\" in (2) dovecot-auth and (3) imap/pop3-login.  NOTE: vector 2 might be related to a double free vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timo_sirainen:dovecot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0beta2",
            "matchCriteriaId" : "935A5713-2EB8-4DE0-927A-79576F5B878B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18870",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dovecot.org/list/dovecot/2006-February/011367.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0549",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dovecot.org/list/dovecot/2006-February/011367.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue only affected Dovecot versions 1.0beta1 and 1.0beta2.  Red Hat Enterprise Linux 4 shipped with an earlier version of Dovecot and is therefore not vulnerable to this issue.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_connector:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "core_fix_7",
            "matchCriteriaId" : "7D2D0DA0-4234-41E7-A3D8-DC07C97D00A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Phishing_Vector_in_SAP_BC.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425056/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434012/30/4980/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0611",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Phishing_Vector_in_SAP_BC.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425056/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434012/30/4980/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to (1) sapbc/SAP/chopSAPLog.dsp or (2) invoke/sap.monitor.rfcTrace/deleteSingle.  Details will be updated after the grace period has ended.  NOTE: SAP Business Connector is an OEM version of webMethods Integration Server.  webMethods states that this issue can only occur when the product is installed as root/admin, and if the attacker has access to a general purpose port; however, both are discouraged in the documentation.  In addition, the attacker must already have acquired administrative privileges through other means."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_connector:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE83F111-0035-4740-87A8-02425B9F3A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_connector:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1A6DBC-631B-4FB4-8B10-31F891B23577"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425048/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434014/30/4980/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425048/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434014/30/4980/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply patches (see SAP note 906401 and 908349)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as (1) onfocus and (2) onblur in the \"author's website\" field.  NOTE: followup comments to the researcher's web log suggest that this issue is only exploitable by the same user who injects the XSS, so this might not be a vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425043/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16656",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425043/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a backslash character at the end of a connection string to UDP port 27015."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:valve_software:half-life_cstrike_dedicated_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6_linux",
            "matchCriteriaId" : "1668B5D1-3F9E-48CE-8FD5-A1D147D18609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:valve_software:half-life_cstrike_dedicated_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6_windows",
            "matchCriteriaId" : "DDE623E2-5F02-4BD7-81EB-1DE9C2F84255"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/csdos.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16619",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/csdos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an (1) img or (2) url BBcode tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0372C55A-8A1D-44CA-BAD8-456D6BC18C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860573BD-686A-480B-BE55-506CEF42718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41881B3E-8276-42B7-BC65-A5CD1D9305A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D9F78D-4252-47F6-AAE6-E57AD1DB4A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FC1C3D-5665-46EE-80E4-8A8F6355EFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B13613-6C1B-4D69-981A-1A6289BC1D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A70E5B0-0381-4129-B7C4-7F8E691771BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7C7433-5DB9-4D7F-89CC-4832C8B7BF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DAA4C0-47A1-4454-BF9E-D9686EF79D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7530D7-CB7E-4CB1-B542-77478AEF5510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFBB4D5-3CD2-4551-90BB-FDF6BE74455A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5DD263-7305-4846-8FDC-B6D7C1ED70C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFAE745-EA5D-4011-A7DA-180A870D37FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DADC6F2-D03A-493F-B71E-4C58783D4056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE893AED-0A6F-416A-A6CB-B60A1905B054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fuzzymonkey:my_blog:1.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E92C383-4FD8-4C89-A47D-D3AC9ECE7D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m_blom:html-bbcode:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A93505A-A52E-424B-AA42-08ED11303EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m_blom:html-bbcode:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3527B973-3A58-43E9-923E-1880A644F625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/79/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://evuln.com/vulns/80/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fuzzymonkey.net/forum/viewtopic.php?t=856",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://menno.b10m.net/perl/HTML-BBCode/Changes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://menno.b10m.net/perl/dists/HTML-BBCode-1.05.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18905",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18925",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.evuln.com/vulns/80/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425087/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425113/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/79/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://evuln.com/vulns/80/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://fuzzymonkey.net/forum/viewtopic.php?t=856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://menno.b10m.net/perl/HTML-BBCode/Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://menno.b10m.net/perl/dists/HTML-BBCode-1.05.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.evuln.com/vulns/80/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425087/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425113/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-16T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable (Nickname field)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke_ev:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA9E2FD-2A30-4BDD-A597-82372B84CD49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0358.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425173/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0358.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425173/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0460",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-17T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4CD738-5C6B-415D-ACE8-2BE057A26CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43E63E8-4A27-43F3-A020-F1350518AE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010D74B6-727D-4EBB-95C3-6C82A61FCB76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536B2D7E-CAFE-498E-AED3-79C29B27DD22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6105C9CD-1E2B-438F-B12E-75993A65C906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2710E47D-CDC2-4FA5-A345-49C8B2700758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3074B2AF-2800-4C60-A860-D6AB7C302D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02522716-95D7-44E8-8607-9147B87BD589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0202838-D00B-412C-AA9D-A6EFCCB09802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C3046F-FD10-4A12-9E77-45793B4D9BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B07EAA-707F-4150-A50B-67782F5F9A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EE48FA-1D74-4C8D-B8A8-751FFDBC6136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11FF68C-BE08-4FF3-B4F5-75B85FB80D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1189807-5CD7-48E1-A951-5743AE6D1D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3DA93D-AC12-4E63-9E34-7543D9BDEAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327901F7-A47F-4D12-9FC3-83480751E353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AA0BE2-13EC-4186-8D7F-DFEF2697086E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC129DF-B419-4DA5-A5E4-0C1C1DDAF2AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-997",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-09.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16697",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0643",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24764",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200602-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-17T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a negative Expires field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estara:softphone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1.47",
            "matchCriteriaId" : "BA3442C8-BC97-4ED6-AC41-431F13EB25B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424943/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424943/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-17T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service (hang) via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using (1) the field name, (2) the o field (owner/creator and session identifier), or (3) the m field (media name and transport address)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estara:softphone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1.47",
            "matchCriteriaId" : "BA3442C8-BC97-4ED6-AC41-431F13EB25B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424943/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424943/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-17T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eStara SIP softphone allows remote attackers to cause a denial of service (crash) via an INVITE request with a Content-Length field that has more than 9 digits."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estara:softphone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1.47",
            "matchCriteriaId" : "BA3442C8-BC97-4ED6-AC41-431F13EB25B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424943/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424943/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supersmashbrothers:army_system:2.1.0_for_ipb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F73982E-3866-40A6-AE80-C620C8136466"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secubox.shadock.net/Invision_Power_Board_Army_System_Mod_2.1_and_prior_SQL_Injection_Exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18840",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424846/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16606",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secubox.shadock.net/Invision_Power_Board_Army_System_Mod_2.1_and_prior_SQL_Injection_Exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424846/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the (1) Filesystem in USErspace (FUSE) client and (2) NOOFS daemon in in Network Object Oriented File System (NOOFS) before 0.9.0 have unspecified impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noofs_team:network_object_oriented_file_system:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4DEF987-F40D-4902-A626-1C666D7E3A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noofs_team:network_object_oriented_file_system:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA8D230-8ABD-4454-862F-A7069BCB6E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:noofs_team:network_object_oriented_file_system:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3A828F-5B77-471F-A169-DEA12D8404C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/apps/freshmeat/2006-02/0003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/noofs/?branch_id=60557&release_id=218852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/apps/freshmeat/2006-02/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://freshmeat.net/projects/noofs/?branch_id=60557&release_id=218852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would drop, which allows remote attackers to identify IP addresses that are being simulated using honeyd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAB9CCB-EA5A-4AF6-A6B0-2AEF29AD2BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C658CB38-C14B-417C-A4B5-7E62A70F4478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:0.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0682334-D4EE-4272-9DDA-E8462113C25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2A952A-F3E4-4397-9B78-4B473E354E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671D3D8D-D731-4A9C-9FF5-7EC49D706574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111896C0-50EB-43CF-85CA-6151D53829CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D44CD1-B647-4CB1-A5D7-23BBB5C2810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:0.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8016906-33EA-4527-8BD2-0C7BC17D0054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623D1180-2288-4F2C-BB1B-86F15DD0B70F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:1.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91147D02-3E72-4D15-B6AA-08F2ABBFE7D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.honeyd.org/adv.2006-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.honeyd.org/phpBB2/viewtopic.php?t=106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425112/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16595",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.honeyd.org/adv.2006-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.honeyd.org/phpBB2/viewtopic.php?t=106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425112/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en Microsoft Internet Explorer 6 para Windows XP Service Pack 2 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de JavaScript que utiliza setInterval para llamar a una función repetidamente para establecer el valor de window.status."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424959/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424959/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, which reveal the path in an error message.  NOTE: the vendor disputes this issue, saying that it could only occur if the administrator ignores the installation instructions as well as warnings generated by check.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3862952F-9DE1-471A-A895-A1AFCA3C40F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FFB14E-3C84-4AAE-A04D-221DCDE0F47E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424957/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425285/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16648",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424957/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425285/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary commands via the baseDir parameter in (1) db_adodb.php, (2) db_connect.php, (3) session.php, (4) vw_usr_roles.php, (5) calendar.php, (6) date_format.php, and (7) tasks/gantt.php; and the dPconfig[root_dir] parameter in (8) projects/gantt.php, (9) gantt2.php, and (10) vw_files.php.  NOTE: the vendor disputes this issue, stating that the product documentation clearly recommends that the system administrator disable register_globals, and that the check.php script warns against this setting.  Also, the vendor says that the protection.php/siteurl vector is incorrect because protection.php does not exist in the product"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3862952F-9DE1-471A-A895-A1AFCA3C40F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FFB14E-3C84-4AAE-A04D-221DCDE0F47E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424957/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425285/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16648",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424957/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425285/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after installation, which allows remote attackers to obtain sensitive configuration information.  NOTE: the vendor disputes this issue, saying that it could only occur if the administrator ignores the installation instructions as well as warnings generated by check.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3862952F-9DE1-471A-A895-A1AFCA3C40F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FFB14E-3C84-4AAE-A04D-221DCDE0F47E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18879",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424957/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425285/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16648",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424957/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425285/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contactgroupid parameter in addressbook.update.php, (2) the messageid parameter in addressbook.add.php, (3) the folderid parameter in folders.update.php, and possibly certain parameters in (4) calendar.event.php, (5) index.php, (6) pop.download.php, (7) read.bounce.php, (8) rules.block.php, (9) language.php, and (10) certain other scripts, as demonstrated by an addressbook.update.php request with a contactgroupid value of phpinfo() preceded by facilitators."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD125F9D-1E13-419C-900B-6BF71A5E98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDA700A-A6AA-49EB-B847-E995A341FFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A19437-0D2F-4C1F-B37E-6B0BC98993D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B310602-7C6C-4C36-AE99-605F3932AB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.1_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C444230-0988-49BD-BCFE-439A33FD9912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681B2B76-9AFC-45B2-960F-F8309A01444C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256B2BD7-34EA-42A7-A3F3-6F0F49FAD921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD9FE2A5-70D8-41A7-B201-541761EF8914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D43770F-B354-4F6F-BADB-246E3D1C2777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02247FB6-3D9D-47E6-A6A0-3F772421193A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0162.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forum.hivemail.com/showthread.php?p=26745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00098-02102006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forum.hivemail.com/showthread.php?p=26745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00098-02102006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via a URL encoded expression in the query string in (1) index.php and (2) possibly certain other scripts, which is not properly cleansed when accessed from the $_SERVER['PHP_SELF'] variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD125F9D-1E13-419C-900B-6BF71A5E98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDA700A-A6AA-49EB-B847-E995A341FFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A19437-0D2F-4C1F-B37E-6B0BC98993D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B310602-7C6C-4C36-AE99-605F3932AB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.1_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C444230-0988-49BD-BCFE-439A33FD9912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681B2B76-9AFC-45B2-960F-F8309A01444C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256B2BD7-34EA-42A7-A3F3-6F0F49FAD921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD9FE2A5-70D8-41A7-B201-541761EF8914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D43770F-B354-4F6F-BADB-246E3D1C2777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02247FB6-3D9D-47E6-A6A0-3F772421193A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0162.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forum.hivemail.com/showthread.php?p=26745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00098-02102006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forum.hivemail.com/showthread.php?p=26745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00098-02102006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the contactgroupid parameter in addressbook.update.php, (2) the messageid parameter in addressbook.add.php, (3) the folderid parameter in folders.update.php, and possibly certain parameters in (4) calendar.event.php, (5) index.php, (6) pop.download.php, (7) read.bounce.php, (8) rules.block.php, (9) language.php, and (10) certain other scripts; and allow remote authenticated users to execute arbitrary SQL commands via (11) the folderid parameter in index.php and (12) possibly other parameters in certain other scripts, because $_SERVER['PHP_SELF'] is improperly handled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD125F9D-1E13-419C-900B-6BF71A5E98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDA700A-A6AA-49EB-B847-E995A341FFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A19437-0D2F-4C1F-B37E-6B0BC98993D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B310602-7C6C-4C36-AE99-605F3932AB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.1_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C444230-0988-49BD-BCFE-439A33FD9912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681B2B76-9AFC-45B2-960F-F8309A01444C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256B2BD7-34EA-42A7-A3F3-6F0F49FAD921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD9FE2A5-70D8-41A7-B201-541761EF8914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D43770F-B354-4F6F-BADB-246E3D1C2777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02247FB6-3D9D-47E6-A6A0-3F772421193A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0162.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forum.hivemail.com/showthread.php?p=26745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00098-02102006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0162.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forum.hivemail.com/showthread.php?p=26745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00098-02102006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain sensitive information via file extensions with unexpected capitalization, as demonstrated by a request for index.PHP when the configuration invokes the PHP interpreter only for \".php\" names."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DE19FF-DAA2-4FFC-9392-6CE1B0B5DF5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57FABC2C-E678-45E8-9FB3-3026D55D26F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0332C2-9720-4329-A379-5B7048034B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2549EBF-E4B6-4574-BCD8-9DB5F195C9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29F5471-E2A9-421D-A1B5-F0B1444CA9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44FDF24-03A1-43F3-9D9E-F744F0A1AC3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B990A8-B28C-4A4C-89AB-50C754EF6491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C0A9A3-E628-4AA8-8676-81A8528CC174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119BEB6-5CBC-4279-9BDE-53ADF1A55F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211959AC-B76B-4E87-8A08-7789B47F823E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10DF110-D68E-448F-8BEE-39E0B569596D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B7EDE-CA57-4FB2-8306-924FC8BD9C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A2745B-661B-489A-9140-FD63F668161A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "769931EC-F36A-4F72-A836-85B65CA815C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FE8C27-6822-4AA2-AB80-D29871C74DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB702A9-C175-477C-B4C7-30AF7DB26165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08784A81-A00C-4FBD-9A79-35D139FA3079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957A7575-FCAB-4C6B-93C8-C9065B412D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE481AA-EF32-47AD-846A-FEDE38637680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC56FD6-481A-4D60-BAF3-C988AA2395D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C691300-EA97-4F67-9C27-3C44FE22E283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D09EDA-6E8F-4535-98ED-D972940E2E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E384FD34-327C-40E7-9043-67BC69E6A52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B922D725-F31A-453B-B396-6C7FE0D4844B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB61C0DE-BAEB-4D65-91EA-D34BA0BEFC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C395148E-BF0E-4C27-B903-444238736B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C001488-5A41-45F8-A270-C184728C1614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA6EA41-CE55-4854-A5FA-4A49D1A648BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FE9EF8-936E-4351-B512-02B181C4DF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16152422-AE34-4970-95B5-440CE8821A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D34AB8-5DDD-421F-9C9D-65B6B10EDC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53143B04-BB2D-4C40-83B1-8BF8BC6547E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589775AF-21DF-4E41-BFE6-41E4FAAB0F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35D1709-6B2C-4F22-9948-F69F88F9156A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4949447-0590-4F76-A00E-1EB94FB7621F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF5B9E9-8BB5-42A6-AF87-5CEE31D2EDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518A4727-ECB7-41C4-8DF5-5375BA5281C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17207B51-0E7F-4AD2-8AC4-5A5CDC5CDEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FC99E1-57D4-4B12-BA26-090142B7CBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E0FB64-62A3-4875-AFF1-CF4D1E7BA0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "068AD0FA-306D-4C29-857C-21C6067287E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1125A525-36BA-43E1-A316-6BB33DCEC672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E488CF-A3F1-4C8B-A92A-8764FA1E6032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DEAF46-95C2-4187-AF5A-FB8CB2E6FD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0ECA9-5A9F-47CA-B8CA-28C7324EC722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F8F89B-5A10-4EE3-A035-1CEA44B1691A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89FCD49-0C73-4E73-9D99-38700B622A06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lighttpd.net/news/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18869",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.lighttpd.net/news/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lighttpd.net/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.lighttpd.net/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow user-assisted remote attackers to execute arbitrary code on the server via a crafted Microsoft Word document that is opened on a wireless device."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89945C2-883A-4388-8EEB-52C774397A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:2.2_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448BA87-13CB-461E-B5FB-7A25617E2727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:2.2_sp2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B49A5797-A1D8-4EBE-B245-7C5D8DE202CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:2.2_sp3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E87805B-85B0-4004-BE3C-BD6A606603DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:2.2_sp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E80C5A-50B5-4AB8-B3C5-9EDC1CE6D691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:2.2_sp4_hotfix2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F8FB3C-3C4D-445C-9698-F909857CE060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:3.6:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "B1FCB859-6D34-4D25-81A4-C7A190796353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:3.6.1:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "6D72EF02-AC31-49CA-B941-9A3EE3681DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:3.6_sp1a:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "2D6C3AC1-728C-4C41-A51E-845FC97C9304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:3.6_sp4_hotfix2:*:exchange:*:*:*:*:*",
            "matchCriteriaId" : "41C4E2AB-E445-4AEE-8A80-DEDBF58969A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "0F464E52-6DF6-4F88-BA5A-1D04C945E892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:novell_groupwise:*:*:*:*:*",
            "matchCriteriaId" : "D4B64528-A373-4BA4-8C00-1E1FC41D8FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp1:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "7DE7336D-D9F6-45EC-9C11-6E999A15AC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp1:*:novell_groupwise:*:*:*:*:*",
            "matchCriteriaId" : "2C1BE106-EB0E-473D-8700-D4B4837B6D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp2:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "80FA8083-7E9B-45B6-A77E-8B84F5E99A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp2:*:novell_groupwise:*:*:*:*:*",
            "matchCriteriaId" : "082140AD-602C-4E0F-8F9A-DD8CC5AEE7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp3:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "31BD0BCD-D3FF-4C36-86C9-13715AD6789A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp3:*:novell_groupwise:*:*:*:*:*",
            "matchCriteriaId" : "1465EC3C-2CC0-46B1-A05F-C579E6C656FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/8149/8052/Support_-_Corrupt_Word_file_may_cause_buffer_overflow_in_the_BlackBerry_Attachment_Service.html?nodeid=1181753&vernum=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424728/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/8149/8052/Support_-_Corrupt_Word_file_may_cause_buffer_overflow_in_the_BlackBerry_Attachment_Service.html?nodeid=1181753&vernum=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424728/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving the password file (FGuard.FGP), which disables the password requirement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winability:folder_guard:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539EBB6D-0F5D-4CD1-8C44-A215A3527707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/424855/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424905/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424855/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424905/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in dowebmailforward.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via a URL encoded value in the fwd parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA10E29-1DDD-44D8-A7D9-74BE0315CE4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0129.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22971",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:anomaly_guard_module:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4C301D-823C-4FDF-A7A0-9D79795434B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:anomaly_guard_module:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCF99E5-AF88-48AD-8FFB-661E6A739E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:guard:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A04EE20-46BB-41AA-A7B1-005B236F3E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:guard:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "730FF7D5-AFD4-4CF8-A8B3-8679D8A3A0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:traffic_anomaly_detector_module:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "216B68DF-9614-42F2-A84D-1617AA9AD097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:traffic_anomaly_detector_module:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC7DA209-1807-4F7C-8BAD-5A4297D5F116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GUI display truncation vulnerability in ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a specific length, which truncates the malicious extension from the display and could trick a user into executing arbitrary programs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E4B06D-8C2B-499A-A3B4-B1B9660AC4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA30DD6-C47C-495A-9BFE-B9989168090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq_lite:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22FA473-8D68-4268-97F6-CD49E59DAE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq_lite:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFE12AA-2597-4D65-9530-A080857F96BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/425078/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly containing other modified properties such as company name, icon, and description, which could trick a user into executing arbitrary programs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E4B06D-8C2B-499A-A3B4-B1B9660AC4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA30DD6-C47C-495A-9BFE-B9989168090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq_lite:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22FA473-8D68-4268-97F6-CD49E59DAE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq_lite:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFE12AA-2597-4D65-9530-A080857F96BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/425078/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0042",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-18T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en las funciones (1) apreq_parse_headers y (2) apreq_parse_urlencoded en Apache2::Request (Libapreq2) en versiones anteriores a 2.07 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de vectores de ataque desconocidos que resultan en complejidad computacional cuadrática."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:libapreq2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.07",
            "matchCriteriaId" : "B8ED3FD2-5F7E-4E5A-B730-3B4EBD4F72E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18846",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19139",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19658",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/737",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewcvs.cgi/httpd/apreq/tags/v2_07/CHANGES?rev=376998&view=markup",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-08.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16710",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0645",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/18846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewcvs.cgi/httpd/apreq/tags/v2_07/CHANGES?rev=376998&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "182BE2C1-8BEE-4FE8-AC66-E0F7F0F5019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B424E2DD-692D-4F55-A545-14E4DDA07C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4145B829-6BC5-47C6-BB4B-53FBD326E9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9417D4E5-F7F1-43B5-B684-58BB850B1F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95FD2FBC-062C-40A4-8778-BC69E0B6B3A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D350D018-07DF-41BD-8358-B7FEE42D04D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C91DB31-0D2B-4CEC-BFB6-D1F0DEE1D62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D94994-FDE9-47FF-A247-0AF138828C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD73F47-CCA9-4E21-B631-CFB532D7816A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E64BEE1-0F96-41A2-8AD7-4889EFABF098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F89A6C-FA37-4BCA-B67D-C0CADC7470DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D89D7-966C-4709-BE5C-21C0CEC31D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1203AABC-E9C8-4830-9DB3-9F20775301C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10EF80AD-72D1-4C79-979D-D0B4E68D299A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA43E34-4D31-4363-B1C5-6360FA11DDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C9891A-265B-430B-9052-8F1E1F4234EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D138B9-3C9C-49C8-8B5A-607C031F7CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A33C0DC-D0C7-49DB-90B7-CC20C607196F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B95C44A-ED6F-4095-80BB-25D6B504E23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.6_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD384A56-FF4C-4069-8513-9E9A0FEFFDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2CD755-9727-4762-ADE2-74B67DEFB52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F2599F-0AEA-491F-81CF-946A6256066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.8_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B34C43D-4920-4957-AD52-3B9C29EE9541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED27E48-05F5-44F3-BD09-60454F7DD616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C349294-8B79-4795-BE79-F35AAEE6C6BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2B6924-490A-48B2-94BD-7F0607D64592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29FE762-87E2-4A8A-A415-1E3E9607E769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F174DE2D-98FA-4458-8181-D715732AA4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_neulinger:cgiwrap:3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3D4340-7143-49A3-8569-575A155252C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18797",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=8209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=393274&group_id=8209",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=8209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=393274&group_id=8209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send requests."
      }, {
        "lang" : "es",
        "value" : "Kadu 0.4.3 permite a atacantes remotos provocar una denegación del servicio (caída de aplicación) a través de un gran número de solicitudes de envío de imágenes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kadu:kadu:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD646F49-A595-4536-8E05-E473BEB8E99A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114000770431441&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18824",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.piotrbania.com/all/adv/kadu-fun.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425134/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114000770431441&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.piotrbania.com/all/adv/kadu-fun.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425134/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18891",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102186-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-126.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102186-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-126.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inject arbitrary web script or HTML via a URL that is not sanitized before being returned as a link in \"advanced details\".  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18866",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-18T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly handled when the server kicks the player and records the reason."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:even_balance:punkbuster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.180",
            "matchCriteriaId" : "DECECC73-92F6-46C2-B2F3-E001A7E75581"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/sof2pbfs-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0372.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18917",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/sof2pbfs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0372.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to execute arbitrary SQL commands via unspecified vectors in the extended receiving box function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:*:*:linux:*:*:*:*:*",
            "versionEndIncluding" : "03_00_b",
            "matchCriteriaId" : "F6C67B7F-9F57-435D-B683-0374EE79D2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "03_00_b",
            "matchCriteriaId" : "48573C0B-34B2-4B24-8E83-7C59BC211EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:02_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85014A59-7FC0-459F-BDE1-46D0C0C1EBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:03_00:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A421DB1E-17E3-4C9C-8043-81074A305F6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18817",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-002_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-002_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/23877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the extended receiving box function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:*:*:linux:*:*:*:*:*",
            "versionEndIncluding" : "03_00_b",
            "matchCriteriaId" : "F6C67B7F-9F57-435D-B683-0374EE79D2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "03_00_b",
            "matchCriteriaId" : "48573C0B-34B2-4B24-8E83-7C59BC211EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:02_03:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85014A59-7FC0-459F-BDE1-46D0C0C1EBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:business_logic:03_00:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A421DB1E-17E3-4C9C-8043-81074A305F6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18817",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-002_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-002_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lawrence_osiris:db_esession:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "9C4C6C85-74BF-40E5-9591-B0A8C2B07FC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18805",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00099-02112006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424819/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433132/30/5160/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16598",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00099-02112006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424819/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433132/30/5160/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable.  NOTE: a vector regarding the $date parameter and data.php (date.php) was originally reported, but this appears to be in error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ridder_roeland:birthsys:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7D8252-E457-4113-9BC7-772816A5960B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000549.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/74/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-February/000549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/74/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teca_scripts:guestex:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F78B194-B1A5-49F1-8D2A-D4BA34FCCAC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/77/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426034/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/77/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426034/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to execute arbitrary shell commands via the email parameter, possibly involving shell metacharacters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teca_scripts:guestex:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F78B194-B1A5-49F1-8D2A-D4BA34FCCAC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/76/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425970/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/76/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425970/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) $u2u_select array parameter to u2u.inc.php and (2) $val variable (fidpw0 cookie value) in today.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3",
            "matchCriteriaId" : "9E1D3271-7AF8-4993-95A1-AA4A0323E31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18821",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00100-02122006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425084/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xmbforum.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00100-02122006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425084/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xmbforum.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:32:23.683"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_forum:xmb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3",
            "matchCriteriaId" : "9E1D3271-7AF8-4993-95A1-AA4A0323E31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.gulftech.org/?node=research&article_id=00100-02122006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425084/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xmbforum.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00100-02122006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425084/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xmbforum.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "This CVE is considered invalid because it duplicates CVE-2005-3544, \"XMB versions 1.9.8 and later were checked and are not vulnerable.\"  Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:31:53.987"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in weblog.pl in PerlBlog 1.09b and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A7C823-EC74-44F3-9BC6-68F105A52D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF34B62B-C752-4167-AEBD-C28C9CC2FFC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.09b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14572A2A-3D9D-438A-B331-FA95B10269BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/81/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426260/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/81/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426260/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to read certain files via the month parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A7C823-EC74-44F3-9BC6-68F105A52D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF34B62B-C752-4167-AEBD-C28C9CC2FFC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.09b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14572A2A-3D9D-438A-B331-FA95B10269BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/81/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426260/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/81/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426260/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of (1) the reply parameter, possibly involving injection of (2) the name parameter and (3) the body parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A7C823-EC74-44F3-9BC6-68F105A52D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF34B62B-C752-4167-AEBD-C28C9CC2FFC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlblog:perlblog:1.09b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14572A2A-3D9D-438A-B331-FA95B10269BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/81/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426260/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/81/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426260/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote attackers to inject arbitrary web script or HTML via the comment_text parameter to the user comment page (/edit/Comment)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D461A646-9474-4007-A4F0-4F85FCE3714D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D6E3FB-3AED-4CC5-B41C-BC101D5D87BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteframe:siteframe_beaumont:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C445D1-E912-440E-8C59-8A6A2C0885AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425180/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425180/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service crash) via a request composed of \"GET\" followed by a space and two newlines, possibly triggering the crash due to missing arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dwl-g700ap:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE14A67A-5A82-4CA3-93BB-EA44B888FEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dwl-g700ap:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B8C5E6-39C8-418E-9FCD-638FC9458A37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425169/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425169/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to include and execute arbitrary local files via a direct request with a path parameter with a null character and beginning with (1) '/' (slash) for an absolute pathname or (2) a drive letter (such as \"C:\"), which bypasses checks for \"..\" sequences and trailing \".php\" extensions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "6770D817-F1BA-4286-A9CB-3F855CE6E5EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phpkit_161r2_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425196/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpkit_161r2_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425196/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, allows remote attackers to conduct PHP remote file include attacks via a path parameter that specifies a (1) UNC share or (2) ftps URL, which bypasses the check for \"http://\", \"ftp://\", and \"https://\" URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "6770D817-F1BA-4286-A9CB-3F855CE6E5EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phpkit_161r2_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425196/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpkit_161r2_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425196/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wimpy_trackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary strings into trackme.txt via the (1) trackFile, (2) trackArtist, and (3) trackTitle parameters, which can result in providing false information about songs, occupying excessive disk space with very long parameter values, and storing executable code that might be invoked through a different vulnerability.  NOTE: since this issue, as described by the original researcher, is entirely dependent on the presence of another vulnerability, it could be argued that Wimpy cannot be responsible for how its data file is processed by applications outside of its control. Since this issue might only be useful as a facilitator manipulation in another vulnerability, perhaps it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plaino:wimpy_mp3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "9C13E98E-4710-4496-9D47-BEFC2F30533E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18900",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16696",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-WimpyMP3Player.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-WimpyMP3Player.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration settings via strings that begin with \"!R!SIOP0\", as demonstrated using (1) a connection to to TCP port 9100 or (2) the UNIX lp command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:kyocera:fs-3830n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9176FE0D-F86E-4362-9104-B00DFE866471"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evader.wordpress.com/2006/02/16/kyocera-printers/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evader.wordpress.com/2006/02/16/kyocera-printers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain unspecified Kyocera printers have a default \"admin\" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:kyocera:fs-3830n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9176FE0D-F86E-4362-9104-B00DFE866471"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evader.wordpress.com/2006/02/16/kyocera-printers/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evader.wordpress.com/2006/02/16/kyocera-printers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rockliffe MailSite 7.0 and earlier allows remote attackers to cause a denial of service by sending crafted LDAP packets to port 389/TCP, as demonstrated by the ProtoVer LDAP testsuite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDA707F-1198-4978-96A3-15FFC9D1BA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF2D112-6A3D-4931-9903-242CDE459926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3263670-BA81-4E45-8C22-7AE178D5BE65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:6.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210422D-4194-4BAC-B335-4D5757E871A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockliffe:mailsite:7.0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FFE8A7-3580-4AC7-8130-A10489D6FBF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002926.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18888",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002926.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dreamcost:hostadmin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74477779-6696-4100-B655-E46AE2486C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0340.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18901",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435993/30/4650/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/497093/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/497133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16682",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-HostAdmin.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435993/30/4650/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/497093/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/497133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-HostAdmin.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-webmail:v-webmail:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBE5CC-F0CF-47D2-9A36-88FCCE459A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-webmail:v-webmail:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83568CE6-D15C-4D1E-9CFC-B67FEED687B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18776",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-webmail:v-webmail:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBE5CC-F0CF-47D2-9A36-88FCCE459A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-webmail:v-webmail:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83568CE6-D15C-4D1E-9CFC-B67FEED687B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18776",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-webmail:v-webmail:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FBE5CC-F0CF-47D2-9A36-88FCCE459A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-webmail:v-webmail:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83568CE6-D15C-4D1E-9CFC-B67FEED687B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18776",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the (1) quiz_head, (2) quiz_foot, and (3) template variables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomastsoi:quirex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "834022D5-6A16-4AA7-8DA2-D81ECBF41BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomastsoi:quirex:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6C55B1-6ED9-4FF6-8C84-EDB082D9216B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/78/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18926",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426188/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0641",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/78/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426188/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML via the Subject field when sending private messages (privatemessages.php). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11BE426F-A466-4089-A74E-681FC14BECE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18873",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nokia N70 cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet whose length field is less than the actual length of the packet, possibly triggering a buffer overflow, as demonstrated using the Bluetooth Stack Smasher (BSS)."
      }, {
        "lang" : "es",
        "value" : "Teléfono movil Nokia N70 permite a atacantes remotos provocar una denegación de servicio (reinicio o apagado) a través de una conexión inalámbrica de Bluetooth a través de un paquete Logical Link Control and Adaptation Protocol (L2CAP) malformado cuya longitud de campo es menor que la longitud actual del paquete, desencadenando posiblemente un desbordamiento de búfer, como es demostrado mediante el uso del Bluetooth Stack Smasher (BSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nokia:n70:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95023B0-72F4-455E-B445-1CA9BDD63B0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0316.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.secuobs.com/news/15022006-nokia_n70.shtml#english",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16666",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.secuobs.com/news/15022006-nokia_n70.shtml#english",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated users to read e-mails of other users or create, modify, or delete directories via a .. (dot dot) in the argument to the (1) CREATE, (2) SELECT, (3) DELETE, or (4) RENAME commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macallan:mail_solution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.03.025",
            "matchCriteriaId" : "E83FB8D2-9EA6-494B-BAB5-66D31C4D6B42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://macallan.club.fr/MMS/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18775",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-4/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16704",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://macallan.club.fr/MMS/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-4/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page with an anchor element with a legitimate \"href\" attribute, a form whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL.  NOTE: this issue is very similar to CVE-2004-1104, although the manipulations are slightly different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425298/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425386/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425883/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425298/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425386/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425883/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/17938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing \"<\" character, which is interpreted as a \">\" character by some web browsers but bypasses the blacklist protection in (1) the pnVarCleanFromInput function in pnAPI.php, (2) the pnSecureInput function in pnAntiCracker.php, and (3) the htmltext parameter in an edituser operation to user.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F30D2AF-1E7F-4426-8D34-84C86408CFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB291E9E-3002-4A68-A3E8-B3A6FF4D4E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8738C97F-A6A7-4EC6-84A6-D38A7D2E4E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD378628-2AA0-4244-A4D7-8591BEB7A926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED90D204-84B5-4EA4-B21D-A6CE37E45CFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14AA995-3B50-4B91-9634-0D63B0BD35EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170103EA-D233-41B4-AD68-4572F1E80083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "051796A2-A488-4B15-90F8-DEB1E4CC50DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2C79DB-7655-46A9-965D-5E3246E84B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7C7203-45C9-4FE4-BFB8-BF2FC3052B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.75_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078F46F4-9F7D-4BDC-B915-11D8F11ADFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.76_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE44C155-EDF6-4F4C-81A5-201BD561843F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.76_rc4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BE1A1F-0A0C-4965-9AC2-6E547B0EE582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.76_rc4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A09B4-83C0-47DE-A199-F2A490527263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC564FD-9700-4979-93C0-BA93E57FEF03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.721:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60750FE6-4A12-4F30-85C3-D259428537CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.726.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF825CA0-8E1C-41D0-B42B-11D03B52844E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.761:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55DA346-A7A0-466F-90D7-CC1E7C2E9EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.761a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EB4E7B-29AF-479F-AF9C-3AE84FBDB603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/index.php?name=News&file=article&sid=2754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18937",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16752",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0673",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/index.php?name=News&file=article&sid=2754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, allows remote attackers to execute arbitrary SQL commands via the language parameter to admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.761",
            "matchCriteriaId" : "D76FC3B0-C5DF-4BDE-9219-F548A6A597F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/index.php?name=News&file=article&sid=2754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18937",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/index.php?name=News&file=article&sid=2754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is enabled, allows remote attackers to inject arbitrary web script or HTML via the language parameter in a missing or translation operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.761",
            "matchCriteriaId" : "D76FC3B0-C5DF-4BDE-9219-F548A6A597F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.postnuke.com/index.php?name=News&file=article&sid=2754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.postnuke.com/index.php?name=News&file=article&sid=2754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.0_pl0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6FA467-6A46-4513-9405-E778D46E3BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B532821E-A6CF-4932-85E9-1F8E0BF7E696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2693D0-3F64-4BC0-9D56-0C99B1B1EC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE0B836-3F96-48AB-94CB-4241FA21576B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.0_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F92DC4-7ACF-496B-BD2E-6679281219E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.0_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C077CED8-6D1E-4ECA-B8E3-7634078DE1C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27015BC4-E203-4603-80E1-4BA4C925A7F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BB936C-C6A1-40A6-8F8D-1DC9A100E28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E8C9CF-7F85-410E-AB45-8F3EDE68A005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B0F1CB0-423D-4149-9C5E-4A8B5F5375E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49ADD7ED-1178-451F-B7DF-EE2D213ADE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87618A74-D344-4FF4-9C75-9B24A647F1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CF6A3C-4312-49DD-A9F1-F5B55A18D87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5D36C5-1113-48A4-A776-8F8FAC5B72A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F64DB7-C275-4D33-AC2A-3FE215896481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.1_pl9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770A3C2E-5EFC-4E23-8C36-69B653CC8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.2_pl0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E059394C-1DA7-4BF8-B63A-87FBA2153433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C33A8E-505C-4FA5-86CB-A8938E1C94F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.2_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BD5994-E360-4F5E-933E-6FC0617884F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48120E15-6AC0-4DF0-B49D-86136AB120CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D345E12-853B-4856-861E-9CD6F9345769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7FC2D9-DFDB-4125-AF83-A0A1F9B432F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F409406-2074-40B9-AD79-719B1B83B921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097F27AC-AEE1-4F17-B47B-B09721214DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B00E77-9D85-42F5-BF7B-4A0567ED8892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECAA463-5591-417E-ABB1-4B3590921C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149583BE-A335-481B-9D9E-2C86A1AE8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1397B7B8-5D68-487C-B39E-081E622BFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BF2B08-3BC8-4A11-9BC5-CE3229D111A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "003A60D6-B60E-47F9-A968-996EF4B50D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tin:tin:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8E7324-DF17-49A0-B766-4260AAB9F365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-18.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.005-tin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.005-tin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23264211-2992-4222-9B96-5ABEE1332C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C32-E24D-4B62-88CE-2D23F457573B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90A3E1F-0371-45C0-A165-55D94A62C3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A5D98-6C48-461F-8B96-BD32A96CDCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F4E55E-4424-4EC8-8013-9A0FFE7D3658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B13CCAA-839F-406D-A7F3-975B4780425A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D375197-0087-479C-991B-964FB83644F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F6320E-314D-4A8F-BC9A-29F730035C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16D17-B704-4ADA-8F91-B7D96FB52909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5037564-574E-4321-9CD1-4230FB331503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE2D63C-75BC-4936-88BE-9F22D193EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1BC17-2A99-495A-B462-D02B66F00D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820C37B-1503-4494-8123-ECAF28386231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425394/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-45.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425394/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.waraxe.us/advisory-45.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F76566C-7F49-4725-91E6-8E2416CB7F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F0F5B5-86D2-48C4-872E-3F8C38AF563C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1503DB-7F84-4F33-8357-7D877529F15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:4.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5EC8B5-661B-45E1-B3C0-66CB7F493608"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phpesp.cvs.sourceforge.net/phpesp/phpESP/admin/include/lib/adodb/adodb-pager.inc.php?r1=1.1&r2=1.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18928",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19555",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19590",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19591",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19691",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=419843&group_id=8956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00101-02182006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425393/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0664",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2021",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://phpesp.cvs.sourceforge.net/phpesp/phpESP/admin/include/lib/adodb/adodb-pager.inc.php?r1=1.1&r2=1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=419843&group_id=8956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00101-02182006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425393/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar (.njx) documents."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:njstar:chinese_word_processor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.01.41108",
            "matchCriteriaId" : "6038BF40-19BA-4593-BCE0-18593ADF7D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:njstar:japanese_word_processor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.01.41108",
            "matchCriteriaId" : "12A4C918-6DBE-49E8-A594-6064288DF382"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18702",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-5/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.njstar.com/njstar/chinese/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.njstar.com/njstar/japanese/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425498/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0670",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-5/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.njstar.com/njstar/chinese/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.njstar.com/njstar/japanese/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425498/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MUTE 0.4 allows remote attackers to cause a denial of service (messages not forwarded) and obtain sensitive information about a target by filling a client's mWebCache cache with malicious \"zombie\" nodes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mute:mute:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08C49AE-5C17-4028-96C7-8F89BCD5AB3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/mute-net/MUTE/doc/notes/notes.txt?view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/mute-net/MUTE/doc/notes/notes.txt?view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skate_board:skate_board:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCF7C6F-4AEB-435A-845B-BFF7E90248E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/84/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426658/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/84/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426658/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skate_board:skate_board:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCF7C6F-4AEB-435A-845B-BFF7E90248E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/84/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426658/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/84/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426658/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skate_board:skate_board:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCF7C6F-4AEB-435A-845B-BFF7E90248E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/84/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426658/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/84/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426658/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bxcp:bxcp:0.299:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C092315F-E288-45A0-8273-C0D74D427163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in EmuLinker Kaillera Server before 0.99.17 allows remote attackers to cause a denial of service (probably resource consumption) via a crafted packet that causes a \"ghost game\" to be left on the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emulinker_kaillera_server:emulinker_kaillera_server:0.97.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0127EF0F-8A0D-45D7-8807-838ED4833D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emulinker_kaillera_server:emulinker_kaillera_server:0.98.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7C92E5-C7AC-48F5-B137-CF5023C188B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emulinker_kaillera_server:emulinker_kaillera_server:0.98.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A96FBC-09B6-4883-B092-E714F14FA71D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18938",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=394690&group_id=127754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=394690&group_id=127754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid variable to users.php or (2) sessid variable to lib-sessions.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF72E47-143C-47F4-B54E-7A01951C3957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18920",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00102-02192006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425506/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00102-02192006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425506/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via (1) absolute paths in unspecified parameters and (2) the language cookie, as demonstrated for code execution using error.log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF72E47-143C-47F4-B54E-7A01951C3957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18920",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00102-02192006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425506/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00102-02192006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425506/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allow remote attackers to bypass authentication or gain \"unauthorized network access\" via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E761E4-0B6C-4C2A-BFCA-4CFC5620E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "74245D08-446A-4988-BCFD-85509C4CE340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12790FD1-DECA-4074-9458-3F88823190EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "88E2F705-B185-4211-B0CC-1E295E5B4471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7FE90B-21E6-4628-AD70-37BB9644CBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "573640FF-609D-4441-B7DD-3477F239A00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8204B5C0-0B87-48BD-9678-5101B048C135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "3A2128EF-5847-4097-84BC-5CAC270F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE44F85-3F9A-45FC-A411-1D1B4C2E33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D8FD8F59-E229-4138-9B85-7E15A80CF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92119B14-94C5-4D3D-811E-EB7336E39F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2DC671C6-7444-4E3D-ACAB-8905A0DB40CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to cause a denial of service via a crafted Postscript request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E761E4-0B6C-4C2A-BFCA-4CFC5620E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "74245D08-446A-4988-BCFD-85509C4CE340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12790FD1-DECA-4074-9458-3F88823190EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "88E2F705-B185-4211-B0CC-1E295E5B4471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7FE90B-21E6-4628-AD70-37BB9644CBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "573640FF-609D-4441-B7DD-3477F239A00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8204B5C0-0B87-48BD-9678-5101B048C135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "3A2128EF-5847-4097-84BC-5CAC270F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE44F85-3F9A-45FC-A411-1D1B4C2E33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D8FD8F59-E229-4138-9B85-7E15A80CF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92119B14-94C5-4D3D-811E-EB7336E39F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2DC671C6-7444-4E3D-ACAB-8905A0DB40CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E761E4-0B6C-4C2A-BFCA-4CFC5620E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "74245D08-446A-4988-BCFD-85509C4CE340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12790FD1-DECA-4074-9458-3F88823190EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "88E2F705-B185-4211-B0CC-1E295E5B4471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7FE90B-21E6-4628-AD70-37BB9644CBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "573640FF-609D-4441-B7DD-3477F239A00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8204B5C0-0B87-48BD-9678-5101B048C135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "3A2128EF-5847-4097-84BC-5CAC270F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE44F85-3F9A-45FC-A411-1D1B4C2E33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D8FD8F59-E229-4138-9B85-7E15A80CF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92119B14-94C5-4D3D-811E-EB7336E39F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2DC671C6-7444-4E3D-ACAB-8905A0DB40CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to \"reduce effectiveness of security features\" via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E761E4-0B6C-4C2A-BFCA-4CFC5620E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "74245D08-446A-4988-BCFD-85509C4CE340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12790FD1-DECA-4074-9458-3F88823190EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "88E2F705-B185-4211-B0CC-1E295E5B4471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7FE90B-21E6-4628-AD70-37BB9644CBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "573640FF-609D-4441-B7DD-3477F239A00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8204B5C0-0B87-48BD-9678-5101B048C135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "3A2128EF-5847-4097-84BC-5CAC270F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE44F85-3F9A-45FC-A411-1D1B4C2E33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D8FD8F59-E229-4138-9B85-7E15A80CF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92119B14-94C5-4D3D-811E-EB7336E39F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2DC671C6-7444-4E3D-ACAB-8905A0DB40CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is viewed by the administrator using \"Click Log\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-blah:platinum:9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15E0F18-C2B4-4594-BCCA-E782662886B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/83/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eblah.com/forum/m-1140116897/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426582/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/83/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eblah.com/forum/m-1140116897/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426582/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetting the \"location\" variable within the loop."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/425283/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425378/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425283/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425378/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in index.php in Tasarim Rehberi allows remote attackers to execute arbitrary PHP code via a URL in the (1) sayfaadi or (2) sayfa parameter.  NOTE: this might be a site-specific issue.  If so, it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tasarim_rehberi:tasarim_rehberi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064A19E9-89C2-4290-B149-3C9E8B685AF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/425389/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425389/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpc.easy:wpc.easy:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C7BD37-ECB5-4F7A-91F4-0D2149F434D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18945",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425395/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425395/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) Add URL and (2) Suggest Category module.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boonex:barracuda_directory:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39FAC98-CB7E-43A1-9724-C38CCBB86020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18965",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts.  NOTE: it is possible that this password was configured by a reseller, not the original vendor; if so, then this is not a vulnerability in the product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:uniden:uip1868p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BD1441-39C5-4A47-AD13-69BD7C75E28F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/425362/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425362/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service (inaccessible database) via the tabls parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitridat:web_calendar_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5627C5-4629-4541-9575-3167C118C689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0340.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-WebCalendarPro.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-WebCalendarPro.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user into importing an LDIF file with a long field into the address book, as demonstrated by a long homePhone field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0399.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425602/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16716",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0399.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425602/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1) /etc/neusecure.conf, (2) /opt/NeuSecure/etc/cms-3.0.236.buildconf, and (3) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to read sensitive information such as passwords.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:micromuse:netcool_neusecure:3.0.236:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FA01C3-C31D-4E44-A6BF-B6FE5C6B1C1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0364.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18922",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425304/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425304/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (3) RPT_DBPASS fields in /etc/neusecure.conf, and in (4) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to gain privileges.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:micromuse:netcool_neusecure:3.0.236:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FA01C3-C31D-4E44-A6BF-B6FE5C6B1C1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0364.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18922",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425304/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425304/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660AF80B-1512-4CD0-89B2-93658C0A12B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425290/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425290/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie.  NOTE: this issue might be the same as vector 2 in CVE-2005-4519."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0_rc4",
            "matchCriteriaId" : "F6949CF6-A082-4D46-A5A2-E11C138F1085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E88349-E374-4AE9-9C4E-9599C1448D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21FF02F-982C-429F-A14D-D6E18058DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9407F704-FF3C-4976-BE4C-A1DDC16715D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FB3D29-644D-4E5F-875D-C87CCE3EF95C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5173B32-1099-47C9-996B-56DB29456BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9B4611-C002-40F5-978C-BB90F1A893C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B419B788-ADDD-4C0A-8E02-CBB58FD21938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B347D6C8-4607-481D-863E-7F41E9868041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E387645-BC7A-4EA5-AE9E-A3C66994391B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F434D16-4F09-4BCF-BD3E-9114876C2575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80575A3-87E7-40BC-9BCB-E12BB7938A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD480B-7CFB-4FD3-8E47-028F32AEF902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04989B5F-30B2-43A0-A061-BF43EEA8756C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7C781D-F5D1-4C63-B6E3-230DEC80104E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0755FA0-2365-42B4-8E42-214D5BAD71A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35248DDA-D37D-4D72-9FF8-6813BA4C87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67C54F4-4155-43DA-8E07-579249759989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C376D216-914A-4D96-8603-C6861B3E2857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A07B4C-CE12-4381-BFE4-CE79411F5069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065C222C-638F-4303-BE6A-7FED59E21FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB502B29-FBC5-4984-A735-AA0B6DF4A58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F759138-7079-471F-B30D-ED62351CFCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAFD163-7FE7-48FB-8860-7B00B0FFA628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C074DBE-AFC9-4094-A170-A31D79C139D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53520AA0-E5AB-450A-9D95-E075B552D2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC255D-6B0F-412D-B639-B9F9656E4839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70450FAB-7886-418E-B471-8F16A68F9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29FF305-E773-497E-9C47-7D87383F1440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E42F3A0-5FDB-4053-9EA5-D19B7061CDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202C65A-33FB-4742-8706-2BDD5B442030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E7658F-A543-46F5-B79D-E0E25B7C574F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92E018-C25C-468D-9EF5-5665F0B42EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://morph3us.org/advisories/20060214-mantis-100rc4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425046/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20060214-mantis-100rc4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425046/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) hide_status, (2) handler_id, (3) user_monitor, (4) reporter_id, (5) view_type, (6) show_severity, (7) show_category, (8) show_status, (9) show_resolution, (10) show_build, (11) show_profile, (12) show_priority, (13) highlight_changed, (14) relationship_type, and (15) relationship_bug parameters in (a) view_all_set.php; the (16) sort parameter in (b) manage_user_page.php; the (17) view_type parameter in (c) view_filters_page.php; and the (18) title parameter in (d) proj_doc_delete.php.  NOTE: item 17 might be subsumed by CVE-2005-4522."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E88349-E374-4AE9-9C4E-9599C1448D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21FF02F-982C-429F-A14D-D6E18058DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9407F704-FF3C-4976-BE4C-A1DDC16715D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FB3D29-644D-4E5F-875D-C87CCE3EF95C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5173B32-1099-47C9-996B-56DB29456BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9B4611-C002-40F5-978C-BB90F1A893C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B419B788-ADDD-4C0A-8E02-CBB58FD21938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B347D6C8-4607-481D-863E-7F41E9868041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E387645-BC7A-4EA5-AE9E-A3C66994391B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F434D16-4F09-4BCF-BD3E-9114876C2575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80575A3-87E7-40BC-9BCB-E12BB7938A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD480B-7CFB-4FD3-8E47-028F32AEF902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04989B5F-30B2-43A0-A061-BF43EEA8756C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7C781D-F5D1-4C63-B6E3-230DEC80104E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0755FA0-2365-42B4-8E42-214D5BAD71A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35248DDA-D37D-4D72-9FF8-6813BA4C87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67C54F4-4155-43DA-8E07-579249759989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C376D216-914A-4D96-8603-C6861B3E2857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A07B4C-CE12-4381-BFE4-CE79411F5069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065C222C-638F-4303-BE6A-7FED59E21FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB502B29-FBC5-4984-A735-AA0B6DF4A58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F759138-7079-471F-B30D-ED62351CFCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAFD163-7FE7-48FB-8860-7B00B0FFA628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C074DBE-AFC9-4094-A170-A31D79C139D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53520AA0-E5AB-450A-9D95-E075B552D2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D77F95A-0059-4442-8D9D-AA7F101FBBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC255D-6B0F-412D-B639-B9F9656E4839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70450FAB-7886-418E-B471-8F16A68F9658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4CFE80-223F-45DA-A9FB-03474F61E027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29FF305-E773-497E-9C47-7D87383F1440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8724300D-CBDC-4C66-BF78-038F838C06DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7283A58-EE8E-493F-8E51-C97FF87ECA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E42F3A0-5FDB-4053-9EA5-D19B7061CDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101BF6DC-0F73-41E0-A0EE-BA1EA7397423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC458D9-12B1-4CF1-980E-BC86E874BBA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2202C65A-33FB-4742-8706-2BDD5B442030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419E3AC-4215-4584-9538-AF790DC9BD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C48B8F-633E-4D69-A174-26C19829DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E7658F-A543-46F5-B79D-E0E25B7C574F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD259C18-7111-45C9-B6C3-6A5F29998146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA3B4B-D7E6-4555-969F-66217ACDACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770FDC6-792D-49B2-942B-282F9012D0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E7458-6655-4C86-85A9-81004FF38321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE92E018-C25C-468D-9EF5-5665F0B42EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://morph3us.org/advisories/20060214-mantis-100rc4.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/22487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425046/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20060214-mantis-100rc4.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425046/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by \"java&#09;script:.\"  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calacode:atmail_webmail_system:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE29D7C6-FB8B-4E96-905B-1E9DC632D6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18874",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation of this issue requires a victim user has @Mail configured to display images in email messages."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leif_m._wright:web_blog:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFD54BF-CAE9-46F1-A529-4EEF7EFD600E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/82/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/82/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leif_m._wright:web_blog:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFD54BF-CAE9-46F1-A529-4EEF7EFD600E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/82/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/82/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leif_m._wright:web_blog:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFD54BF-CAE9-46F1-A529-4EEF7EFD600E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/82/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/82/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers, which are stored in a log file and not sanitized when the administrator views the \"Log\" page, possibly using the ViewCommentsLog function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leif_m._wright:web_blog:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFD54BF-CAE9-46F1-A529-4EEF7EFD600E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/82/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/82/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via \"..\" sequences in unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28409A6C-72DA-468C-A535-7E59C8C62CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBE8436-8354-4810-97B2-440F5D192C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19050011-8907-490C-9C67-3A4D365D1D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A2FA87C-CBB3-4ED0-8A72-DED1F8A686C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAFA6AD-A5CF-4AD6-BC7D-E1B1A8B9B24F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88610438-53DD-4D0F-AFD5-3C685D599BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69960484-3621-4509-A1E4-6553A0EA7297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29012816-0F77-47C5-97C7-57A72EDC0DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.8_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EB5135-337B-46C1-8FFA-956AD749884B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6065AAA-70B9-476E-85C5-7A10155E1F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.9_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BE26B8-9A65-44FC-BAC5-3E6ABF5EF1C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.9_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1D4332-CEDA-4756-B64D-FB1967297D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFD628E-EB90-4425-AD9B-0A46AA79F403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345CE076-B521-4AF3-9C91-3F54039F8B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.10_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EAF2A53-E33E-4279-8D16-94A01464DE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:0.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A981B45-05C0-4EAA-9F9D-DBCE881EB16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62B872F-33D2-4078-AC18-DB9EB4AA755A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:2.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8141A3B-C944-485E-A473-02EABCAE7324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7D98C65-0DA2-4F50-B2F5-FCE05FC53F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:2.1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3430AC-973F-4740-AB10-E7C432E012A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:2.1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA0B7A3-33C8-4CB1-B440-88062BCE50A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherrypy:cherrypy:2.1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896DDF1D-EA44-452F-9A32-3EBFFBC2C42E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups.google.com/group/cherrypy-announce/browse_thread/thread/92b2972f774fe6df/2f63afc9433dc306#2f63afc9433dc306",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=384316&group_id=56099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cherrypy.org/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16760",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://groups.google.com/group/cherrypy-announce/browse_thread/thread/92b2972f774fe6df/2f63afc9433dc306#2f63afc9433dc306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/18944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=384316&group_id=56099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cherrypy.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-22T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Open 'safe' files after downloading\" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18963",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015652",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.frsirt.com/exploits/20060222.safari_safefiles_exec.pm.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.heise.de/english/newsticker/news/69862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/999708",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mathematik.uni-ulm.de/numerik/staff/lehn/macosx.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-053A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0671",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.frsirt.com/exploits/20060222.safari_safefiles_exec.pm.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.heise.de/english/newsticker/news/69862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/999708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mathematik.uni-ulm.de/numerik/staff/lehn/macosx.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-053A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to execute arbitrary SQL commands via the login_name parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F4FAAB-2952-4D38-AD51-58377B43E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C88CB8E-AAC7-4E1A-8F7C-07A5C60B4D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32DE1880-D8D2-48E0-A2DA-1CE86CBF6FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19A5EBF-8E54-4F82-AEE2-27CF9861D49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689D80B7-75D8-4F4D-9112-F373B8322644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A546959-2616-495B-BF0E-1A8EB8AAEDCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ilch.de/news-134.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ilch.de/news-134.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F4FAAB-2952-4D38-AD51-58377B43E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C88CB8E-AAC7-4E1A-8F7C-07A5C60B4D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32DE1880-D8D2-48E0-A2DA-1CE86CBF6FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19A5EBF-8E54-4F82-AEE2-27CF9861D49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689D80B7-75D8-4F4D-9112-F373B8322644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch.de:ilchclan:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A546959-2616-495B-BF0E-1A8EB8AAEDCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18951",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the X-Forwarded-For HTTP header field, which is inserted into content-data.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devscripts:admbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "89ED4F4D-C56C-475E-AA0E-7AA69FF17C4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long SEARCH argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truenorth_software:ia_emailserver:corporate_5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07CE6A6D-A115-48AB-8403-C023F7945A56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18986",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425586/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425586/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary files via a URL in the include_path variable, which is not initialized before being used."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensive_point:iuser_ecommerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A1CE994-CE1E-4588-B458-282C8CF922DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0339.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18903",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0699",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-iUser.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0339.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-iUser.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents YOU from detecting malicious scripts or code that do not pass the signature check when gpg 1.4.x is being used."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB0F1B-80B4-47F9-A54C-51DB7E77CA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.novell.com/linux/security/advisories/2006_09_gpg.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_13_gpg.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_09_gpg.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_13_gpg.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visnetic:visnetic_antivirus_plug-in_for_mail_server:4.6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A37B52CC-6E1B-45A5-9C99-8D200F1C13C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visnetic:visnetic_antivirus_plug-in_for_mail_server:4.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42406496-AE53-4BCE-B569-9A3B0143D971"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-65/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425890/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-65/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425890/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A6931-A3CD-44A7-B170-53B803F321AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A651DB07-0A59-41C5-8788-6A3594A5023C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.winamp.com/showthread.php?threadid=238648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0601.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16785",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.winamp.com/showthread.php?threadid=238648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0601.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahul_dhesi:zoo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10",
            "matchCriteriaId" : "79845C9F-7884-4F77-B492-4A944D3DCCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19148",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19166",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015866",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-991",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.guay-leroux.com/projects/zoo-advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425887/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0705",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1220",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.guay-leroux.com/projects/zoo-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_06_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425887/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the Username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptme:sme_gb_host:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C46DA-E61A-472C-8418-E2B9B013F215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/66/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425317/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/66/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425317/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:chatbox_plugin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27FDDC0B-E65A-45E8-92F0-353B6380A237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32695A82-B042-46B7-9CB4-20F3446E0C9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/425388/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425388/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a malicious \"program\" file in the C: folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starforce:safe_n_sec_personal_\\+_anti-spyware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "94255E8E-43EE-4C15-BC94-21C1250217A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secdev.zoller.lu/research/safnsec.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secdev.zoller.lu/research/safnsec.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a certain modified form, possibly related to the nummer parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_salzer:guestbox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3BF966-B853-41E7-911D-EA837ECF19AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18946",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425495/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425495/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags that follow a \"http://\" string, which bypasses a regular expression check, and (2) other unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_salzer:guestbox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3BF966-B853-41E7-911D-EA837ECF19AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18946",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425495/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16751",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425495/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_salzer:guestbox:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3BF966-B853-41E7-911D-EA837ECF19AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18946",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23376",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425495/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0675",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425495/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infovista:portalse:2.0_build_20087:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB315D8-288B-425F-BA07-8192A6BB693F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.irmplc.com/advisory017.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425779/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.irmplc.com/advisory017.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425779/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a nonexistent server in the server field, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infovista:portalse:2.0_build_20087:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB315D8-288B-425F-BA07-8192A6BB693F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.irmplc.com/advisory017.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425779/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.irmplc.com/advisory017.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425779/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hauri:virobot:2.0_2005-08-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2D2BED-5C6B-4402-809F-327585156920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18974",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425788/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425788/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many user accounts quickly."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C26FE-F2D3-4C1A-8D14-E4B818834703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFD4225-32F9-4D62-87C5-9632A1C03326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75787B-6156-4710-9B24-48C5763E7771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A9473E-DE15-4BE2-839D-90B55F8713EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.neosecurityteam.net/advisories/Advisory-15.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425630/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/advisories/Advisory-15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425630/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C26FE-F2D3-4C1A-8D14-E4B818834703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFD4225-32F9-4D62-87C5-9632A1C03326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75787B-6156-4710-9B24-48C5763E7771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A9473E-DE15-4BE2-839D-90B55F8713EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.neosecurityteam.net/advisories/Advisory-15.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425630/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/advisories/Advisory-15.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425630/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in certain versions of South River (aka SRT) WebDrive, possibly version 6.08 build 1131 and version 8, allows remote attackers to cause a denial of service (application crash and persistent erratic behavior) via a long string in the name entry field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:south_river:webdrive:6.08_build_1131:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CA3F02-7913-4A15-99DC-23036B995BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:south_river:webdrive:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD519706-64B6-4924-B583-00F7C1E00771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/425785/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425785/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to \"falsify authentication credentials,\" related to the \"underlying storage containers.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5241665D-61C1-4ECB-A449-43568150CB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4E772E-76B5-48E3-81EF-B5F3B2B60669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66E0B84-DE95-4306-9CA7-006D168C188B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C295FC3-469D-48FB-820D-7DAA75D3A9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF2A7C7-3FC8-4581-B4CB-D80BE1A6D6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.0rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A0E9AE-74F4-4CC8-B137-CECA8F11224F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF6E378-4388-43F7-AF85-47855A7F96F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.0rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2590C68-88A0-4921-BB36-129752145BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.0rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97ABEE68-A1A3-4CE3-A117-84275B445675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.0rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E535400-D140-4780-98CB-133142CD390E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.0rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D8566F-8165-4BE5-BA18-7D73FBED62B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.0rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C188D7B-377F-4B08-8351-306CD4FB2530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A8377B-CDD9-49C9-B263-FB7FE1228E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370F9F15-10D2-4C67-898E-F95222305599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.3.0rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D09F8C0-0A05-48CA-AF29-510E100B743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.3.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206298B4-ECFE-40F1-9095-4E9BB5865217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:xml_rpc:1.3.0rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAA1638-A8AC-4589-91F1-F990D3140CCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pear.php.net/package/Auth/download/1.2.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://pear.php.net/package/Auth/download/1.3.0r4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425796/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16758",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pear.php.net/package/Auth/download/1.2.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://pear.php.net/package/Auth/download/1.3.0r4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425796/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the \"remember me\" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90025C05-4860-4B1D-A088-5553D74132D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "004886D8-5C41-49B8-B57F-1D803F5E4804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99488D79-33D2-4D9A-B2CB-895C0885FA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0EA621-309A-47EB-958F-1F93D3B63494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E49CD8-A70E-4178-8C5F-60CE518BDFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85FFBC2-4D67-4E43-B802-A544C9E835DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04227710-F303-4263-9F6E-D21D8C3AAEB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "606EED04-2DB1-4D2E-9453-1C543562A732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4844A5F3-33FB-429C-BEF5-8F5A085F36C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D832073-75E3-40A8-85D5-B7D69F56D146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40DBA27-8162-4F08-A1C0-6F48BB033D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EC9B9C-0AA2-489C-B1B9-38BA9D869496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886AC8D6-54B0-4EDA-AB69-6AB41C48C9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4016F7D1-91D1-42CA-AC01-993CEEA6CC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC697B55-9936-4414-8140-B2F47501F30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75CE9E2-FEFF-40D4-9053-5B43409FF840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E329EEE-CC3C-48B2-BDB3-AD5A50105652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE639406-C5B5-483C-9C11-FEF7CDE4026B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA4DB66-8011-4BF5-A144-48A6E1C331A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2810AFF2-F93D-4CD0-A972-01020D0D1BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAECB770-C696-457F-8D7B-A40CD0E05675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DCC2D8-9DAB-4AF2-99B0-42477F87E0A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C464A0-6056-4070-A916-BFBE094A5882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FF77E5-25E7-45A8-B411-F256104AC735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2AB6F2-0AFE-47E2-B972-B801B18968A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33529D72-AA7C-44EC-8308-CEE4909328B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55561115-1834-4C15-BD8A-F51DF611886A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086EA9AD-0125-481C-BF39-5A08C720A92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_liveuser:0.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D13302-2098-4C69-81F4-A1B44BDEAE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pear.php.net/package/LiveUser/download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015659",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00103-02212006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pear.php.net/package/LiveUser/download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00103-02212006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-23T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: version 2.3 was later reported to be vulnerable as well."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-nuke:mini-nuke_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "6768531D-1610-4D1C-9FCF-B72B59DE3212"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425599/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428361/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431602/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431714/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16730",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17636",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425599/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428361/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431602/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431714/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right_frame parameter.  NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified as XSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6733B8C-5A9E-45CE-8938-F39A69EB0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6591E5-5F36-4663-85A6-9D870FD49FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D062B70A-E5FF-403B-8BD1-777D6462B7CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED3CC3-E0A8-4C20-9EF7-405CD32E9EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442BF5C9-DC58-4A94-A634-33D6A4F3C6DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0283.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-02-01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0283.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) \"/*\" and \"*/\" comments, or (2) a newline in a \"url\" specifier, which is processed by certain web browsers including Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6733B8C-5A9E-45CE-8938-F39A69EB0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6591E5-5F36-4663-85A6-9D870FD49FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D062B70A-E5FF-403B-8BD1-777D6462B7CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED3CC3-E0A8-4C20-9EF7-405CD32E9EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442BF5C9-DC58-4A94-A634-33D6A4F3C6DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0283.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-02-10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0283.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-02-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0300",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-24T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:tar:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87C1F89-63A8-4955-9C42-3B49EC1C1C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:tar:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4A8A88-D915-455C-A226-A8AD8A9E887E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:tar:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE339D0-D585-440D-8BD4-5183833258F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B4A20D-AAD0-4857-AC0F-D221EBB08BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:tar:1.15.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B46F22-B0FB-4F99-B44E-D34E0DD5D194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/18973",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18976",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18999",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19236",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24966",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/480",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/543",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015705",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-987",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/23371",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0232.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430299/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16764",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0010",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-109A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0684",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1470",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2518",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/257-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430299/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-109A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/257-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka \"IMAP injection.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6733B8C-5A9E-45CE-8938-F39A69EB0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6591E5-5F36-4663-85A6-9D870FD49FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D062B70A-E5FF-403B-8BD1-777D6462B7CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED3CC3-E0A8-4C20-9EF7-405CD32E9EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442BF5C9-DC58-4A94-A634-33D6A4F3C6DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0283.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-02-15",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0283.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-02-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winace:winace:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B82379-9F04-41E6-BCFE-34E7507C610F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17251",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-67/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425894/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0709",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-67/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425894/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files via the mos_change_template parameter.  NOTE: CVE-2006-1794 has been assigned to the SQL injection vector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4E3399-C743-4664-A55A-77BF543CBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.3h:h:*:*:*:*:*:*",
            "matchCriteriaId" : "F009FC3C-4830-4D35-8D4A-4C84DBE8AF78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18935",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00104-02242006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00104-02242006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the lang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFCDB9A-E808-4EC2-A377-CF17C0B6AFF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=28062.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://retrogod.altervista.org/cpg_143_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/cpg_143_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015646",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=28062.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://retrogod.altervista.org/cpg_143_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/cpg_143_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFCDB9A-E808-4EC2-A377-CF17C0B6AFF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=28062.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://retrogod.altervista.org/cpg_143_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015646",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=28062.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://retrogod.altervista.org/cpg_143_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact, as addressed by \"Urgent secure fixes\".  NOTE: this might be a duplicate of CVE-2006-0854, but the vendor announcement for this issue (from January 8, 2005) is too vague to be sure, and CVE-2006-0854 does not provide version information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intensive_point:iuser_ecommerce:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "6D2EC903-8BCF-4FA8-A3EB-4EC36DB2F805"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19003",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.intensivepoint.com/iuser-document.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16787",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.intensivepoint.com/iuser-document.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web script or HTML via the lid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA5EE4F-F255-456D-9C23-EA00F77838B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DC85FB-F2DE-493A-B134-ED386CCEB253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4ED0719-A061-40E8-8B53-A9AE9BAD2D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.3a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA514AB-F035-480E-9502-1D011443FA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.3a5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2296D18-1461-4FB4-B98E-7BA60C6554F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-267.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18997",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015663",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425775/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-267.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425775/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors involving character sets within e-mail messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:popfile:popfile:0.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10522AB1-1F3D-4283-A21D-DE937B41775B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:popfile:popfile:0.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C371CE34-BDD0-49FD-B82B-BED9C71ACC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:popfile:popfile:0.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667D6A14-23F9-4B0E-AEF5-35976049D67E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:popfile:popfile:0.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71E728D-BEBB-44B5-B646-AA3B76C1EE3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://popfile.sourceforge.net/cgi-bin/wiki.pl?ReleaseNotes/0.22.4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18975",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://popfile.sourceforge.net/cgi-bin/wiki.pl?ReleaseNotes/0.22.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_forum:easy_forum:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B303AF7-27D3-48C5-A560-8DB168CC97F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/85/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://hot-things.net/forum/show.php?f=2&topic=20060224080919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18996",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426760/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/85/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://hot-things.net/forum/show.php?f=2&topic=20060224080919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426760/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by classifieds/gorum/category.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C54F6-77EA-4F4E-985F-42197AF3C242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069849DD-B4E3-44FC-9084-0251B7C21266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C54F6-77EA-4F4E-985F-42197AF3C242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069849DD-B4E3-44FC-9084-0251B7C21266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16773",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) inf parameter; or, when register_globals is enabled, the (2) upperTemplate and (3) lowerTemplate parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C54F6-77EA-4F4E-985F-42197AF3C242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069849DD-B4E3-44FC-9084-0251B7C21266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16772",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote attackers to include arbitrary PHP files via the (1) upperTemplate and (2) lowerTemplate parameters, as demonstrated using the lowerTemplate parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C54F6-77EA-4F4E-985F-42197AF3C242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069849DD-B4E3-44FC-9084-0251B7C21266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C54F6-77EA-4F4E-985F-42197AF3C242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069849DD-B4E3-44FC-9084-0251B7C21266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16778",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-268.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425783/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-24T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WYSIWYG rendering engine (\"rich mail\" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "A18B07F4-E46B-4BA9-BFBF-16754CD71C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015665",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-21.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425786/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16770",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425786/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the show parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED757216-0908-4BB5-B770-A03A47993DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18981",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in register.php in DEV web management system 1.5 allows remote attackers to inject arbitrary web script or HTML via the \"City/Region\" field (mesto variable).  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev:dev_web_management_system:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B658A3-65E9-473F-871B-C963E14B9889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18714",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index.php3 from the PHPLib distribution is available on the server, allows remote attackers to execute arbitrary PHP code by including a base64-encoded representation of the code in a cookie.  NOTE: this description was significantly updated on 20060605 to reflect new details after an initial vague advisory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplib_team:phplib:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745AFDDD-1CAF-44DB-98BD-7426296CCF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16902",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=31885&release_id=396091",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00107-03052006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0720",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=31885&release_id=396091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00107-03052006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16616",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HTML via the EventText parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brown_bear_software:calcium:3.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A810DD-5105-463A-AAFF-CAA6EE99F66C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19007",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in (1) ZipStar 5.1 and (2) SpeedCommander 11.01.4450, allows remote attackers to overwrite arbitrary files via unspecified manipulations in a (1) JAR or (2) ZIP archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:speedcommander:11.01_build4450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B4518F-A0D0-4478-9A5F-F20C4414A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:squeez:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECDFA54-5B0F-41AA-9238-605AE625363A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:zipstar:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E26E3-E45B-49A7-8836-7C2B8CCA876D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425973/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425973/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing NULL (%00) byte in (1) the _SESSION['nocc_theme'] parameter in (a) html/footer.php; and (2) the lang and (3) theme parameters and the (4) Accept-Language HTTP header field, when force_default_lang is disabled, in (b) index.php, as demonstrated by injecting PHP code into a profile and accessing it using the lang parameter in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocc:nocc:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB50679-ABCA-4223-B92C-F528A089F6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remote attackers to execute arbitrary code by accessing the e-mail attachment via directory traversal vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocc:nocc:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB50679-ABCA-4223-B92C-F528A089F6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and (2) the tmp directory, which lists names of uploaded attachments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocc:nocc:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB50679-ABCA-4223-B92C-F528A089F6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the html_error_occurred parameter in error.php, (2) html_filter_select parameter in filter_prefs.php, (3) html_no_mail parameter in no_mail.php, the (4) page_line, (5) prev, and (6) next parameters in html_bottom_table.php, and the (7) _SESSION['nocc_theme'] parameter in footer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocc:nocc:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB50679-ABCA-4223-B92C-F528A089F6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocc:nocc:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB50679-ABCA-4223-B92C-F528A089F6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/noccw_10_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1063E88-7F6D-4E42-B196-7292320C4F67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000682.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/86/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426824/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.simplemachines.org/community/index.php?topic=78841.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0726",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000682.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/86/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426824/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.simplemachines.org/community/index.php?topic=78841.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to execute arbitrary SQL commands via the UpdateID0 parameter to Service_Requests.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: the vendor has disputed this issue, saying that \"[we] have a behind the scenes complex state management system that uses a combination of keys placed in JavaScript and Session State (server side) that protects against the type of SQL injection you describe.  We have tested for many of the cases and have not found it to be an issue.\"  Further investigation suggests that the original researcher might have triggered errors using invalid field values, which is not proof of SQL injection; however, the vendor did not receive a response from the original researcher"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_communication_services:vpmi_enterprise:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EFC064-CFA0-4886-AE1B-41DF381B8C67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000598.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000599.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0725",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000598.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000599.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-25T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16",
            "matchCriteriaId" : "89DA8BBA-BD52-4681-BBBB-CC5AABE54F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2F0A67-A7CE-49D6-A2CD-6F4393FE2A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DAEE37D-C3AB-47C2-9CB5-8FE8701CE26C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1652B31A-A08D-409F-82CC-63C38BD54777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A31AE55-82F5-4013-BBA9-846FE8C141B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FF2FE4-1517-49E2-90BD-0AEC23AABBA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B9114C-1080-4C56-967B-0B4AAB4B74C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAD3579-5DA3-4421-9CB8-84DF1C5EED77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464C92A8-C933-43C9-97D3-2E10F81C9515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC89E8C4-A060-44F6-B8BB-2DC740056168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0613A87-1DA3-4B38-809C-3A9C5FD57D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4620FA9-7988-4662-B1AB-890B44BB0563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E0A245-9F6C-4380-8EB7-0E40E593FAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58FDCFFB-A5C0-4DFC-BC3F-889F35C2279A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F408A93-B157-4AAE-A82E-9D9C2644031A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633D8F7-4760-4AF1-8D66-65F9FD6CD8FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB236DB-B41E-4195-A2D8-4DC236E9AE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0AA0EA-08C8-4011-A9FC-F7FBDFF440BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB55D93-46B9-4E55-903B-FFFF60200BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCEEE347-298E-41B3-B84F-6F7F682FCBBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2452328-546D-425C-A1E3-19339EE01BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CBC7F6-8104-4871-9DBA-D76E97301E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lincoln_d._stein:crypt_cbc:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0C7579-81EF-44C6-8956-3DB78CFF83C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2008-0630.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/31493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425966/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16802",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2008-0630.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425966/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-27T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via \"..\" (dot dot) sequences in the template parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4images:image_gallery_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "89741977-BA2C-4FB4-895A-F8DA29CE4365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/4images_171_adv.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426468/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/4images_171_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426468/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-27T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:10.nfs.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002982.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:10.nfs.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-February/002982.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-27T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows unspecified attackers to cause a denial of service (panic) or execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102161-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16826",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102161-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-27T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5595E484-647C-4F85-94AB-5A4D55CD766B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:open_enterprise_server:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842AFCB8-3186-4667-93DF-2F067840F117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_10_casa.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_10_casa.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0903",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-02-27T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function.  NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBEDF5A-5205-4012-B9B8-0FA304E7119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC969A5-52CC-44F2-A929-DE559A5D7624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DBBAC9-AA05-409F-82B2-A552A3417E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "EA087258-8A5B-472E-B120-9B56415F8869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204CF85D-DFAD-4052-B24A-DCE09B32426E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268CDE97-C837-482A-BB16-77662C45074C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E04B7CC-9E17-47AB-8923-A4DBD24119FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BE4B79-BF2A-4323-B337-62B388FCF9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B78C9D8-E6BC-4D80-8C29-219C1F151570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A7DE48-60E6-42FE-8986-0DB1647C1BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E35942-7E70-468E-BA15-97CA5086C1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB886BB-EA7C-4618-9029-BB16A45A4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EC4832-82D1-4E57-86DA-8918CA006723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D5DFB7-1AA6-468D-A077-5BB4B32C92B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C786D54-7DEC-41B8-A778-BED9DA66C3C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0F32D6-B2A9-4AC3-A4F9-E4A291AEC91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BD316B-5855-462D-B378-6AAF9817F23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D864BB-32A6-44FC-870F-3663E53F2277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5BA337-5845-4E3E-8DB5-AAB81A460376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC06D07-8C16-48D4-A95E-8F40CFAE6514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1B9CEC-580F-4143-B111-032195BCC760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F41E62F-A606-4842-985C-2B349C405E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.20:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF1E839-E1C9-4A13-A6BA-6F8C56FDF148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692E4E06-D559-4735-AED5-CE9E572CF608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A42D3C-2539-469A-81BD-8306CD7E1A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BCEB43-67D4-4711-8C30-4D2D93159EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362893B4-9BC1-4584-ACD5-08878A19E3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD940715-318E-44C1-8613-FEBFB8F1741A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167130D3-2AD2-4B82-B805-6A0BA45C4DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFFBBE-E604-4BCB-A143-E26CD91C0B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3658E1-B451-4B8B-A21A-3D66359D21DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041AD718-39A7-4B13-90C5-680743B1C982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2F4EA8-64A3-4E11-A6A3-5179738157D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067774E4-0704-4F5D-9B46-4DE19FE51163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD26FA75-C3C5-434C-9A82-E5F798A8E47C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B463E6-DAD6-4013-8095-F0153F8B335F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0C0EE5-B2AA-4862-B144-24733CC86A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536F109A-7932-4424-889E-02922D8B783D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036AE068-C061-49B1-95D1-98A09A79EE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A83184-F554-42C0-8162-B484CBAD09D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9244622-781A-46AE-866D-0EDDE5323048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA85DD18-19D9-4BF8-8420-DEA24AE44046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670C3F10-A811-43D0-B762-5791D41C8B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F379312-B95D-4C9B-918F-6A57B12EB5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36F606D-59B6-4FA0-8785-3B14592FE9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2681F9FF-5899-4EFA-85A3-CEAB4402C786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FC2146-5BC0-4CA6-8700-5877C01B777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79AFBCE-FFF7-4348-BE17-42A7978E17E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AB3865-4ABC-4B5A-8C4F-65C6E5B2E956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436D90B0-C839-4B9F-853D-51C34459A11F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3535453-E7DC-4561-BB35-32DFF78E451C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A46F3F-7A97-4AE5-885B-15E25BC575C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37512B4B-C428-4D30-AAF3-9557C7257967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B1527A-5039-470B-87DC-B02F557364A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54D7B3-DC9B-43AC-BE10-565BDF292A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7AC36-4E5D-483B-939E-257FDEDE48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2CEF98-8561-42D2-BCE5-3AAE4DC81ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6132F5E-ADE6-44C2-85BD-17408594789F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6779AC-EF41-46B5-8B26-07FA2537E5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F038AF5-C96C-43EE-9D46-1DD8CAF567EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C06765-D153-4D4D-B8CD-DB2E386E082B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E942FA-A458-4607-B48D-FCA112AFF1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E241159-FAA4-4DCF-AB68-BE36DF95D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6995B6-B594-454B-BD26-EACFB8241DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F610D56-6BB6-48FB-B43A-670CE9168500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0653.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=17667",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rst.void.ru/papers/advisory39.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19814",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20241",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20253",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20333",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20625",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/30351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015693",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1071",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1073",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1079",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0544.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0364.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16850",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-274-2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0752",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24966",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/274-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0653.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=17667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rst.void.ru/papers/advisory39.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0544.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-274-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/274-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug for Red Hat Enterprise Linux 2.1 and 3:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=194613\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue has been fixed for Red Hat Enterprise Linux 4 in RHSA-2006:0544.",
        "lastModified" : "2006-09-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in (1) fastlinks.php and (2) catogary.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:top_line:d3jeeb_pro:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149A55D3-066F-4627-B1D3-B59183FC0703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426197/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426197/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PHP-Nuke before 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQL commands via encoded /%2a (/*) sequences in the query string, which bypasses regular expressions that are intended to protect against SQL injection, as demonstrated via the kala parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/426083/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-47.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426083/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms via /%2a (/*) sequences with the \"ad_click\" word in the query string, as demonstrated via the kala parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8_patched_3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0146C3-38C8-4D16-B4D6-9C16D2BAC635"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426083/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.waraxe.us/advisory-47.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426083/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.waraxe.us/advisory-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error messages, including (1) PEAR/Text/Diff/Renderer/inline.php, (2) PEAR/Text/Diff/Renderer/unified.php, (3) PEAR/Text/Diff3.php, (4) class_db.php, (5) class_db_mysql.php, and (6) class_xml.php in the ips_kernel/ directory; (7) mysql_admin_queries.php, (8) mysql_extra_queries.php, (9) mysql_queries.php, and (10) mysql_subsm_queries.php in the sources/sql directory; (11) sources/acp_loaders/acp_pages_components.php; (12) sources/action_admin/member.php and (13) sources/action_admin/paysubscriptions.php; (14) login.php, (15) messenger.php, (16) moderate.php, (17) paysubscriptions.php, (18) register.php, (19) search.php, (20) topics.php, (21) and usercp.php in the sources/action_public directory; (22) bbcode/class_bbcode.php, (23) bbcode/class_bbcode_legacy.php, (24) editor/class_editor_rte.php, (25) editor/class_editor_std.php, (26) post/class_post.php, (27) post/class_post_edit.php, (28) post/class_post_new.php, (29) and post/class_post_reply.php in the sources/classes directory; (30) sources/components_acp/registration_DEPR.php; (31) sources/handlers/han_paysubscriptions.php; (32) func_usercp.php; (33) search_mysql_ftext.php, and (34) search_mysql_man.php in the sources/lib/ directory; and (35) convert/auth.php.bak, (36) external/auth.php, and (37) ldap/auth.php in the sources/loginauth directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB960ACC-74D4-4AFB-886C-11EB5180DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA6316-7E7E-4A6B-AA54-1846198D64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70C944-F70E-49F4-AA9C-D19148925C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAF5259-D99A-45A1-8DD4-C6858B302272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2800F-3A8C-4B63-B754-D921DFF79496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8BA41-7876-4738-A68A-2162E28A3AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF761A-6459-42B0-BCB8-F735FBDD6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://neosecurityteam.net/advisories/Advisory-16.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://neosecurityteam.net/index.php?action=advisories&id=16",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425713/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466275/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://neosecurityteam.net/advisories/Advisory-16.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://neosecurityteam.net/index.php?action=advisories&id=16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425713/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466275/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including (1) sources/loginauth/convert/, (2) sources/portal_plugins/, (3) cache/skin_cache/cacheid_2/, (4) ips_kernel/PEAR/, (5) ips_kernel/PEAR/Text/, (6) ips_kernel/PEAR/Text/Diff/, (7) ips_kernel/PEAR/Text/Diff/Renderer/, (8) style_images/1/folder_rte_files/, (9) style_images/1/folder_js_skin/, (10) style_images/1/folder_rte_images/, and (11) upgrade/ and its subdirectories."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB960ACC-74D4-4AFB-886C-11EB5180DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA6316-7E7E-4A6B-AA54-1846198D64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70C944-F70E-49F4-AA9C-D19148925C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAF5259-D99A-45A1-8DD4-C6858B302272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2800F-3A8C-4B63-B754-D921DFF79496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8BA41-7876-4738-A68A-2162E28A3AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF761A-6459-42B0-BCB8-F735FBDD6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://neosecurityteam.net/advisories/Advisory-16.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://neosecurityteam.net/index.php?action=advisories&id=16",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425713/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://neosecurityteam.net/advisories/Advisory-16.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://neosecurityteam.net/index.php?action=advisories&id=16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425713/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, possibly involving the (1) \"In]\" and (2) \"b;tnLogIn\" parameters, or (3) malformed btnLogIn parameters, possibly involving missing \"[\" (open bracket) or \"[\" (closing bracket) characters, as demonstrated by \"&btnLogIn=[Log&In]=&\" or \"&b;tnLogIn=[Log&In]=&\" in the URL.  NOTE: due to the lack of diagnosis by the original researcher, the precise nature of the vulnerability is unclear."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup:professional_2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B28A5682-3F0C-40B7-B502-ABA0BE339D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425780/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16771",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0704",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zur.homelinux.com/Advisories/ipswitch_dos.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425780/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zur.homelinux.com/Advisories/ipswitch_dos.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oreka before 0.5 allows remote attackers to cause a denial of service (application crash) via a \"certain RTP sequence.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oreka:oreka:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1CF786-29E8-4BAB-A141-E8BEDE5D126A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oreka:oreka:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7BE780-1B0B-4BE7-AF9A-A7753AAB2A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oreka:oreka:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B005DC46-12A0-4246-B0C7-8629437B1869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oreka:oreka:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EDC0756-2A9E-466B-84A4-55E9CD02F5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://oreka.sourceforge.net/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://oreka.sourceforge.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCDA64F-C49A-4F5B-B285-4079D8E3A499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED3457-CC21-4DB3-931F-677F723E1B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BCD546-2A50-4F43-935C-B68459EE894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725BD7BE-1769-4032-ADA8-9ED15528C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239D70F4-7D86-4A57-ACEF-440F68994FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEE2C94-DA69-4A78-A15F-538383A7460E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ACBA13-AC13-4469-862F-B3DD2327B6FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425584/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=312498",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425584/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=312498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C34288-A326-4B71-99B0-DA9FFD28160F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2FC5C7-B218-4B87-9805-F90AC0E7A281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8711D3-55CF-4131-BBAC-6BE07068219F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D7EA7C-B401-4F5A-AC08-2199DD117403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2DDC7C-CD2B-4597-A5E0-266A884958FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BCD546-2A50-4F43-935C-B68459EE894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/425584/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=312498",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425584/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=312498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C34288-A326-4B71-99B0-DA9FFD28160F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/0692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=313441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=313441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.19.3 through 2.20 does not properly handle \"//\" sequences in URLs when redirecting a user from the login form, which could cause it to generate a partial URL in a form action that causes the user's browser to send the form data to another domain."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ACBA13-AC13-4469-862F-B3DD2327B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9EC243-3E25-4234-A88A-FDD5B594BFBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425584/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16745",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=325079",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425584/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=325079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:melange:melange_chat_system:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2DC2DF-937C-45F3-AAB2-6FF0EF8BA752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18984",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oh2600.com/forum/viewtopic.php?t=43",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425589/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oh2600.com/forum/viewtopic.php?t=43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425589/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:the_bat:3.60.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFC1A2-2E83-4F4F-9160-3491B8AF3A5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18989",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nsag.ru/vuln/953.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425936/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nsag.ru/vuln/953.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oi:email_marketing_system:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2388725-17A8-48A8-BB54-DD696C5767AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425924/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425924/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oi:email_marketing_system:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2388725-17A8-48A8-BB54-DD696C5767AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425924/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425924/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.0_fc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BEB138-2E35-4770-BA2B-D78FFC6E6CE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nsag.ru/vuln/952.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425937/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434559/30/4890/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nsag.ru/vuln/952.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425937/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434559/30/4890/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php (aka upload.php) that allows remote attackers to upload arbitrary files via a modified CurrentFolder parameter in a direct request to admin/filemanager/upload.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B08D050-1FD0-4688-8120-02522214D724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.0_alpha-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967127A1-DAB9-4F44-91E4-BF813A633DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.0_alpha-rgf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89DDE433-82D9-4D12-B1B1-18355FCBA903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7086BF6-F17A-4CE0-AAC3-B5B40F5D69B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2995DC-5580-411F-8167-F543CCF7B0F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD035515-2C6D-4495-BA84-55C1D44C275A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93159B6-C47D-4AEE-B013-0F5FE3FF3CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715762F5-862C-489D-A75F-B1E78F2AC332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3BCE9-897E-4951-AD9E-E3830A0776FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F570531-384B-43C6-9093-1441492335C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F4B32C-3CC1-466F-92C4-7F763A6989FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14825",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14972",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/892.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425931/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=14972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/892.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425931/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the letter parameter in reviews.php and (2) the dcategory parameter in download.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphpnuke:myphpnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.8",
            "matchCriteriaId" : "F809DD04-571D-429B-B8A1-49FBD4361D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C837745C-62E4-4770-9FC6-F4299CA780B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_8_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F1AE53-725E-4506-AED4-AFD02983466D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.myphpnuke.com/article.php?sid=1035&mode=thread&order=0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425983/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.myphpnuke.com/article.php?sid=1035&mode=thread&order=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425983/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brown_bear_software:ical:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E03207-7AF0-44EC-A1F2-16B7F72B194F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Brown Bear iCal version 3.10 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service (CPU consumption) by creating and then listing folders whose names contain format string specifiers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB0B5F8-F010-4B70-947B-EA28EA38E237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFC20A7-14DF-4E00-873B-6F97A10EEA19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/888.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/888.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smithmicro:stuffit_deluxe:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCBEE5A-6227-42BB-BA7B-4EEC4D259050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smithmicro:stuffit_expander:9.0.0.21_engine_9.0.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3318D3A-DF5D-4EA2-8190-F88083796245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smithmicro:stuffit_standard:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE5B10E-FE90-4502-8DF6-AC5DBF10BBAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smithmicro:zipmagic_deluxe:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3669E791-1022-491B-A831-D49ED84D32D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19010",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/stuffit.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425972/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/stuffit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425972/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) userid parameter in (a) jgs_galerie_slideshow.php and (b) jgs_galerie_scroll.php, and the (2) katid parameter in (c) jgs_galerie_slideshow.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgs-xa:jgs-gallery_addon:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDFC296-1657-403E-9D28-AFE929446793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3912B7F7-8BC3-4B44-8ACF-0DC38DAD1365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E11939F-3C0E-4976-A031-9C7BC5A63BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4504BE5-11F3-4AC9-B543-B8CA4DBE02D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1831391-E8DD-430C-8C51-FA34CC2A38A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B976F-2F26-497C-92A8-2F2FD4C41A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5C5A8F-E04C-413F-A9A6-62EFC221A74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BF2C7A-2689-4760-8CD9-387BD497789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40CCEE5-4B68-4F45-911F-0A7089A0609D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0615.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16810",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0615.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Vulnerability affects JGS-XA, JGS-Gallery Addon versions 4.0.0 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the _DUMP command, which reveals the operating system, registered user, and registration code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "491EA8F4-179B-4521-8866-1BAE087E7086"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18990",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/879.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425968/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/879.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425968/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. (dot dot) in the RENAME command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8.8.1:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "8D514935-5F61-4557-BBDB-81FC5BE5D9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18990",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/878.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/878.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the UIDL parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "491EA8F4-179B-4521-8866-1BAE087E7086"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nsag.ru/vuln/877.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nsag.ru/vuln/877.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_archive_tar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "6E35E63B-5519-41E0-A8DC-0C651DC78E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_archive_tar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "FC9CAF3D-EB5A-4332-9E41-DCD938A817DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_archive_tar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "DA9773D4-E32B-4464-889A-97B69BD82520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pear.php.net/bugs/bug.php?id=6933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pear.php.net/package/Archive_Tar/download/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19011",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/phptar.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425967/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pear.php.net/bugs/bug.php?id=6933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pear.php.net/package/Archive_Tar/download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/phptar.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425967/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pear_archive_zip:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5C7F26-30F0-4BE5-9682-5B68185EC477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hamid.ir/security/phpzip.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425967/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426153/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hamid.ir/security/phpzip.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425967/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426153/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a url XCode tag in a posted message.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpx:phpx:3.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7184BC-839D-4474-BABD-E47ECE1DFB25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18688",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16799",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D899CC0B-334F-4794-A7C2-449545D728C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/23/23469-limbo.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18723",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/23/23469-limbo.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379C2A4A-78EF-473D-954B-F5DD76C3D6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/dailydave/2006-q1/0179.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/dailydave/2006-q1/0179.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_host_shop:website_generator:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320862A9-5BF8-450A-86B2-A3AF4F44F4A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nsag.ru/vuln/894.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nsag.ru/vuln/894.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-02-28T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unu_networks:mailgust:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C22E02-2A8A-41F9-89A6-E99D17CF874A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nsag.ru/vuln/890.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18998",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nsag.ru/vuln/890.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the RefererURL parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de guiones en sitios cruzados (XSS) en eZ publish 3.7.2 y anteriores permiten a atacantes remotos inyectar 'script' web o HTML de su elección mediante el parámetro RefererURL.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.3",
            "matchCriteriaId" : "C0BB8788-83E4-48CE-A3EC-52AE557F7231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424D0A1C-18CC-4648-B621-ABEE39475427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4CD0FB-13BD-4DDB-B82C-7204206F764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE243CE3-75E4-4C29-BF80-30FEB6321BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504FCE83-4801-4ACC-81DF-402841B2B121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C62DE22-8ABC-4A27-86FD-D045887C1867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EACF1838-EC9B-45EA-A5D0-0252E4E54F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14B2E33-CB8C-4F40-B7D1-3FE67E9D6D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E163DA2F-053F-4D9F-B793-9A2B70ADE342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA5BE97-28F9-4DEE-BAB3-093D6F35F730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6035B56A-94C9-4131-9C49-3EE37DCE23A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F8F2AC-AB82-4925-91D2-A6DE65E4A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A84C0A8-C576-4233-BC05-30CA56A41FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF55F25-B30D-4FC9-ADA7-7F185CD5338F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC77C98-2C37-49CE-AFB4-49D84BEC78FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez:ez_publish:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568B3930-DDA1-4582-B1E8-BA4B4E83E49B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=16",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426076/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426076/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dci-designs:dci-taskeen:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B1E397-F766-4522-BAE3-0C1D391EBAFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015685",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426082",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16828",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cynical_games:shoutlive:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA32CA3-16AD-4C50-9C4B-A41DD6537B98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/87/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19047",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/87/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or HTML via certain variables when posting new messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cynical_games:shoutlive:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA32CA3-16AD-4C50-9C4B-A41DD6537B98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/87/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19047",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/87/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulnerability than CVE-2005-1509."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwsphp:pwsphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "885B1524-43C4-4C18-9433-EAD8D8836FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PwsPHP_SQL_Inj.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16567",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PwsPHP_SQL_Inj.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pwsphp:pwsphp:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9030D3-F6FA-4AA3-A99B-028986C694A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pwsphp.com/index.php?mod=news&ac=commentaires&id=278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426084/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426183/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pwsphp.com/index.php?mod=news&ac=commentaires&id=278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426084/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1."
      }, {
        "lang" : "es",
        "value" : "Archangel Weblog 0.90.02 permite a atacantes remotos eludir la autenticación estableciendo la cookie ba_admin a 1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archangelmgt:weblog:0.90.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA85FCBF-1BF7-4C70-86AF-B6A6A8272685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426184/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426184/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad incluida en el archivo remoto PHP en admin/index.php en Archangel Weblog 0.90.02 permite a administradores remotos autenticados ejecutar código PHP arbitrario a través de una URL que termina en NULL (%00) en el parámetro index."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archangelmgt:weblog:0.90.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA85FCBF-1BF7-4C70-86AF-B6A6A8272685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426184/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426184/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:516_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9272BF87-6D5F-458B-9984-7659236A5025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:530_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FE9027-BABD-4AEF-9223-7D95636BBBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:536_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DC76DA-C634-464F-AAB7-9D1F4620122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:546_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885B8845-9380-4456-A58A-84B7375B6DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:576_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDDEF1E-3BE9-4E6E-A63A-DBFF5C676BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:580_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECAD533-F0E4-4C95-AC04-747CE5C0CA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:585_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE656DD1-24B1-4E7D-A6A9-3E458187553D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16839",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-01T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the \"31\" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due to cleansing that occurs in the administrator interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:516_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9272BF87-6D5F-458B-9984-7659236A5025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:530_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FE9027-BABD-4AEF-9223-7D95636BBBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:536_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DC76DA-C634-464F-AAB7-9D1F4620122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:546_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885B8845-9380-4456-A58A-84B7375B6DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:576_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDDEF1E-3BE9-4E6E-A63A-DBFF5C676BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:580_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECAD533-F0E4-4C95-AC04-747CE5C0CA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:thomson:speedtouch:585_5.3.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE656DD1-24B1-4E7D-A6A9-3E458187553D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16839",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T01:02:00.000",
      "lastModified" : "2023-11-07T01:58:21.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0848.  Reason: This candidate is a duplicate of CVE-2006-0848.  Notes: All CVE users should reference CVE-2006-0848 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IPSec when used with VPN networks in Mac OS X 10.4 through 10.4.5 allows remote attackers to cause a denial of service (application crash) via unspecified vectors involving the \"incorrect handling of error conditions\"."
      }, {
        "lang" : "es",
        "value" : "IPSec, cuando se usa con redes VPN en Max OS X 10.4 a 10.4.5 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante vectores no especificados implicando \"manejo incorrecto de condiciones de error\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "automount in Mac OS X 10.4.5 and earlier allows remote file servers to cause a denial of service (unresponsiveness) or execute arbitrary code via unspecified vectors that cause automount to \"mount file systems with reserved names\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service (service hang) by flooding packets at the authentication server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nufw:nufw_firewall:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C79A68-9602-470B-8CCD-12B12020ACFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19046",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nufw.org/+NuFW-1-21-minor-security-fix+.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nufw.org/+NuFW-1-21-minor-security-fix+.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects NuFW, NuFW Firewall versions 1.0.20 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CD5AA0-3DE6-41AC-92B5-935210AE4FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8C88CD-CBC0-40C3-902C-5853CF9B532B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30E8AB4-3AEF-4542-8E72-038A8E858937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A700BDB9-DABB-46B8-A750-4C5E1EAEE6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED1DD24-7D41-4C15-94D1-63153817420F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E222402-8D99-4E80-8829-46815DACEBAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/89/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19020",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://soft.zoneo.net/freeForum/changes.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427321/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/89/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://soft.zoneo.net/freeForum/changes.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427321/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) subject parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CD5AA0-3DE6-41AC-92B5-935210AE4FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8C88CD-CBC0-40C3-902C-5853CF9B532B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F30E8AB4-3AEF-4542-8E72-038A8E858937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A700BDB9-DABB-46B8-A750-4C5E1EAEE6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED1DD24-7D41-4C15-94D1-63153817420F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneo-soft:freeforum:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E222402-8D99-4E80-8829-46815DACEBAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/89/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19020",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://soft.zoneo.net/freeForum/changes.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427321/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/89/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://soft.zoneo.net/freeForum/changes.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427321/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands by setting the comma variable value via the comma parameter in a cookie.  NOTE: 1.04 has also been reported to be affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426320/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426653/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0774",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426320/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426653/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uConfig agent in Compex NetPassage WPE54G router allows remote attackers to cause a denial of service (unresposiveness) via crafted datagrams to UDP port 7778."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:compex:netpassage_wpe54g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662B8649-59DC-48F6-A23E-5725FB8CF610"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/Ldocument605.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/Ldocument605.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haber_id parameter.  NOTE: this product has also been referred to as \"Cilem News,\" although that does not appear to be the proper name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en yazdir.asp en Cilem Hiber 1.1 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro haber_id. NOTA: Este producto también se ha referido como \"Cilem News,\" aunque eso no parece ser su nombre propio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilem:cilem_haber:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D72305-6A1E-4883-950B-FFD6CD8E4185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0449.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114079912721723&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19157",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0881",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0449.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114079912721723&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vubb:vubb:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA7F6D2-05DE-4160-9926-A44B929C501B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via (1) long locale environment variables to a strcpy function call in c_locale_glibc2.c and (2) long arguments to unspecified functions in num_put_float.cpp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stlport_project:stlport:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36A323E-69A1-4249-9444-DD4C079F72E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19051",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=397543",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16928",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0800",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25159",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=397543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass firewall program execution rules by replacing an allowed program with an arbitrary program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncp_network_communications:secure_client:8.11_build_146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAEBC12-E164-45AE-98AD-BF746BC4B425"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass security protections and configure privileged options via a long argument to ncpmon.exe, which provides access to alternate privileged menus, possibly due to a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncp_network_communications:secure_client:8.11_build_146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAEBC12-E164-45AE-98AD-BF746BC4B425"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a large number of arguments to ncprwsnt.exe, possibly due to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "NCP Network Communication Secure Client 8.11 Build 146 y posiblemente otras versiones, permite a usuarios locales provocar una denegación de servicio (consumo de CPU) a través de un número grande de argumentos para ncprwsnt.exe, posiblemente debido a un desbordamiento de buffer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncp_network_communications:secure_client:8.11_build_146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAEBC12-E164-45AE-98AD-BF746BC4B425"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (memory usage and cpu utilization) via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usually does not apply in flooding attacks."
      }, {
        "lang" : "es",
        "value" : "NCP Network Communication Secure Client 8.11 Build 146 y posiblemente otras versiones, permite a usuarios locales provocar una denegación de servicio (uso de memoria y utilización de cpu) a través de una inundación de datagramas UDP arbitrarios de los puertos 0 a 65000. NOTA: este caso fue reportado como un desbordamiento de buffer, pero ese término no se aplica por lo general en ataques de inundación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncp_network_communications:secure_client:8.11_build_146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAEBC12-E164-45AE-98AD-BF746BC4B425"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-02T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncp_network_communications:secure_client:8.11_build_146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAEBC12-E164-45AE-98AD-BF746BC4B425"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelartkingdom:top_sites:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F07DB2E-1489-4E24-9D1E-E1B13C278E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426249/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426249/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:1-2-all:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64FC696C-07CC-483F-A9A4-254CF503C1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:general:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A53D01-013F-4E9E-AB65-088ACF91256D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:isalient:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C092DE7B-88E4-43A3-8B41-D69ED7806C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:knowledgebuilder:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B996343-7E62-46FF-8956-251D1D46132A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:supporttrio:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DB4E26-3D09-4811-94BF-A3AC6420AE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:visualedit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BCAF6A-CF64-4126-AD92-37FEE8FB379B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/3228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426214/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/3228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426214/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lionel_reyero:directcontact:0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43765DA8-60ED-4D30-A10A-1055DC783839"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042560.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426250/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427464/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.autistici.org/fdonato/advisory/DirectContact0.3b-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042560.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426250/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.autistici.org/fdonato/advisory/DirectContact0.3b-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: the category vector is already covered by CVE-2005-3846."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B557345B-5A7F-43EC-9401-F355E5A2FF5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426195/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426195/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B0B838-401F-447D-A270-6B3C7416A2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DF86C4-176B-4E4E-AF89-15F090E9C0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3EAD02-CF8D-4154-9A67-9774BA4029AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72337C8-2B5C-4824-A3C0-D41A857DC9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454BEBD6-3EC7-4FFB-A51A-0199B5CCF097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A381433-9331-4424-B349-52D7F4BFEABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC225BD-FA8E-482B-9537-77797B7A88BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682290A8-AEB7-4652-A44C-A969AB937BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5162C7-5B84-4B5E-85B7-31F9B4BBAF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9D274F-AE4D-4064-ABA2-C0573EFE7DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5A8763-F36A-4FF6-8BD2-8CC2B4250BA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/430870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16825",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/phpWebSite-topic-sql-inj.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/phpWebSite-topic-sql-inj.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:battleaxe_software:bttlxeforum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E9025B-BA0E-45C7-A90D-4E0ED03B5BF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0548.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19043",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23540",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Battleaxe Software, bttlxeForum versions 2.0 and previous"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2023-11-07T01:58:29.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0459.  Reason: This candidate is a reservation duplicate of CVE-2006-0459.  Notes: All CVE users should reference CVE-2006-0459 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spid:spid:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E1343C-2C76-4B98-A0BD-B0C3837FA122"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19033",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/955.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426073/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nsag.ru/vuln/955.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426073/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craig_morrison:mts_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E91C0D-D555-477C-BA32-2A11D4D1D284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426181/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426181/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the Subject header, (2) the From header, and (3) certain other unspecified headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:argosoft_mail_server:1.8.8.5:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "B9F06944-839E-4DDE-B8D0-2E15370E6A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-6/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426206/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-6/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426206/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects ArGoSoft, Mail Server Pro version 1.8.8.5, and may affect all previous versions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nidelven_it:issue_dealer:0.9.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F32264F-32C0-4ADE-A9D3-15DD1232DC81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issuedealer.com/changes/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23502",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issuedealer.com/changes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Nidelven IT, Issue Dealer versions 0.9.95 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewday.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jay_eckles:cgi_calendar:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6654ABE-2D93-4BD6-ABC1-F173C83B5388"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426198/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426198/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-merge:e-merge_winace:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DA54FE-1F83-4E2E-967A-F6D3BCB9478A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19013",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/winace.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23464",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425971/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16800",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/winace.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/425971/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects e-merge, WinAce versions 2.6 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICAR test file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virex:7.7:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "0214BC98-4866-42E4-9CD0-8D1F94D6304F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/426348/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426348/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE80A27-696F-43B2-91F9-4A9C56414C17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=438526",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426319/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16874",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=438526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2.178:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4C4E28-C301-427D-9E29-69A85EEC3ED6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426318/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16879",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects EJ3, TOPo version 2.2.178, and possibly all previous versions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the \"post comment\" functionality of WordPress 2.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) website, and (3) comment parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4671A-8449-438E-922B-94E5542137BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://NeoSecurityTeam.net/advisories/Advisory-17.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426304/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426574/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://NeoSecurityTeam.net/advisories/Advisory-17.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426304/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426574/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default-filters.php, (2) template-loader.php, (3) rss-functions.php, (4) locale.php, (5) wp-db.php, and (6) kses.php in the wp-includes/ directory; and (7) edit-form-advanced.php, (8) admin-functions.php, (9) edit-link-form.php, (10) edit-page-form.php, (11) admin-footer.php, and (12) menu.php in the wp-admin directory; and possibly (13) list directory contents of the wp-includes directory.  NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors are already covered by CVE-2005-4463.  The menu-header.php vector is already covered by CVE-2005-2110.  Other vectors might be covered by CVE-2005-1688.  NOTE: if the typical installation of WordPress does not list any site-specific files to wp-includes, then vector [13] is not an exposure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4671A-8449-438E-922B-94E5542137BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://NeoSecurityTeam.net/advisories/Advisory-17.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426304/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426574/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://NeoSecurityTeam.net/advisories/Advisory-17.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426304/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426574/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F95086-3107-4C38-BB3B-7BABA9BD15C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dns.measurement-factory.com/surveys/sum1.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.isc.org/article/AA-00269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426368/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dns.measurement-factory.com/surveys/sum1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kb.isc.org/article/AA-00269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426368/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "This vulnerability affects ISC, BIND versions 9.3.2 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dns.measurement-factory.com/surveys/sum1.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426368/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://dns.measurement-factory.com/surveys/sum1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426368/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of Windows 2000 -and- Windows Server 2003."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a denial of service (client termination and loss of backup service) via a malformed packet to TCP port 497, which triggers an assert error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc_dantz:retrospect:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DB05AF-8E14-46BA-B67A-BBBE8803944C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc_dantz:retrospect:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7773B28A-F3A9-4891-A38A-BDACB27B8DA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.dantz.com/article.asp?article=8361&p=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.dantz.com/article.asp?article=8361&p=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/application/poi/display?type=vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects EMC Dantz, Retrospect versions 7.0.x (all 7.0.x versions previous to 7.0.109) as well as versions 6.5.x (all 6.5.x versions previous to 6.5.138)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:P",
            "baseScore" : 2.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015713",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-03T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers to execute arbitrary code via unspecified vectors involving a web page with crafted JavaScript, a different vulnerability than CVE-2005-4504."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/176732",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/176732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2023-11-07T01:58:21.427",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4504.  Reason: This candidate is a duplicate of CVE-2005-4504.  Notes: All CVE users should reference CVE-2005-4504 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:g2soft:pentacle_in-out_board:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F76BA8-3C25-4168-9838-601A1B7FCBC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015682",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426074/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426075/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16818",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426074/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426075/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote attackers to execute arbitrary SQL commands via the fid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lansuite:lanparty_intranet_system:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B852C044-CC72-474E-BA91-0EED867455C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lansuite:lanparty_intranet_system:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C0FE184-F4CA-4403-AE56-27E7328B6C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16836",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Lansuite, LanParty Intranet System version 2.1 (Beta) & LanSuite, LanParty Intranet System versions 2.0.6 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR WGT624 Wireless DSL router has a default account of super_username \"Gearguy\" and super_passwd \"Geardog\", which allows remote attackers to modify the configuration.  NOTE: followup posts have suggested that this might not occur with all WGT624 routers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:wgt624:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CC69B2-329E-408B-9C56-61042551B6F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/426187/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426313/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431026/30/5580/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485396/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426187/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426313/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431026/30/5580/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485396/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, which allows remote attackers to obtain passwords and gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:wgt624:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CC69B2-329E-408B-9C56-61042551B6F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/426185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the AG_ID parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cactusoft:parodia:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E018B2-9E25-424C-AA8C-C3A9F5354920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AG_ID parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cactusoft:parodia:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E018B2-9E25-424C-AA8C-C3A9F5354920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "This vulnerability affects CactuSoft, Parodia version 6.2, and may affect all previous versions as well."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "2B2919CA-3F8B-4300-954B-BABFEF1145C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7338A7DE-F9E9-43B1-91A4-B67968FD687B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D76F9EB-36BE-4D52-B798-EDA5FA0C3296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4088DA8F-C0E9-4FFD-810E-C97DB8013EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB41AE85-8216-4241-84DB-78E23EE684EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3565B9F5-5216-4892-B225-09EDB67C88D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E168FBB-C014-4EF1-8EDB-8FF06EB24C00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DDEA62-EF45-4231-B17C-5ECF7E3EA96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93954DB5-4DA3-43D3-943F-BE23C1105569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30BA3B67-E920-4619-8FED-06299484380E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E34ABD1-4CD9-4065-8229-048E23FEAEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6095C849-07FA-46B6-A083-6B8624F01CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC2A8E5-A49B-4251-A2B0-0311565F9DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28B4F7A-201D-4CB1-92F4-300815408AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.0.5:pl1:*:*:*:*:*:*",
            "matchCriteriaId" : "A415906E-881A-4CE1-BE6F-48EEB76BEB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.0.5:pl2:*:*:*:*:*:*",
            "matchCriteriaId" : "A44D7EE3-9DAA-4EA1-A446-99726DDF24BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DF7FDD-D540-430E-8AA0-0E185CE5D41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C29DC6-7728-4D8E-84AE-F3B219389A5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431A3E15-644D-4ABC-89F9-39C33FA5AB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ABC8622-78D4-43E2-AFE5-BEA806A2F062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B87D7ED-EA7F-4544-8E9E-8AF124F7DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "020C6DAC-8E5B-4F94-9589-3778B3217D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "17EB5443-907B-4422-A16C-437DB4F00FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D3FDB2-AC3B-4D12-93AF-8A82B47A3FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendcard:sendcard:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2142E843-92DF-41DA-951B-3C6ECE370484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19056",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=544749",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16900",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=544749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) dir and (2) page_id parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_landry:n8cms_sitesuite_cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD520F9-27EE-4CD5-A04D-AB9F9DD0DF28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_landry:n8cms_sitesuite_cms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B8E6DB-CBDA-4AD2-B9DC-A2A883005B72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/n8cms.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19068",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427222/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/n8cms.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427222/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) dir and (2) page_id parameter to (a) index.php and (3) userid parameter to (b) mailto.php.  NOTE: it is possible that issues 1 and 2 are resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_landry:n8cms_sitesuite_cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD520F9-27EE-4CD5-A04D-AB9F9DD0DF28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_landry:n8cms_sitesuite_cms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B8E6DB-CBDA-4AD2-B9DC-A2A883005B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nathan_landry:n8cms_sitesuite_cms:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5161D329-C028-4C76-9990-B767CC9E6A3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/n8cms.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19068",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427222/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/n8cms.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427222/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability may affect all versions of Nathan Landry, n8cms."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "M4 Project enigma-suite before 0.73.3 (Windows) has a default password of \"nominal\" for the \"enigma-client\" account, which allows local users to gain access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m4_project:enigma-suite:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F12A7E-3C00-41AD-8CD4-08407322F164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m4_project:enigma-suite:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C0F568-DF76-4E55-970C-1B21F13FF306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m4_project:enigma-suite:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B5E55A-32B1-4E67-8EB0-81C92E9E29C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m4_project:enigma-suite:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72306200-FC89-47E5-A899-FE90D98C568E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m4_project:enigma-suite:0.73.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AC11EC-DDF9-4B87-A80D-4463A202F29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m4_project:enigma-suite:0.73.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FEED09-6D9B-4015-B8B7-5186DBC63D60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bytereef.org/m4-project-blog.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bytereef.org/m4-project-blog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) \".\" (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files."
      }, {
        "lang" : "es",
        "value" : "response.c en Lighttpd 1.4.10 y posiblemente versiones anteriores, cuando se ejecuta sobre Windows, permite a atacantes leer código fuente de su elección mediante peticiones conteniendo caractéres (1) \".\" (punto) y (2) espacio al final, que son ignoradas por Windows, como se ha demostrado en ficheros PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DE19FF-DAA2-4FFC-9392-6CE1B0B5DF5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57FABC2C-E678-45E8-9FB3-3026D55D26F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0332C2-9720-4329-A379-5B7048034B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2549EBF-E4B6-4574-BCD8-9DB5F195C9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29F5471-E2A9-421D-A1B5-F0B1444CA9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44FDF24-03A1-43F3-9D9E-F744F0A1AC3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B990A8-B28C-4A4C-89AB-50C754EF6491"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C0A9A3-E628-4AA8-8676-81A8528CC174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8119BEB6-5CBC-4279-9BDE-53ADF1A55F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211959AC-B76B-4E87-8A08-7789B47F823E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10DF110-D68E-448F-8BEE-39E0B569596D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B7EDE-CA57-4FB2-8306-924FC8BD9C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A2745B-661B-489A-9140-FD63F668161A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "769931EC-F36A-4F72-A836-85B65CA815C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FE8C27-6822-4AA2-AB80-D29871C74DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB702A9-C175-477C-B4C7-30AF7DB26165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08784A81-A00C-4FBD-9A79-35D139FA3079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957A7575-FCAB-4C6B-93C8-C9065B412D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE481AA-EF32-47AD-846A-FEDE38637680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC56FD6-481A-4D60-BAF3-C988AA2395D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C691300-EA97-4F67-9C27-3C44FE22E283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D09EDA-6E8F-4535-98ED-D972940E2E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E384FD34-327C-40E7-9043-67BC69E6A52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B922D725-F31A-453B-B396-6C7FE0D4844B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB61C0DE-BAEB-4D65-91EA-D34BA0BEFC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C395148E-BF0E-4C27-B903-444238736B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C001488-5A41-45F8-A270-C184728C1614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA6EA41-CE55-4854-A5FA-4A49D1A648BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FE9EF8-936E-4351-B512-02B181C4DF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16152422-AE34-4970-95B5-440CE8821A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D34AB8-5DDD-421F-9C9D-65B6B10EDC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53143B04-BB2D-4C40-83B1-8BF8BC6547E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589775AF-21DF-4E41-BFE6-41E4FAAB0F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35D1709-6B2C-4F22-9948-F69F88F9156A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4949447-0590-4F76-A00E-1EB94FB7621F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF5B9E9-8BB5-42A6-AF87-5CEE31D2EDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518A4727-ECB7-41C4-8DF5-5375BA5281C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17207B51-0E7F-4AD2-8AC4-5A5CDC5CDEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FC99E1-57D4-4B12-BA26-090142B7CBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E0FB64-62A3-4875-AFF1-CF4D1E7BA0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "068AD0FA-306D-4C29-857C-21C6067287E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1125A525-36BA-43E1-A316-6BB33DCEC672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E488CF-A3F1-4C8B-A92A-8764FA1E6032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DEAF46-95C2-4187-AF5A-FB8CB2E6FD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C0ECA9-5A9F-47CA-B8CA-28C7324EC722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F8F89B-5A10-4EE3-A035-1CEA44B1691A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F89FCD49-0C73-4E73-9D99-38700B622A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA9AF51-F423-4167-88AB-5BF916BCC273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighttpd:lighttpd:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A21B3F82-1C1D-46EE-92EF-46F7F590957E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18886",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-9/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.lighttpd.net/trac/changeset/1005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426446/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-9/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.lighttpd.net/trac/changeset/1005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426446/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving (1) \".\" (dot), (2) space, and (3) \"/\" (slash) characters."
      }, {
        "lang" : "es",
        "value" : "RaidenHTTPD 1.1.47 permite a atacantes remotos obtener el código fuente de ficheros de guiones, incuyendo PHP, mediante peticiones artesanales conllevando caracteres (1) \".\" (punto), (2) espacio, y (3) \"/\" (barra)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raidenhttpd:raidenhttpd:1.1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395EF3CA-E60E-406F-B852-099345C346F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-15/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23616",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-15/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects RaidenHTTPD, RaidenHTTPD version 1.1.47 and may affect all previous versions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and possibly execute code by sending the server a large request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en socket/request.c en CrossFire anteriores a 1.9.0, cuando oldsocketmode está habilitado, permite a atacantes remotos causar una denegación de servicio (fallo de segmentación) y posiblemente ejecutar código enviando al servidor una petición grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossfire:crossfire:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD6785F-2AC3-4E7E-A705-62895016AA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossfire:crossfire:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DD6429-565E-4DB7-AC95-FD4A52E6017C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/poc/crossfirebof.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?r1=1.80&r2=1.81",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19044",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/poc/crossfirebof.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?r1=1.80&r2=1.81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects CrossFire versions 1.8.0 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LetterMerger 1.2 stores user information in Access database files with insecure permissions, which allows local users to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "LetterMerger 1.1 almacena información de usuario en una base de datos Access con permisos inseguros, lo que permite a usuarios locales obtener información sensible. NOTA: la proveniencia de esta información es desconocida; los detalles son obtenidos sólo de información de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peters_software:lettermerger:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AAFEA75-10DE-4CEB-A3BF-B605FCB915B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19074",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en WordPress 1.5.2, y posiblemente otras versiones anteriores a 2.0, permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el campo \"User-Agent\" en la cabecera HTTP de un comentario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19109",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-01.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0458",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-06T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and possibly other distributions, allows remote attackers to cause a denial of service (application crash) via certain crafted arguments in a DCC command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0631BD85-D548-417C-8977-2C3CF06DBEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:0.8.10rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6C085C-D887-452E-9674-D779EA9B0CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19090",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16913",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25147",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/259-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/259-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-06T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a \"/\" (forward slash) after the file extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:networkactiv:networkactiv_web_server:3.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7604D6F-DEC8-4A41-9581-AB8F418780A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18947",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-10/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networkactiv.com/WebServer.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426461/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-10/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.networkactiv.com/WebServer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426461/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartblog:smartblog:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2630E7F5-2D78-4A80-8E61-27A3F6198411"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/426498/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426498/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mb_send_mail function, allows context-dependent attackers to read and create arbitrary files by providing extra -C and -X arguments to sendmail.  NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18694",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426342/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426342/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of PHP from 4.0.x through 5.1.x",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mail function, allows remote attackers to read and create arbitrary files via the sendmail -C and -X arguments.  NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426497/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426497/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://metasploit.com/projects/Framework/exploits.html#ie_iscomponentinstalled",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.metasploit.com/projects/Framework/modules/exploits/ie_iscomponentinstalled.pm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.com/projects/Framework/exploits.html#ie_iscomponentinstalled",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.metasploit.com/projects/Framework/modules/exploits/ie_iscomponentinstalled.pm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2937B3-D034-400E-84F5-33833CE3764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.php.net/bug.php?id=37265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18694",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426339/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0772",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=37265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426339/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider safe_mode / open_basedir restriction bypass issues being security sensitive. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php",
        "lastModified" : "2008-10-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a diwan view action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dci-designs:dawaween:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "411309E7-87C7-42B8-B72F-B530AB2B1535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426622/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426622/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a BBCode url tag when using the show_post function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, some of which reference a source URL that appears to be for an unrelated issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ukiweb:ukiboard:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF54C66F-2DE6-4D57-B507-C94A0ECFD8A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forumlib.php in Johnny_Vegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:johnny_vegas:vegas_forum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF2587F-052E-4106-AA0D-9AB7B156620D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/90/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427470/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/90/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427470/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to inject arbitrary web script or HTML via the kuladi parameter ($kul_adi variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pehepe:membership_management_system:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F304D3F5-5390-40CB-91A6-51CF99C85C4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pehepe:uyelik_sistemi:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62378346-6CEF-43A2-AC3E-913937E338D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19055",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426363/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426363/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to include and execute arbitrary PHP code via a URL in the uye_klasor parameter, along with a misafir[] parameter that is set to UYE_SEVIYE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pehepe:membership_management_system:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32855267-6CAC-4252-81F0-207D97E86D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19055",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426363/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426363/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects PeHePe, Membership Management System (a.k.a Uyelik Sistemi) versions 3.0 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in HP System Management Homepage (SMH) 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9A9442-18B7-4858-AB3A-19FE272A5C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FE29FC-AD24-4C89-9AAC-9D49C54A5CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19059",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015692",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426345/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00601530",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426345/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00601530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of HP, System Management Homepage from 2.0.0 through 2.1.4.  This vulnarebility is only present in the following Windows OS environments: Microsoft Windows 2000, 2003, 2003 for x64, 2003 for Itanium and also Windows XP."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MgrLogin.asp in Addsoft StoreBot 2005 Professional allows remote attackers to execute arbitrary SQL commands via the Pwd parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:addsoft:storebot:2005:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "B9893F71-274A-4AD8-A3C0-A9E2001198C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23575",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of AddSoft, StoreBot 2005 Professional Edition."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote attackers to inject arbitrary web script or HTML via the ShipMethod parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:addsoft:storebot:2002:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "F887AF89-89B4-47BC-943C-515B84C3895D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19060",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23574",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jfacets:jfacets:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B2DB7CB-A11D-49D7-837C-47A1BFD5A542"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=154666&release_id=396824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1439037&group_id=154666&atid=792697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=154666&release_id=396824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1439037&group_id=154666&atid=792697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects JFacets versions prior to 0.2."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a \"/\" (slash) in the feed parameter to index.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426538/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426538/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to cause a denial of service (stressed file cache) by creating many files via filenames in the feed parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426538/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426538/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cross-site scripting (XSS) countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags, as demonstrated using \"<<>AAA<><>\", possibly due to nested or empty tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23816",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426538/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426538/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in mod_templatechooser in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via an unspecified attack vector that reveals the path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0554",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2006-03-07T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19083",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/bid/16921",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0804",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24999",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0555",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2006-03-07T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19083",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19108",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00003.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/bid/16922",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0804",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25000",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9932",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0741",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-07T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service (\"endless recursive fault\") via unknown attack vectors related to a \"bad elf entry address.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19108",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015724",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/23607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16925",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0804",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10518",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0883",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-03-07T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates during PAM authentication, which allows remote attackers to cause a denial of service (client connection refusal) by connecting multiple times to the SSH server, waiting for the password prompt, then disconnecting."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35F4ABE-1B0C-4195-8F99-BF993A17882B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:09.openssh.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://bugzilla.mindrot.org/show_bug.cgi?id=839",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://securityreason.com/securityalert/520",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://securitytracker.com/id?1015706",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23797",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16892",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0805",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25116",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:09.openssh.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.mindrot.org/show_bug.cgi?id=839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of OpenSSH as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0047",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27677F6-958B-44D9-8BA6-08FEEA38805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FC502B-8903-42AD-A67F-3D634423A5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F565EA22-E732-4E30-8714-D2A4B86FB924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6A80BD-16CF-4B6E-8B25-EE1714CF5B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70C10017-E80C-49C6-9C15-0577804720F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8D4D10-20AD-4842-89DE-2A5B38471AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2CCD571-3C47-4A0F-B928-74FE8700763D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A8B5EDF-F6AA-4966-A2D0-6FE46B69E1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93DF5226-960F-4882-B7F6-317EBF59ED48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=355211",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19120",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19227",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19253",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-994",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-11.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:053",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426866/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16975",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0838",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25166",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=355211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "config/config_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via the SG_HOME parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igenus:igenus_webmail:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D53A5C-C188-4DB7-9694-C58EB5FAE1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igenus:igenus_webmail:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066D79E-5043-49BD-B1B5-BA8AC7C4DB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:igenus:igenus_webmail:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DECC653-DFEA-4C53-8970-A0A97A6A9935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/igenus_202_xpl_pl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0753",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/igenus_202_xpl_pl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, exoops, and possibly other programs, allows remote attackers to execute arbitrary PHP code via the base64 tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprpc:phprpc:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F393D44E-83A8-4F0B-A90E-76173FD14D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprpc:phprpc:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C23ACA-9DA3-4F2C-AE31-4F8332EFCC11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprpc:phprpc:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F283638E-2EEF-400F-93D7-7767F2347AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00105-02262006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426193",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00105-02262006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) uname, (2) error, (3) profile or (4) the username filed parameter to the (a) Your_Account module, (5) catid, (6) sid, (7) Story Text or (8) Extended text text fields in the (b) News module, (9) month, (10) year or (11) sa parameter to the (c) Stories_Archive module, (12) show, (13) cid, (14) ratetype, or (15) orderby parameter to the (d) Web_Links module, (16) op, or (17) pollid parameter to the (e) Surveys module, (18) c parameter to the (f) Downloads module, (19) meta, or (20) album parameter to the (g) coppermine module, or the search box in the (21) Search, (22) Stories_Archive, (23) Downloads, and (24) Topics module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF48284-E8C5-40B0-BDC4-410A6514DA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECBBA16-5E1A-4918-A36F-AE85BCD2EED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6071BF91-8775-4C9C-9941-54127CF72AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7102DB-4793-4D17-911E-011E1FB11D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95254450-C577-41D8-8878-B2555CFC598E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E81A35A-84B5-4450-A501-9B1D9126587D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2006/02/multiple-cross-site-scripting-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015661",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16784",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2006/02/multiple-cross-site-scripting-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2271970-E8FD-42A0-9D29-DFBF515DBD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AEF174-AF7E-43D7-83D7-DC191786FFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C7CE3D-BF83-435D-B5E6-D3FCBAEF847C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2EB1EB-9D43-44E2-B599-D05955FFBC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D29C8-AAC7-42D6-BD2D-2B0917253086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833E4A46-5D42-4EA5-9D35-E0E07291D5EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B976F-2F26-497C-92A8-2F2FD4C41A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40CCEE5-4B68-4F45-911F-0A7089A0609D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CAAE7C-258A-47E0-B832-642C1C466EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EA6377-47E9-4421-AEF9-17A4AA43FAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4715DB-A7C5-4FA5-BB5F-25D2CF6CE2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB539382-7DB4-4D49-89BB-A87B09DC9B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE155717-B08A-4D93-95A1-A24325DF0246"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16843",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B4B32-9858-47BF-BB73-C5072A1A9022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5634A3-747D-4478-9DCA-6E24F5A44468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8024E967-8949-4367-8297-E65454CFDDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57A5AE0-90B5-410E-8878-BD514C3B7946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7EAC35-E890-444A-B070-C91382F2E242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69568B66-122B-4946-B630-2960DAA1885E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FEA4F-B1C7-4250-81FD-AC1289769348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/298958",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/298958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to \"permissions.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B4B32-9858-47BF-BB73-C5072A1A9022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5634A3-747D-4478-9DCA-6E24F5A44468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8024E967-8949-4367-8297-E65454CFDDE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16844",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B4B32-9858-47BF-BB73-C5072A1A9022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5634A3-747D-4478-9DCA-6E24F5A44468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:diagnostics:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8024E967-8949-4367-8297-E65454CFDDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57A5AE0-90B5-410E-8878-BD514C3B7946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7EAC35-E890-444A-B070-C91382F2E242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69568B66-122B-4946-B630-2960DAA1885E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FEA4F-B1C7-4250-81FD-AC1289769348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a \"narrow\" string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E432F5-6F55-43F9-9037-E0BADF323F55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346F16D1-3D7E-4BC2-872B-1EAB7D9CBCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A0D3998-BFB5-4A8D-A3F6-F805004192BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9857B8C-8B1F-4941-A282-B27251D719B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE6EF5B-4749-4E57-A45D-0751ED8F2FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A07E709-944B-445F-8230-4ADB7561C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EF68CC-0A31-498C-8DE0-7287DA9BFDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B0537A-8431-4DC0-80E3-9D5E29D98769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF6F69D-DA33-4F18-92AF-D91DED75D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F33932-0BA1-424D-85C7-1C0AD8895D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7611803-A034-4F77-A4D7-276DBBEC8137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C14BB6-6CA5-4A03-B1D4-94C976BC24EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499A9CC5-01F1-44C2-9FAC-AEE56587F36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53511CA0-E4DB-4803-9ED0-B2A6983823D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3801A6-6F0D-46D7-A4DE-2B7557757795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37166F30-B555-41EA-9507-266FF5435F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF06C-AFA7-4D19-A143-CEFABCB64E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDB6A60-2361-4111-9A5D-737D2288CD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F14C8C-90C7-48B6-8BE7-ABECE900FD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D5A5E1-B925-4A4A-A153-570153D8C4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116023C4-D356-4A9C-80A9-2FBFE9507A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF8DCD1-DB94-4605-98C5-FD579731AAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977AF0A7-F592-4118-8904-7746989F91C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19040",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vandyke.com/products/securecrt/history.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vandyke.com/products/securefx/history.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vandyke.com/products/securecrt/history.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vandyke.com/products/securefx/history.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a \";%20\" followed by encoded HTTP headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5FAC41-5C2B-4653-A757-ADBFD37E716E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E0969-971D-4D97-97EE-F901B05885DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41DF7D3-9EF1-4F5B-870E-5D1FDF095509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19085",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426449/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0810",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426449/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36356B31-5EC5-4689-92CD-883088587936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E53DA6-83A3-493A-8C98-DEA91F91D71E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-266.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426537/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426589/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vbulletin.com/forum/showthread.php?postid=1079030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-266.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426537/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426589/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vbulletin.com/forum/showthread.php?postid=1079030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of Jelsoft, vBulletin between 3.0.12 and 3.5.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_query parameter to search.php or (2) tag parameter to tags.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gregarius:gregarius:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CC83D1-EAA2-40D3-A0E6-F47BCE1C8087"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426656/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426656/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) folder parameter to feed.php or (2) rss_query parameter to search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gregarius:gregarius:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CC83D1-EAA2-40D3-A0E6-F47BCE1C8087"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426656/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426656/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_interdev:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394EC852-89B9-4246-86DB-D27A38ED29F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CDA0E2-DFBD-4EE0-80DC-76AA55ADFEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "00ACB96E-1B59-46F5-855F-2091DDB26BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "C23A9BBF-7393-410D-A216-05BAD1316E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:6.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5AA7B4-99B7-492F-B937-013D1A1B357A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:6.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "6799E715-5704-4A13-A4EF-9FC6BBF73A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:6.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "3888629B-9F0F-4675-8770-8781A66ADCA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19081",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426767/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426830/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0825",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426767/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426830/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote attackers to execute arbitrary code via unknown attack vectors related to the WA CGI.  NOTE: technical details will be released after the grace period has ended on 20060603."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lsoft:listserv:14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6691A12F-371D-45FA-922D-D026BB2CFFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lsoft:listserv:14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16931727-BA58-4E3A-9C2B-CF998CE654BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015722",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/841132",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.lsoft.com/manuals/1.8e/relnotes/LISTSERV14.5-Release-Notes.html#wasecurityalert",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/listserv_3.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426770/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/841132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.lsoft.com/manuals/1.8e/relnotes/LISTSERV14.5-Release-Notes.html#wasecurityalert",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ngssoftware.com/advisories/listserv_3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426770/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects L-Soft, Listserv (LITE and HPO) 14.4 and all prior versions that are installed with the web archive interface."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTML rendering engine in Mozilla Thunderbird 1.5, when \"Block loading of remote images in mail messages\" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-26.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426347",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a string containing a large number of characters that are escaped when Monopd produces XML output."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monopd:monopd:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F726F8-672F-4BCF-9774-08793445B00C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/monopdx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19133",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.robertjohnkaper.com/downloads/atlantik/monopd-0.9.3-dosfix.diff",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/monopdx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.robertjohnkaper.com/downloads/atlantik/monopd-0.9.3-dosfix.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the \"Remember Me login functionality\" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC268591-FDFD-42A2-887F-4F1639CAB73C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663EE640-2BE7-42FC-B848-7379C6DADA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the (1) Weblink, (2) Polls, (3) Newsfeeds, (4) Weblinks, (5) Content, (6) Content Section, (7) Content Category, (8) Contact items, or (9) Contact Search, (10) Content Search, (11) Newsfeed Search, or (12) Weblink Search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663EE640-2BE7-42FC-B848-7379C6DADA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Joomla! versions 1.0.7 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "688421F4-D71B-4ABD-8508-B2AD0B66990F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC268591-FDFD-42A2-887F-4F1639CAB73C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663EE640-2BE7-42FC-B848-7379C6DADA60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0818",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/938/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local users to obtain sensitive information such as employment and payment data.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: the vendor has disputed this vulnerability, stating that \"The kwikpay.mdb file supplied with kwikpay is a template for the database structure of user databases created by kwikpay and to store a demonstration payroll. It does not contain any sensitive user information.  When a user payroll database is opened, the encryption of the database is checked and if the database is not encrypted, the user is prompted to encrypt the database, but the choice is the customers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kwik-pay:kwik-pay_payroll:4.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEEF51B-69C4-4122-9FFD-07C613C337D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19075",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Kwik-Pay",
        "comment" : "The kwikpay.mdb file supplied with kwikpay is a template for the database structure of user databases created by kwikpay and to store a demonstration payroll. It does not contain any sensitive user information. The file is open for view by any user by design. We do not consider it to be a security vulnerability.",
        "lastModified" : "2007-02-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, possibly involving the username parameter to akarru.lib/users.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akarru:social_bookmarking_engine:0.4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DEB0C8-15E2-41BE-82CF-5A05F139803E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akarru:social_bookmarking_engine:0.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87084932-707D-4665-BCE8-516522903ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19112",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=398713&group_id=155783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16989",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=398713&group_id=155783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lurker:lurker:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703C6839-BC84-4D47-9BA8-B9DF8AC0B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lurker:lurker:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FCCB6E-D371-4908-933A-306486956A64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19136",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of Lurker from 0.1a through 0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named \"mbox\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lurker:lurker:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703C6839-BC84-4D47-9BA8-B9DF8AC0B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lurker:lurker:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FCCB6E-D371-4908-933A-306486956A64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19136",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnarability affects all verions of Lurker from 0.1a through 0.2\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lurker:lurker:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703C6839-BC84-4D47-9BA8-B9DF8AC0B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lurker:lurker:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14040404-FC1F-4BA7-B753-5D65992D6DA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19136",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all verions of Lurker from 0.1a through 2.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary SQL commands via the forums[] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525AD7D5-C94C-4BCD-8C03-B48E8BC91BB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426631/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426631/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys WRT54G routers version 5 (running VXWorks) allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g_v5:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98A579C-A78D-44B3-B12B-8EF75A2A5CFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hm2k.org/news/1141413208.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426756/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426934/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hm2k.org/news/1141413208.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426756/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426934/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:netgear_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C31523-0903-4830-999C-55F78354D461"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.hm2k.org/news/1141413208.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426756/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426863/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426934/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hm2k.org/news/1141413208.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426756/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426934/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability may affects NetGear Router models 614 and 624 (including WGR614, WGT624, WGT624SC, WGU624, and possibly others) and is most likely related to VXWorks."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-07T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E112CB5B-FBE1-4EF6-927E-96AEEB11C55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00D6C8B-2533-4BC4-93AD-87FFCBDF521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C8A9D-36BC-4C33-8873-9476804F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB261F-59CE-4C0C-91C2-C094CFB97888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CF673C-9C94-4024-8757-573462130EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF72E47-143C-47F4-B54E-7A01951C3957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5CC9A0-0EA9-494B-B726-0E514CADF6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DFD93-BA8A-49BE-9063-E40AC757708A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-08T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in dv_gbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the f parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dvguestbook:dvguestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05654D1B-A8CE-4E3C-8A7E-34D62AE1C447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/dvguestbook.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19098",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427214/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16968",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/dvguestbook.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427214/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-08T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dvguestbook:dvguestbook:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91A1324A-52FA-4CC4-9956-97EDB3DFC426"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/dvguestbook.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427214/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16968",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/dvguestbook.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427214/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-08T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "AD207FD9-066C-41D3-987A-1A8CC8BAFA40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://notlegal.ws/simplogsploit.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426769/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://notlegal.ws/simplogsploit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426769/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-08T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "AD207FD9-066C-41D3-987A-1A8CC8BAFA40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://notlegal.ws/simplogsploit.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426769/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://notlegal.ws/simplogsploit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426769/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0746",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attackers to exploit vulnerabilities that were present in CVE-2005-3627."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1CAEC5-3851-4749-AF27-E090E3C52E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19189",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19190",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19264",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015751",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060202-1.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:054",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0262.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427299/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17039",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11441",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060202-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0262.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427299/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jason Boettcher Liero Xtreme 0.62b and earlier allow remote attackers to cause a denial of service (application crash or hang) via a long argument to the connect command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_boettcher:liero_xtreme:0.56b_pack_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA023E-016C-4E30-B1F6-3C4AE4ED2750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_boettcher:liero_xtreme:0.62b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F22157-9D02-43AF-A399-B1B297212318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/lieroxxx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426864/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/lieroxxx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426864/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in (1) a nickname, (2) a dedicated server name, or (3) a mapname in a level (aka .lxl) file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_boettcher:liero_xtreme:0.56b_pack_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA023E-016C-4E30-B1F6-3C4AE4ED2750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_boettcher:liero_xtreme:0.62b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F22157-9D02-43AF-A399-B1B297212318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/lieroxxx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426864/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/lieroxxx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426864/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/426875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430357/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16971",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430357/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter and (2) other unspecified parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evo-dev:evoblog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCC8296-2FFE-4C9C-9C3D-42C2763F3687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426826/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426826/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file.  NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE.  However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en htpasswd, como se utiliza en Acme thttpd 2.25b y posiblemente otros productos tales como Apache, podrían permitir a usuarios locales obtener privilegios a través de (1) un argumento de línea de comando largo y (2) una línea larga en un archivo. NOTA: debido a que htpasswd normalmente es instalado como un programa no setuid y la explotación es a través de las opciones de línea de comando, quizás esta cuestión no debería incluirse en la CVE. Sin embargo, si hay algunas configuraciones típicas o recomendadas que utilizan htpasswd con privilegios de sudo o productos comunes que acceden remotamente a htpasswd, entonces tal vez debería ser incluido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme_labs:thttpd:2.25b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE72B09-4A62-4C57-9695-AB359F6C0A2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0547.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=31975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=41279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051562.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=thttpd&m=114153031201867&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=thttpd&m=114154083000296&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/bugtraq/2004/Oct/0359.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Nov/13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-express.com/archives/fulldisclosure/2004-10/1117.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426823/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0547.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=31975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=41279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051562.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=thttpd&m=114153031201867&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=thttpd&m=114154083000296&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/bugtraq/2004/Oct/0359.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Nov/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-express.com/archives/fulldisclosure/2004-10/1117.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426823/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function.  NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE.  However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included."
      }, {
        "lang" : "es",
        "value" : "htpasswd, como se utiliza en Acme thttpd 2.25b y posiblemente otros productos tales como Apache, podrían permitir a usuarios locales obtener privilegios a través de metacaracteres de shell en un argumento de línea de comando, lo que se utiliza en una llamada a la función del sistema. NOTA: debido a que htpasswd normalmente es instalado como un programa no setuid y la explotación es a través de las opciones de línea de comando, quizás esta cuestión debería no incluirse en la CVE. Sin embargo, si hay algunas configuraciones típicas o recomendadas que utilizan htpasswd con privilegios de sudo o productos comunes que acceden remotamente a a htpasswd, entonces tal vez debería ser incluido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme_labs:thttpd:2.25b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE72B09-4A62-4C57-9695-AB359F6C0A2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=thttpd&m=114153031201867&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=thttpd&m=114154083000296&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Nov/13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426823/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=thttpd&m=114153031201867&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=thttpd&m=114154083000296&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Nov/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426823/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter, possibly requiring a URL encoded value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:game-panel:game-panel:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A9AF58-EF47-4049-8859-CB83D495D144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:game-panel:game-panel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717EA33E-BB25-4262-9929-0D1742087800"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://notlegal.ws/gamepanel.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426825/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16979",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://notlegal.ws/gamepanel.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426825/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the email parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathan_beckett:pluggedout_nexus:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEEBD65-DBDC-4A3E-8DF0-09605C3E38B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/nexus.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19089",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/nexus.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the gamename parameter in tellafriend.php, (2) the login_status parameter in loginbox.php, (3) the submissionstatus parameter in index.php, the (4) cell_title_background_color and (5) browse_cat_name parameters in browse.php, the (6) gamefile parameter in displaygame.php, and (7) possibly other parameters in unspecified PHP scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phparcadescript:phparcadescript:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D663D5-F3D6-4AC9-952E-D3450F8F87C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19124",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426755/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16957",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426755/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to read and possibly execute arbitrary files via a .. (dot dot) in the (1) option[language] and (2) option[template] parameters, and (3) possibly other parameters, to (a) admin.php and (b) other unspecified scripts.  NOTE: the admin.php/option[language] vector can be used by remote unauthenticated attackers to include arbitrary files in conjunction with CVE-2006-1085."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-stats:php-stats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.9.1",
            "matchCriteriaId" : "B84DB8B6-05FF-4B6D-BB11-CE5CC3CBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the option[prefix] parameter in admin.php and other unspecified PHP scripts, and (2) the PC_REMOTE_ADDR HTTP header to click.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-stats:php-stats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.9.1",
            "matchCriteriaId" : "B84DB8B6-05FF-4B6D-BB11-CE5CC3CBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the option[admin_pass] parameter and setting the pass_cookie to the MD5 hash of the specified password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-stats:php-stats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.9.1",
            "matchCriteriaId" : "B84DB8B6-05FF-4B6D-BB11-CE5CC3CBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2023-11-07T01:58:31.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-1083.  Reason: This candidate is a duplicate of CVE-2006-1083.  Notes: All CVE users should reference CVE-2006-1083 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in the modify_config action in admin.php for PHP-Stats 0.1.9.1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the option_new[compatibility_mode] parameter, which is not filtered before being stored in config.php.  NOTE: this vulnerability can be exploited by remote unauthenticated attackers in conjunction with the option[admin_pass] authentication bypass vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-stats:php-stats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.9.1",
            "matchCriteriaId" : "B84DB8B6-05FF-4B6D-BB11-CE5CC3CBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Stats 0.1.9.1 and earlier allows remote attackers to obtain potentially sensitive information via a direct request to checktables.php, which lists the database table_prefix."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-stats:php-stats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.9.1",
            "matchCriteriaId" : "B84DB8B6-05FF-4B6D-BB11-CE5CC3CBFA70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/php_stats_0191_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpstats.net/forum/viewtopic.php?t=140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426762/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428614/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0742",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the \"noreturn\" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/23660",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16993",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25068",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all verison of Linux kernel 2.6.x before 2.6.15.6, and may be exclusive to Itanium systems."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHP_SELF variable is used to handle a pun_page tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C26FE-F2D3-4C1A-8D14-E4B818834703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFD4225-32F9-4D62-87C5-9632A1C03326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75787B-6156-4710-9B24-48C5763E7771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A9473E-DE15-4BE2-839D-90B55F8713EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19039",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A9473E-DE15-4BE2-839D-90B55F8713EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects PunBB version 1.2.10, and may affect all previous versions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4F04BE-1360-44A6-B73A-1F53B25645F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF16F3C8-6050-4E7A-A6EB-504DDB819044"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426699",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the pagedata subsystem of the process file system (/proc) in Solaris 8 through 10 allows local users to cause a denial of service (system hang or panic) via unknown attack vectors that cause cause the kmem_oversize arena to allocate a large amount of system memory that does not get freed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102159-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102159-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of Sun, Solaris 8.x through 10.x"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D25A56-D654-46B2-9437-2AAEE74655B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA58B6E-9EA3-43F2-BC98-8178020F687C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BB9B87-8DBB-4FF9-8773-73281C3D52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37813D54-57C8-4C41-A42D-3C7BBAFA86B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1444794B-F893-44B2-824F-24211B872C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B019F0-A728-4803-B036-14E10A5B0389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E4A501-A198-4462-8813-3D355B5BC212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC0955F-486F-41FF-ACA6-0DF4D966E800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8451E82-F170-4182-A312-70DA75F96983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6008404-9114-4BC1-A413-4A18B381E359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFF4792-5BFA-414B-BF84-A2308073E750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E555D3-1A29-4D0B-B9C7-11A7A1C6119E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C347C1F-4B87-4F7C-8E9B-A99D37E9959F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A195CF-B731-4EB6-8899-A7E6AAB14C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559355CF-7FA8-4D90-8393-90C912F571C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355967D9-475A-49AF-A3FF-E0AC3668B289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE79CF3-16A3-40FB-BD7D-5D70DEB0EE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC04CE9C-82B4-4406-823A-69A5E13ECA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6A5B3A-E57D-4574-A481-7EDA93664076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425890C2-FC96-4191-B512-6A3DB7BCE2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BABB4A4-182D-4FB1-88AD-B6D6EDAE10C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF8ED4D-D2B6-49EC-930A-16A78E729F17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015716",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21231377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21231377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datenbank_module:datenbank_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "0D918F32-6F26-46D8-A8B4-D548D4F36321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2271970-E8FD-42A0-9D29-DFBF515DBD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AEF174-AF7E-43D7-83D7-DC191786FFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C7CE3D-BF83-435D-B5E6-D3FCBAEF847C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2EB1EB-9D43-44E2-B599-D05955FFBC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D29C8-AAC7-42D6-BD2D-2B0917253086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833E4A46-5D42-4EA5-9D35-E0E07291D5EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B976F-2F26-497C-92A8-2F2FD4C41A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40CCEE5-4B68-4F45-911F-0A7089A0609D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CAAE7C-258A-47E0-B832-642C1C466EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EA6377-47E9-4421-AEF9-17A4AA43FAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4715DB-A7C5-4FA5-BB5F-25D2CF6CE2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB539382-7DB4-4D49-89BB-A87B09DC9B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE155717-B08A-4D93-95A1-A24325DF0246"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.nukedx.com/?viewdoc=17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426583",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:mod_python:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016E31BC-09DB-4B09-9501-AC6FCDECA568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19239",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015764",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewcvs.cgi/httpd/mod_python/branches/3.2.x/NEWS?rev=378945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cgisecurity.com/2006/02/07",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.modpython.org/fs_sec_warn.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16916",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.apache.org/viewcvs.cgi/httpd/mod_python/branches/3.2.x/NEWS?rev=378945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cgisecurity.com/2006/02/07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.modpython.org/fs_sec_warn.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of mod_python as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter.  NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digital_builder:nz_ecommerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C00832D-5AA4-45F6-95DD-2E384FE71CD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability most likely affects all versions of Digital Builder, NZ Ecommerce."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to (1) info_db.php or (2) database.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datenbank_module:datenbank_module:mod_2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80CD9E9-4C24-4AE3-AFE9-06E1231FE498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0033.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=17",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426583",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability may only affect Datenbank MOD 2.7 and earlier versions in a Woltlab Burning Board environment."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory parameter to index.php. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digital_builder:nz_ecommerce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C00832D-5AA4-45F6-95DD-2E384FE71CD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logit:logit:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F7C0DC-5834-4654-A060-E5DBFCC61447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logit:logit:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB572CD3-4C99-430D-8EFF-B3699E2B774B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16932",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cube engine, allows remote attackers to execute arbitrary code via long streams of input data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:cube:2005-08-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF77EB26-F5DC-43A8-9FA5-9A8508C5E91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2004-05-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4AE427-74E6-48E2-9AFE-0B7F9FB850D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2004-05-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6E48A9-4538-426F-BE37-5C9DC3FDC245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2004-11-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B368FB42-221C-4740-B0FF-CC280FAB1045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2005-05-24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7202F7BE-DA14-4DAC-BF08-72A1359DA2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2005-05-29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30FC6D9-5A9A-435B-82BE-6603DA774159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2005-06-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AE2255-2F1E-464D-B9D0-3D21AB34823A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2005-06-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC00562F-0C81-4D9F-AF51-3206FD2AD62E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2005-07-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3704D20E-0B96-4F58-B4B9-2689E371765F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2005-08-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB135963-4FEC-49B8-BFF9-E47BEAAC4E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2005-11-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5CB667-06CD-40A2-9463-8509A9497026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2006-01-31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633449AC-9851-43B1-B3C5-01BA31E32F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2006-02-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68827C4-1950-4775-B6FA-34E80E34F7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2006-02-28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D284BBF9-9862-4266-A316-24345111537B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:initial_2004-02-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "065A98DD-7900-461F-856F-D844E2720088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/evilcube-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/sauerbraten/sauerbraten/src/shared/cube.h?r1=1.7&r2=1.8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426865/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/evilcube-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/sauerbraten/sauerbraten/src/shared/cube.h?r1=1.7&r2=1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426865/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:cube:2005-08-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF77EB26-F5DC-43A8-9FA5-9A8508C5E91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2006-02-28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D284BBF9-9862-4266-A316-24345111537B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/evilcube-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426865/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16986",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/evilcube-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426865/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains \"..\" sequences and has a certain length that prevents the addition of the \".ogz\" extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:cube:2005-08-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF77EB26-F5DC-43A8-9FA5-9A8508C5E91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2006-02-28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D284BBF9-9862-4266-A316-24345111537B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/evilcube-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426865/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16986",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/evilcube-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426865/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:cube:2005-08-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF77EB26-F5DC-43A8-9FA5-9A8508C5E91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauerbraten:sauerbraten:2006-02-28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D284BBF9-9862-4266-A316-24345111537B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426865/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426865/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the showimage parameter in index.php; and the (2) USER_AGENT, (3) HTTP_REFERER, and (4) HTTP_HOST HTTP header fields as used in the book_vistor function in includes/functions.php.  NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49737B14-809D-4700-AF4C-7712D02EE391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C7C61B-362D-4784-BACB-32FBACF20C73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.pixelpost.org/showthread.php?t=3535",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426764/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16964",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.pixelpost.org/showthread.php?t=3535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426764/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "These vulnerabilities may affect all versions of Pixelpost."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function.  NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49737B14-809D-4700-AF4C-7712D02EE391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C7C61B-362D-4784-BACB-32FBACF20C73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.pixelpost.org/showthread.php?t=3535",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426764/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16964",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.pixelpost.org/showthread.php?t=3535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426764/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability may affect all versions of Pixelpost."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) message, (2) name, (3) url, and (4) email parameters when commenting on a post.  NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49737B14-809D-4700-AF4C-7712D02EE391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C7C61B-362D-4784-BACB-32FBACF20C73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.pixelpost.org/showthread.php?t=3535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426764/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.pixelpost.org/showthread.php?t=3535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426764/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nmdeluxe:nmdeluxe:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1585670E-CBB9-4DF8-9599-575D935224B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/93/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nmdeluxe.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428002/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/93/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nmdeluxe.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428002/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects NMDeluxe versions 1.0 and previous.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nmdeluxe:nmdeluxe:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1585670E-CBB9-4DF8-9599-575D935224B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/93/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nmdeluxe.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428002/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/93/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nmdeluxe.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428002/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affcts NMDeluxe versions 1.0 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: it is not clear whether this report is associated with a specific product.  If not, then it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:totalecommerce:totalecommerce:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6093C860-F325-4F3B-AED6-BDD75F75B159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19103",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=18",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426765/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426765/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aztek_forum:aztek_forum:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91FDD-2582-4E67-BAA6-4B4EA4114E02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19096",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23610",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426650/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16938",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426650/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a \"*/*\" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aztek_forum:aztek_forum:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91FDD-2582-4E67-BAA6-4B4EA4114E02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23611",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426650/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16938",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426650/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aztek_forum:aztek_forum:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF91FDD-2582-4E67-BAA6-4B4EA4114E02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23612",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426650/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16938",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426650/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D065C6-34FF-47E5-AF1E-E342D29EB188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426973/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426973/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Loudblog versions 0.41 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a .. (dot dot) and trailing %00 (NULL) byte in the (1) template and (2) page parameters in (a) index.php, and the (3) language parameter in (b) inc/backend_settings.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D065C6-34FF-47E5-AF1E-E342D29EB188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426973/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426973/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Loudblog versions 0.41 and previous."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:chil:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B685201F-1FFE-4D33-89F1-DA204B1B788D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:mscapi_csp:5.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A57D5F39-2B2F-4CB5-94AC-4D2CE4437104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:mscapi_csp:5.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE0D7EA-B2E0-4E49-B226-16D91DE67426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:ncipher_software_cd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243E6982-7B0B-43AB-B6B1-E75848FD5AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19137",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015719",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ncipher.com/resources/95/sa12_insecure_generation_of_diffiehellman_keys",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427146/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17006",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ncipher.com/resources/95/sa12_insecure_generation_of_diffiehellman_keys",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427146/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:ncore:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E289D943-C1D9-4993-BEDA-938A07D3C7D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19137",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015718",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ncipher.com/resources/96/sa13_cbcmac_iv_misleading_programming_interface",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427150/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17011",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ncipher.com/resources/96/sa13_cbcmac_iv_misleading_programming_interface",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427150/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:dse200_document_sealing_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD964801-9635-437D-9260-84F16619FC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:ncore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA410AE-0FC0-46DC-B89A-651DEDA51622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:nforce:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6252FF68-DB64-4BEC-86D9-A8517B0F9D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:securedb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6456DCB1-209C-4F63-83D0-1E73CC85F788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncipher:time_source_master_clock:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48A7766-4B50-4C25-8786-23DD88AFB7DB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ncipher:nethsm:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B802C8-58F9-4A03-BC1C-E2DA55CF1F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ncipher:nethsm:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450BD00-9BCC-4E0F-83F9-BA5F0E293367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ncipher:nethsm:2.1.12_cam5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A5415F-6D6E-4B08-8073-7462E82520C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ncipher:nshield:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C008CC6B-6F9A-4541-97C5-7ED7C20349C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ncipher:payshield:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D0EB90-3ADD-4038-91AB-AB76C5910951"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19137",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015718",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ncipher.com/resources/97/sa14_presence_of_flaws_in_firmware_security",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427151/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17012",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ncipher.com/resources/97/sa14_presence_of_flaws_in_firmware_security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427151/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T13:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in bmail before Aardvark PR9.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving GBK character sets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmail:bmail:pr9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF8F122-BEDE-449F-AA53-82FF9D19335C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19147",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=144412&release_id=399256",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=144412&release_id=399256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0743",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-09T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:log4net:1.2.9_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E3B48E-81B1-469D-8F9B-23CD971AC955"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issues.apache.org/jira/browse/LOG4NET-67",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22932",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/23905",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0955",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.apache.org/jira/browse/LOG4NET-67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. Red Hat Enterprise Linux 2.1, 3, and 4 do not include log4net.",
        "lastModified" : "2006-11-22T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, which allows remote authenticated users to obtain the full pathname, which is leaked in a PHP error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netenberg:fantastico_de_luxe:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FEA113-975A-4252-9418-64F11FF98E32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA10E29-1DDD-44D8-A7D9-74BE0315CE4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/426957/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426957/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) its_url parameter in the documents page and (2) url parameter in the send_write page of (a) index.php; (3) subject, and (4) images parameters to (b) calendar.php; (5) bid, (6) replying_msg, (7) subject, (8) body, and (9) mid parameters to (c) forums.php; (10) subject and (11) message parameters to (d) inbox.php; (12) subject_color and (13) email parameters to (e) lostpassword.php; and the (14) c_name, (15) content_inicial, and (16) cid parameters to (f) mycontents.php.  NOTE: the calendar.php/day vector is already subsumed by CVE-2006-0220, and the calendar.php/month, calendar.php/year, and search.php/q parameters for calendar.php are already subsumed by CVE-2004-2511."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE39E96D-B870-49FB-8C7C-7E829BA916B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0D7706-EEB2-4898-A0EA-7BD198965E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356E5CEC-CCBD-4438-992A-29B53F3F6A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389B778A-EB0A-4BEC-9023-2190BCDAB746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27F4000-ED33-48F9-92BA-2629C5BAD709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7A0D86-BA93-4889-9242-A535C8F53E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57026D15-982E-4816-A4CB-960852D7006F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79713BBA-FC4F-4445-B888-656A4DF6C2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1D9D8F-FD72-4B51-817A-7A807750D3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156DC7CD-FFEA-4225-BE58-6DEFEDCB1730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92241B71-C6B6-4B85-96A8-726CC04E3F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F26F19B-4F47-475E-AD58-D8964C0BF8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC2BC46-D988-4502-9C35-139992142043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427175/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427175/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the query string to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED757216-0908-4BB5-B770-A03A47993DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-277.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015726",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426759/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16961",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-277.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426759/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2ksoft:d2kblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ECD60AC-1B52-4BFC-809D-F74E9CB64BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2ksoft:d2kblog:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A00764A-C898-4ED3-8C0D-6A656FB59936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2ksoft:d2kblog:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487F4FC5-FD1D-46DF-9577-5985D02B79F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2ksoft:d2kblog:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F279ADC7-002C-4787-841E-D302787C7AE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19177",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23771",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427103/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17035",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427103/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2ksoft:d2kblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ECD60AC-1B52-4BFC-809D-F74E9CB64BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2ksoft:d2kblog:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A00764A-C898-4ED3-8C0D-6A656FB59936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2ksoft:d2kblog:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487F4FC5-FD1D-46DF-9577-5985D02B79F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2ksoft:d2kblog:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F279ADC7-002C-4787-841E-D302787C7AE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19177",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427103/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427103/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute arbitrary code via a long USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revilloc_solutions:revilloc_mailserver:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3958A07-0938-48D6-9131-5F4AB851BA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revilloc_solutions:revilloc_mailserver:proxy_1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE194C9-F4B9-4E51-A223-34F0148F6D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0910.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19119",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.morx.org/rev.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23735",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427192/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16997",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0910.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.morx.org/rev.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427192/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including (1) upd_vers.cfg, (2) incavi.avm, and (3) unspecified drivers, which might allow local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grisoft:avg_antivirus:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9876E4EA-9C93-4B3F-8E49-C34BB3CF5A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grisoft:avg_antivirus:7.0.251:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2AD8F3-96E4-4F2F-87A2-786EE0672930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grisoft:avg_antivirus:7.0.323:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5188CBC-298E-4F5A-A817-2DB05B178D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grisoft:avg_antivirus:7.1.308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38FC89B-5846-4693-A589-02C27E50A7F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0631.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19118",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dslreports.com/forum/remark%2C15601404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16952",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0631.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dslreports.com/forum/remark%2C15601404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTE_ADDR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C31C2E-4437-44AB-A464-5D79D907BB34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://gallery.menalto.com/gallery_2.0.3_released",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00106-03022006",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://gallery.menalto.com/gallery_2.0.3_released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00106-03022006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630262DD-0577-4655-B558-3819019A6F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBC419B-13A6-4343-8123-85D47107D5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C31C2E-4437-44AB-A464-5D79D907BB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A43A4-F48B-4780-9F4C-1006F8963FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54931180-0CCA-46B2-B139-EDC35FD7D87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831E6EDF-1466-4EE1-8987-6580DC80712D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF8B06-63F6-49FE-B98C-4EDCD95A997E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB5079E-8FEA-427F-8004-150AD4827C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75B75A-5016-4503-A1A9-0B5BFA439C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8620FD-82E4-4877-8C5A-A95D753FE9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC0225C-6E32-452B-A7E2-0CA91D9028C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gallery.menalto.com/gallery_2.0.3_released",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00106-03022006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16940",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gallery.menalto.com/gallery_2.0.3_released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00106-03022006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-09T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630262DD-0577-4655-B558-3819019A6F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBC419B-13A6-4343-8123-85D47107D5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C31C2E-4437-44AB-A464-5D79D907BB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A43A4-F48B-4780-9F4C-1006F8963FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54931180-0CCA-46B2-B139-EDC35FD7D87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831E6EDF-1466-4EE1-8987-6580DC80712D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF8B06-63F6-49FE-B98C-4EDCD95A997E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB5079E-8FEA-427F-8004-150AD4827C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75B75A-5016-4503-A1A9-0B5BFA439C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8620FD-82E4-4877-8C5A-A95D753FE9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC0225C-6E32-452B-A7E2-0CA91D9028C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gallery.menalto.com/gallery_2.0.3_released",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00106-03022006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gallery.menalto.com/gallery_2.0.3_released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00106-03022006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0040",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-10T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a text e-mail with a large number of URLs, possibly due to unknown problems in gtkhtml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85DCC013-7723-4761-9009-2F95FE2593BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19094",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426452/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0801",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426452/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015622",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY77624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY77638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY77624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY77638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekinboard:ekinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970D5C94-E0CB-43F2-8FF4-449FAC3E5766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/88/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19045",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ekinboard.com/forums/v1/viewtopic.php?id=469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ekinboard.com/patch_for_1.0.3.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427073/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16861",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/88/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ekinboard.com/forums/v1/viewtopic.php?id=469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ekinboard.com/patch_for_1.0.3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427073/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekinboard:ekinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970D5C94-E0CB-43F2-8FF4-449FAC3E5766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/88/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19045",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ekinboard.com/forums/v1/viewtopic.php?id=469",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ekinboard.com/patch_for_1.0.3.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427073/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16861",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/88/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ekinboard.com/forums/v1/viewtopic.php?id=469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ekinboard.com/patch_for_1.0.3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427073/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the comment_title parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6E9A08-F938-4E3F-BA68-E307E839335B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kiki91.altervista.org/exploit/bitweaver_1.2.1_XSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kiki91.altervista.org/exploit/bitweaver_1.2.1_XSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute arbitrary SQL commands via the MainID parameter. NOTE: the SubjectID vector is already covered by CVE-2005-4729."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC56F3-CA23-4875-99E7-8317617DA419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426874/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16955",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426874/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script or HTML via the UserID parameter to (1) comment.php or (2) contact.php.  NOTE: the profile.php/UserName vector is already covered by CVE-2005-2441."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC56F3-CA23-4875-99E7-8317617DA419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426874/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426874/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in CyBoards PHP Lite 1.25, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to (1) post.php and possibly (2) process_post.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_smith:cyboards_php_lite:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7D684B-E316-4964-BDE3-9898DFACD80E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/91/description.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gold-sonata.com/forums/read.php?board=1&id=17271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427623/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/91/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gold-sonata.com/forums/read.php?board=1&id=17271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427623/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to search.php or (2) username parameter to comments_do.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sblog:sblog:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978C6026-F10C-4EBF-93DE-03DDD2285FF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kiki91.altervista.org/exploit/sBlog_0.72_xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19151",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kiki91.altervista.org/exploit/sBlog_0.72_xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the PostScript file interpreter code for Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allows attackers to cause a denial of service via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c65:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "26FF57E0-2C83-417D-BAF4-B40D95B5AEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c65:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.0715",
            "matchCriteriaId" : "0468A2B2-4528-42E6-B44E-0F0094B526FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c75:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "0BF560CD-AF08-4D9D-BC58-7F4E15E5CCF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c75:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.0715",
            "matchCriteriaId" : "7653E8A6-3BE4-46A1-802D-4EB8D43C8FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c90:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "DCB055B9-EB6F-4353-97DB-B7D84E6727F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c90:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.0715",
            "matchCriteriaId" : "C61B4F4C-A01E-4312-A8F4-13C65CE37844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_65:*:*:pro:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "194B5E6D-74B3-4534-8B50-788FEC36AF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_65:*:*:pro:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.0715",
            "matchCriteriaId" : "A49AE7C8-253F-4994-B588-ED13AA033329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_75:*:*:pro:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "17034E44-E128-4583-9157-25C13A13A628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_75:*:*:pro:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.0715",
            "matchCriteriaId" : "B39E38EF-9B58-4BFB-8EE5-FF3BBF46AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_90:*:*:pro:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "08D06A21-76EE-49D9-8EAF-BCFA119A6955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_90:*:*:pro:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.0715",
            "matchCriteriaId" : "09D20688-A9BF-4802-B37A-3C66A800B7FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015738",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/23724",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17014",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0857",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25172",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/19146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/23724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will (1) \"navigate through the directory\" or (2) a \"file sent to expose TCP/IP ports\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c65_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "3990D0EA-68B9-46C3-A2AC-2970F7DE56EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c65_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "1AF27E12-AF64-4375-9179-4B67D93223BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515AA8E2-979F-4029-8266-161042FC1373"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c75_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "5622C685-2A88-47FD-86F0-74F7F37B94C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c75_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "64D2DE23-49FC-4C44-9093-C5FF16F96C26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F89EFA-9E63-4C8B-B6CF-C7F643276297"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c90_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "2FDB3F54-0B7C-4416-AAB1-05FCBE162973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c90_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "FE102A83-B93A-4AA5-976F-93A8FE3407D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DE0A31-AECB-4E83-9868-77E59B6FDE87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_65_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "B04761D4-8599-4138-B5D8-B0AF31C1E20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_65_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "536C933B-861D-44F8-9C25-F1C88E7628B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15799164-2121-4045-9305-9D142021D418"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_75_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "07982BB5-1666-458B-84B4-89066CAD4345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_75_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "8C2142D7-74D9-4349-8EB6-E5AAB93CA705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFA93FE-EE4A-4E4C-BF99-4AF901D5A3FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_90_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "9B2D1781-6879-4989-A68B-5E40A023CFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_90_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "5DB10EBC-080B-4BFA-BA80-B47FA04285BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E08F806-1E3A-426B-B7E0-37B0C774D44F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015738",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/23725",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/23726",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17014",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0857",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25173",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25174",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/19146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/23725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/23726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the web server code in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allows remote attackers to cause a denial of service (memory corruption) via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c65_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "3990D0EA-68B9-46C3-A2AC-2970F7DE56EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c65_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "1AF27E12-AF64-4375-9179-4B67D93223BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515AA8E2-979F-4029-8266-161042FC1373"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c75_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "5622C685-2A88-47FD-86F0-74F7F37B94C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c75_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "64D2DE23-49FC-4C44-9093-C5FF16F96C26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F89EFA-9E63-4C8B-B6CF-C7F643276297"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c90_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "2FDB3F54-0B7C-4416-AAB1-05FCBE162973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c90_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "FE102A83-B93A-4AA5-976F-93A8FE3407D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DE0A31-AECB-4E83-9868-77E59B6FDE87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_65_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "B04761D4-8599-4138-B5D8-B0AF31C1E20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_65_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "536C933B-861D-44F8-9C25-F1C88E7628B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15799164-2121-4045-9305-9D142021D418"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_75_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "07982BB5-1666-458B-84B4-89066CAD4345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_75_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "8C2142D7-74D9-4349-8EB6-E5AAB93CA705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFA93FE-EE4A-4E4C-BF99-4AF901D5A3FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_90_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "9B2D1781-6879-4989-A68B-5E40A023CFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_90_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "5DB10EBC-080B-4BFA-BA80-B47FA04285BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E08F806-1E3A-426B-B7E0-37B0C774D44F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015738",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/23727",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17014",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0857",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25175",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/19146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/23727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the ESS/ Network Controller in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, causes the Immediate Image Overwrite feature to fail after a power loss, which could leave data exposed to attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c65_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "3990D0EA-68B9-46C3-A2AC-2970F7DE56EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c65_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "1AF27E12-AF64-4375-9179-4B67D93223BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515AA8E2-979F-4029-8266-161042FC1373"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c75_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "5622C685-2A88-47FD-86F0-74F7F37B94C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c75_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "64D2DE23-49FC-4C44-9093-C5FF16F96C26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F89EFA-9E63-4C8B-B6CF-C7F643276297"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c90_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "2FDB3F54-0B7C-4416-AAB1-05FCBE162973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:copycentre_c90_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "FE102A83-B93A-4AA5-976F-93A8FE3407D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:copycentre_c90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DE0A31-AECB-4E83-9868-77E59B6FDE87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_65_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "B04761D4-8599-4138-B5D8-B0AF31C1E20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_65_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "536C933B-861D-44F8-9C25-F1C88E7628B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15799164-2121-4045-9305-9D142021D418"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_75_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "07982BB5-1666-458B-84B4-89066CAD4345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_75_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "8C2142D7-74D9-4349-8EB6-E5AAB93CA705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFA93FE-EE4A-4E4C-BF99-4AF901D5A3FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_90_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.001.02.073",
            "matchCriteriaId" : "9B2D1781-6879-4989-A68B-5E40A023CFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_pro_90_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.001.02.074",
            "versionEndExcluding" : "1.001.02.715",
            "matchCriteriaId" : "5DB10EBC-080B-4BFA-BA80-B47FA04285BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_pro_90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E08F806-1E3A-426B-B7E0-37B0C774D44F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015738",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/23728",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0857",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25176",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/19146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/23728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redblog:redblog:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C3F687-96FF-499D-A22C-B84071BD5B52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.x128.net/redblog-05-remote-sql-injection.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.x128.net/redblog-05-remote-sql-injection.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATH_INFO environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336C8A4D-C6CA-4325-8398-CCCFAAC850F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F366EFE3-EED4-422D-826C-134F9B8492B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66E9BF4-F534-4394-8286-009FA352BD6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4318740-E649-41E3-B9DB-C6055C8AA3D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6A330A-3FA7-4152-8630-9E90B6DE9C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9B9292-79A0-4596-856C-073F3EBA8113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F074F1C-32E4-4CE8-A8A4-4372BE59CD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FD7A89-6F5F-4FC7-971F-066A68E9891C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B7FF0B-779C-4340-9CA7-06CA50306CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD6BE7C-4E13-42B4-A5FA-5105F4B95DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6712972-1C36-42C9-A835-C4ED20302DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:qmailadmin:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E16E9422-EBE3-483F-82A8-84465BBB42D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/qmailadmin/qmailadmin/qmailadmin.c?r1=1.6.2.10&r2=1.6.2.11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=6691&release_id=395211",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16994",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/qmailadmin/qmailadmin/qmailadmin.c?r1=1.6.2.10&r2=1.6.2.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=6691&release_id=395211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Ravenous Web Server before 0.7.1 allows remote attackers to access arbitrary rvplg files, with unknown impact."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solido_systems:ravenous_web_server:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8613971A-DC22-4C2F-8723-D165D1777A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solido_systems:ravenous_web_server:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339C82E8-EB1B-4FF0-8F01-4E104B2A5B5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solido_systems:ravenous_web_server:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE58C9A-D1E4-4E15-9D92-32DAB6D865A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solido_systems:ravenous_web_server:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B9893C-BCCA-4848-B38B-54DE91A29435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solido_systems:ravenous_web_server:0.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDF974B-0652-47D9-9701-847002EC5E01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solido_systems:ravenous_web_server:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7E8E1E-3388-4FC0-9275-6BA9031708A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solido_systems:ravenous_web_server:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D972CFD-4592-4DDB-BBE2-4C254099F99D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=131871&release_id=399092",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=131871&release_id=399092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FTPoed Blog Engine 1.1 allows remote attackers to inject arbitrary web script or HTML via the comment_body parameter, as used by the comment field, when posting a comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftpoed:ftpoed_blog_engine:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD1390C-7FC6-4775-91FB-91DCEB38BCFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426828/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426828/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via (1) the user parameter in deleteuser.php and (2) the hits parameter in viewuser.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_ravenscroft:hithost:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE922AA-03DA-448A-8766-300876E73DB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19155",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426931/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426931/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cor_entertainment:alien_arena_2006:gold_5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B9FA23-FF68-4D86-82CC-26D913137EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/aa2k6x-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426984/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/aa2k6x-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426984/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Cmd_Say_f function in g_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code by sending a long message to the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cor_entertainment:alien_arena_2006:gold_5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B9FA23-FF68-4D86-82CC-26D913137EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/aa2k6x-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426984/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/aa2k6x-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426984/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers (possibly authenticated) to cause a denial of service (application crash) via a long skin, weapon, or model name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cor_entertainment:alien_arena_2006:gold_5.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B9FA23-FF68-4D86-82CC-26D913137EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/aa2k6x-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426984/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/aa2k6x-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426984/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peercast:peercast:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1215",
            "matchCriteriaId" : "D05EF4FE-FA8C-4F4C-B202-A3C8E90A7FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peercast:peercast:0.1211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16CA1E34-E2ED-4319-BAF7-FC8F1909D63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peercast:peercast:0.1212:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0742F3DC-F026-4DB7-A5AE-953D3BFF92A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200603-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.infigo.hr/in_focus/INFIGO-2006-03-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.peercast.org/forum/viewtopic.php?t=3346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427160/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17040",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0900",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200603-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infigo.hr/in_focus/INFIGO-2006-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.peercast.org/forum/viewtopic.php?t=3346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427160/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the xrms_file_root parameter, which is not initialized before use."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3012FBFA-B0A6-407F-AADB-F4AEA6080798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB6B7DE-D724-43FE-BECF-73E7E778A872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228741CF-B9B1-4025-8325-66F10CC75748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C0CBE-9AB2-4723-B996-1BE7D7A2DDBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owl:owl_intranet_engine:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D99C7E0-66D3-4E38-B5EB-153067BB164B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Tenes Empanadas Graciela (TEG) 0.11.1, automatically appends an _ (underscore) to the end of duplicate nicknames, which allows remote attackers to cause a denial of service (application crash) by creating multiple users with long, identical nicknames, which triggers an off-by-one error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teg:tenes_empanadas_graciela:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F45849-1ECF-4113-892D-0D9738C6C375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/tegob1-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16982",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/tegob1-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m_phorum:m_phorum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA296826-BCBF-4A56-89DD-7CDBFE5360C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/mphorum.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19121",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityvulns.com/Ldocument750.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityvulns.com/source13951.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427165/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/477253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/mphorum.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityvulns.com/Ldocument750.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityvulns.com/source13951.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427165/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/477253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m_phorum:m_phorum:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA296826-BCBF-4A56-89DD-7CDBFE5360C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19121",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load parameter, when performing a Shoutbox action through Invision Power Board (IPB)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:d2-shoutbox:d2-shoutbox:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A962EB3-D7A1-4657-8BDB-3B6FCAFD5129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16984",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-10T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIG[script_path] variable.  NOTE: 2.1.4 was also reported to be vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B557345B-5A7F-43EC-9401-F355E5A2FF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F8C834-8E31-4A54-BD85-64D808A38007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9D6DB1-5734-45C3-8957-7876007F320A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sx02.coresec.de/advisories/152.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sx02.coresec.de/advisories/152.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in (1) login.asp and (2) default.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manas_tungare:site_membership_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BA07BC-C47E-4BA7-B811-6E497B2A3D57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.manastungare.com/projects/site-membership/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.manastungare.com/projects/site-membership/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to execute arbitrary SQL commands via the Username parameter in login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manas_tungare:site_membership_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BA07BC-C47E-4BA7-B811-6E497B2A3D57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.manastungare.com/projects/site-membership/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.manastungare.com/projects/site-membership/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Subject field (possibly messaggio parameter) when posting a new message in post.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adp:adp_forum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5BCDE54-3AEA-4D34-99B8-3A2B87011D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/adpforum2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427171/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/adpforum2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427171/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service (application crash) via a crafted IMAP LOGIN command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58ECCE69-EAB9-427E-8922-F463E184C9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E50A0F-7AFF-4F17-8833-839DDBD538C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9063B23B-E585-41E4-98FF-DF18602C6E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB993B9-0CF5-4E71-A612-F3033F4F202B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B079207-FAF3-4FE2-B420-342440958C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A82C0BC-50D5-4FAC-A654-387B49CB7047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC1748E-32F0-4144-A597-89E8B8705FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C92F3B-23E3-4978-89AA-FC17B8EDF580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1FA201-CBCF-4D61-9848-F661A16EBEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2154DF-2306-4E8B-B78A-1BF20E697157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C4389A-4BF4-4C38-8FF5-72B92548EFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67230E76-2C30-4038-BC5B-BAC02EDDFAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:5.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAEA1EB3-5F4F-40D6-833C-225AC348760D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC515E75-119E-4CB9-985E-00E6A9349178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA7CEE3-7D36-4F9D-8AC6-3F4C55D360CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937A6092-48C9-4721-B069-0B46D3520E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38A0AAC-ACA8-44D3-B36A-741D01BE166F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AE0CAA-B5A4-4E3A-B997-A2858E88CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AC0D46-2096-4006-8FED-A67AFCE2ED98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F931B5E-6F02-48F6-8DAB-C0D796DFC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B391EF70-D407-4087-96CF-B925CA2799B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D64B85-51A2-47BC-94A2-8C9980CC573D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AB197E-4F2E-4976-B6F7-17EB8A8BFBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.1.3_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "402EE4C7-77D0-4C06-8407-9F69F4059890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19150",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/kms_history.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427471/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/kms_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427471/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0557",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the get_nodes function, which has unknown impact and attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.16",
            "matchCriteriaId" : "056A50C9-ACBC-4499-8565-ECE377699795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lkml.org/lkml/2006/2/27/355",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHBA-2007-0304.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://securitytracker.com/id?1015752",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.osvdb.org/23895",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/bid/16924",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=184510",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25204",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9674",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://lkml.org/lkml/2006/2/27/355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHBA-2007-0304.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=184510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efs_software:efs_web_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C140B98-5FFD-4305-BC73-62AA81946317"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19178",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427158/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427158/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efs_software:efs_web_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C140B98-5FFD-4305-BC73-62AA81946317"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427158/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427158/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efs_software:efs_web_server:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C140B98-5FFD-4305-BC73-62AA81946317"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427158/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427158/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a ..  (dot dot) in the op parameter, as demonstrated by inserting malicious Email parameters into list.gtdat, then accessing list.gtdat using the op parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodez:nodez:4.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0F14FF-F514-4B58-9F01-507506ED5FCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/nodez.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/nodez.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTML via the op parameter.  NOTE: it is possible that this issue is resultant from the directory traversal vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodez:nodez:4.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0F14FF-F514-4B58-9F01-507506ED5FCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/nodez.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/nodez.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodez:nodez:4.6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0F14FF-F514-4B58-9F01-507506ED5FCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/nodez.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/nodez.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors relating to \"handling EXIF data.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EDDA58-22F6-456A-986D-6A58FD818F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C907D889-8DD7-4542-A74E-C318271E5812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E98CDA-E813-427A-944A-2A768F075021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E589DA1C-7428-48A3-A115-3168F99584E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B197CF8-3729-414F-8BAA-BC709DEAA140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5470BA9-F1F1-484B-B4D2-328D98483D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D11132-69EC-40DD-9D62-CC2B7DF7C344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFDB3E-AB07-4E4C-A065-617A39505EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-10-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD529E-86A6-43A0-AF97-ADD7C8C2BAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2330E8-22BA-45AD-841B-4230CEED6A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD67EB1-A54F-44CC-ACE6-3D5ADA3F473F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47324B2B-AA17-4714-9DFC-FC5C0CF9D452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14882F1-2073-4DF4-8ECD-D4B9C39EAA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE154F-A880-4053-AA65-C02DD9AA1BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151742B9-2357-4A12-B839-09ADDF30E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0296920B-64B6-4492-8B54-D11F8CFA7F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E00178-D993-479A-BBC8-8AD9BDF69129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-05-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFB944D-FA24-4B9C-8543-656CFDB6163A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11872728-EE8D-4E4B-9E2F-C658905B5045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F542C2-7808-42AD-9A20-85BBBFD27DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4277D9B-E1FF-4285-A766-993B1C38CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A781BA-0949-456E-A529-9CA157CD3F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EE1AA-8C74-48F7-8E7D-9668933C7D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19186",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.splitbrain.org/wiki%3Achanges",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wiki.splitbrain.org/wiki%3Achanges",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Monotone 0.25 and earlier, when a user creates a file in a directory called \"mt\", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the \"MT\" bookkeeping directory, which could allow context-dependent attackers to execute arbitrary Lua programs as the user running monotone."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monotone:monotone:0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA0B97E-A9E6-4892-905C-96B5F48B5C1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnu.org/archive/html/monotone-devel/2006-03/msg00062.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.gnu.org/archive/html/monotone-devel/2006-03/msg00062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-13T12:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE3B4BE-7B43-47C7-823A-C019DF12498F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://usn.ubuntu.com/262-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://usn.ubuntu.com/262-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-13T19:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:dwarf_http_server:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C397EB-F084-4F17-B959-B8E075C7A00C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18962",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-13/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427478/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-13/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427478/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-13T19:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:dwarf_http_server:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C397EB-F084-4F17-B959-B8E075C7A00C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18962",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-13/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427478/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-13/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427478/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-13T19:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with \"..\" (dot dot) sequences in a filename."
      }, {
        "lang" : "es",
        "value" : "unalz 0.53 permite a atacantes asistidos por usuario sobrescribir archivos arbitrarios a través de un archivo ALZ con una secuencia \"..\" (punto punto) en un nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unalz:unalz:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E4DF9C-395D-47D9-8279-02A8EC696A84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114226632422033&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19063",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-16/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427475/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0938",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114226632422033&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-16/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427475/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0049",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-03-13T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E054978B-8466-4D12-B7DC-7E72CC57F0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38F964B-C5D1-4177-BD31-7AB4083CC431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF7811A-B254-4829-AED2-C70BD5C82592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72ED862B-6278-41ED-9619-115E6552AFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1869E888-E83C-4A62-AA84-F2C9F2AF12FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D51820-D735-44FC-95BB-A473FFDE9D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FB2C28-0E4D-4AE3-A2CC-0197FE578074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2224AF-EA7B-4A3D-8B23-7FC59D66E611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2B3B44-941E-4007-B58A-16E85B87CB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A642D7-007E-479D-963E-A74AAE195A54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86144B81-D321-4ECA-937F-FFA8A043FCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A93CAE1-0DFC-43E1-997D-22CDC338D3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9896332E-819B-4392-B704-B143DBBE90A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B641ED5-4326-43E7-BF42-982B44478A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CAFD24-E53F-488C-BD9F-BE31D30828AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3628A-3BDD-4C6F-AE7D-C81FC3EE1630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74589745-A9A6-44DB-B4F0-B61B663ECA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2B99CB-5950-42E7-ACD5-38457CBE9095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81AF47A-56BA-4D90-A4D4-D7A37333A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55DBB73-EF6C-4C46-9E5A-7C35D7FD190C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C014A-236B-44CF-A92D-B4D6392FF9A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F412ECF0-DA84-47B8-98FD-06019C9E63E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE04D970-A467-4648-B99C-895BA8BEE79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:privacy_guard:1.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79DC753-35CB-46FA-BDE4-650BD1730505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000216.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Mar/0003.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19173",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19197",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19203",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19231",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19232",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19234",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19244",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19249",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19287",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/450",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/568",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015749",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-993",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-08.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:055",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/23790",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00021.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0266.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427324/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433931/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17058",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.476477",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0014",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0915",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25184",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10063",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/264-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Mar/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0266.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427324/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433931/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.476477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/264-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote attackers to cause a denial of service (application crash) via a packet with a large command length value, which leads to an invalid memory access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enet:enet_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "jul_2005",
            "matchCriteriaId" : "72E3177B-B3E4-4206-ABD6-6A553FFDFABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/enetx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19208",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427465/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/enetx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427465/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The enet_protocol_handle_send_fragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote attackers to cause a denial of service (application crash) via a packet fragment with a large total data size, which triggers an application abort when memory allocation fails."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enet:enet_library:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E93D572-C916-462E-A6E0-5C6DC017D827"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/enetx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19208",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427465/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/enetx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427465/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) from and (2) help parameters to (a) index.php; (3) action, (4) page, (5) debug, (6) help, (7) username, or (8) password parameters to (b) login.php; the (7) help parameter to (c) pageindex.php; or (8) help parameter to (d) recentchanges.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE80A27-696F-43B2-91F9-4A9C56414C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2FC6ED-6F45-4BDF-A1A7-B4ABEF2620A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_barrett:qwikiwiki:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467C28D8-7790-4081-B696-E65DFCB3E434"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kiki91.altervista.org/exploit/qwikiwiki_1.0.5_xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19182",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17064",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kiki91.altervista.org/exploit/qwikiwiki_1.0.5_xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macrovision:safedisc:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464B7EE8-CDDC-4A5D-BE9C-1E013733EB01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/427410/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427410/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\\prc registry value, for which all users have Read permission, which allows local users to bypass the product's blocking functionality by decrypting the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comvigo:im_lock:home_2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894C6B4E-8F4F-4CA7-91E0-B38E81E891B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comvigo:im_lock:professional_2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1A5FD1-4E92-4D30-9327-ABDB113E770C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19140",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426935/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426935/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daverave:link_bank:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "674B80A6-12D4-4278-8D5E-87E491128ACE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426932/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426932/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the url_name parameter, which is not sanitized before being stored in links.txt, which is later used in an include statement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daverave:link_bank:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "674B80A6-12D4-4278-8D5E-87E491128ACE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426932/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426932/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, allows remote attackers to read arbitrary files via a .. (dot dot) in the email parameter during a \"Recover password\" operation (recoverpw.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BC70C5-F71C-4A3D-9ADC-A05F07F17E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6A8825-0E98-437B-9624-C9F659176A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D97DE9-F264-46C1-A5F6-A2BDC24518D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E28E1-0BDD-40C3-82C1-0B00EC2077DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF685B7-8CBA-487E-8A56-113C898ECD45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0879.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19127",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-004-phpbanner.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426940/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0879.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-004-phpbanner.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426940/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jcink.com:textfilebb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F479BDC3-32EE-44C8-90FD-A7E71B0B8BF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://notlegal.ws/textfilebbmessanger.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427081/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://notlegal.ws/textfilebbmessanger.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427081/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:txtforum:txtforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4_dev",
            "matchCriteriaId" : "0D62E64E-4F7C-4E33-B1AA-C2A3BCB17E6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427188/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427188/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in txtForum 1.0.4-dev and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prev, (2) next, and (3) rand5 parameters in (a) index.php; the (4) r_username and (5) r_loc parameters in (b) new_topic.php; the (6) r_num, (7) r_family_name, (8) r_icq, (9) r_yahoo, (10) r_aim, (11) r_homepage, (12) r_interests, (13) r_about, (14) selected1, (15) selected0, (16) signature_selected1, (17) signature_selected0, (18) smile_selected1, (19) smile_selected0, (20) ubb_selected1, and (21) ubb_selected0 parameters in (c) profile.php; the (22) quote and (23) tid parameters in (d) reply.php; and the (24) tid, (25) sticked, and (26) mid parameters in (e) view_topic.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:txtforum:txtforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4_dev",
            "matchCriteriaId" : "0D62E64E-4F7C-4E33-B1AA-C2A3BCB17E6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427186/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427186/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php, the (5) errormsg parameter in (c) addcat.php, (d) edituser.php, (e) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php, (8) cat_id parameter in (i) delcat.php, and (9) post_id parameter in (j) del.php, as reachable from admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3897412E-B35E-44CE-91C6-6BBA9EB5B047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E310D0A0-AB13-44D3-847B-505D4E7EB011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0FF8C-1AEA-46C0-A867-F2728AA5E069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-002.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427182/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17048",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427182/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service (connection slot exhaustion) via a large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.47",
            "matchCriteriaId" : "B6653951-CD62-46DF-A34A-9CA6FBA69AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015742",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426999/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17024",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25075",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426999/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/[USERNAME] file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sergey_korostel:php_upload_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0C5C03-C4B3-4322-9C06-2D76D0E8DDA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/phpuploadcenter2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/317250/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/23627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427215/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/phpuploadcenter2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/317250/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/23627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427215/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sergey_korostel:php_upload_center:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0C5C03-C4B3-4322-9C06-2D76D0E8DDA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/phpuploadcenter2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19107",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/317250/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/23626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427215/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/phpuploadcenter2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/317250/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/23626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427215/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432ECC85-2D0B-46A8-9244-EDE7C73AF893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFFCA969-2BD2-4DB0-82C2-048A0ABC8774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9E3A54F-96DF-4794-A7E6-2B328302AA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C38C2AB-6844-43D6-848F-6B7A1C5799E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8587D302-C1C5-4C47-A1F4-87F1B344D0D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "223492A7-A72D-4353-82A5-94A281B9FAC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397F388C-0463-4808-8F37-F4173EB1D5F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926377DC-6623-4DBF-A962-5D371737C749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/patm.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/316652/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427216/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437513/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/patm.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/17134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/316652/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427216/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437513/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:micromuse:netcool_neusecure:3.0.236:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FA01C3-C31D-4E44-A6BF-B6FE5C6B1C1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/427155/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427155/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:micromuse:netcool_neusecure:3.0.236:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FA01C3-C31D-4E44-A6BF-B6FE5C6B1C1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/427155/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427155/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability.  NOTE: this vulnerability could not be confirmed by source code inspection of CoreNews 2.0.1, which does not appear to use a \"page\" parameter or variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:corenews:corenews:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354DCB34-2B75-420C-A713-FE7A4C83C565"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000602.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.archive.org/web/20050323212004/www.coreslawn.de/?show=downloads&cat_id=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427387/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000602.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.archive.org/web/20050323212004/www.coreslawn.de/?show=downloads&cat_id=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427387/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiro:banner_system:1.0_experience:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699514EE-6256-46F5-A4BE-CE1CC30809ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiro:banner_system:1.0_professional:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A388CF12-4E3E-4B81-B89D-C6F29A2161B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0211.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427326/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0211.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427326/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send malformed TKL Q:Line commands, as demonstrated by \"TKL - q\\x08Q *\\x08PoC.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unreal:unrealircd:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E47BD4E-5FDE-45AC-A737-001DA30EE571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.unrealircd.com/viewtopic.php?t=2985",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19188",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23778",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427213/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.unrealircd.com/viewtopic.php?t=2985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427213/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0457",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-14T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/23894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17084",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25354",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/263-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter.  NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380709B2-5458-46B9-8B23-9F53A15462E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/426766",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426816/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16959",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426816/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA5EE4F-F255-456D-9C23-EA00F77838B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DC85FB-F2DE-493A-B134-ED386CCEB253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4ED0719-A061-40E8-8B53-A9AE9BAD2D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.3a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA514AB-F035-480E-9502-1D011443FA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.3a5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2296D18-1461-4FB4-B98E-7BA60C6554F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18997",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-280.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426829",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16970",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/18997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-280.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dsportal:dspoll:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B421ED22-8D97-447B-B59F-077F8B0F81DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/96/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19209",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/96/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown attack vectors related to \"media streaming over HTTP 1.1\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:bordermanager:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5424CCB7-0DF1-42FA-9882-D3BE6E58E64A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:bordermanager:3.8:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "726CF8C6-6C28-4C19-B2C2-88E0B01FEEC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19163",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972993.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972993.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via \"..\" (dot dot) sequences in the stepOrder parameter to (1) upgrade/index.php or (2) install/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "630262DD-0577-4655-B558-3819019A6F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBC419B-13A6-4343-8123-85D47107D5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C31C2E-4437-44AB-A464-5D79D907BB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE96617-7CEA-4BA5-A6E2-4A8F0A5215AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A43A4-F48B-4780-9F4C-1006F8963FFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54931180-0CCA-46B2-B139-EDC35FD7D87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831E6EDF-1466-4EE1-8987-6580DC80712D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF8B06-63F6-49FE-B98C-4EDCD95A997E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB5079E-8FEA-427F-8004-150AD4827C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D75B75A-5016-4503-A1A9-0B5BFA439C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8620FD-82E4-4877-8C5A-A95D753FE9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC0225C-6E32-452B-A7E2-0CA91D9028C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED6C3A5-BA71-4D75-8FFA-ED8C72997A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:2.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BEAEF5-9CBA-4583-9D4D-E47E1738B8A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gallery.menalto.com/2.0.4_and_2.1_rc_2a_update",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19175",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gallery.menalto.com/2.0.4_and_2.1_rc_2a_update",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown attack vectors related to a large message header size, which leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.felinemenace.org/~nemo/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.felinemenace.org/~nemo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015762",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0313a%5D.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/980084",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427601/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17081",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0313a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/980084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427601/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per Hyperlink 894663:\r\nVendor description specifies that the file is automatically opened by the application: Safari could automatically open a file which appears to be a safe file type."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Hyperlink Record 894667 specifies: Safari could automatically open a file which appears to be a safe file type, such as an image or movie, but is actually an application."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per Hyperlink Record 894671:\r\nSafari could automatically open a file which appears to be a safe file type, such as an image or movie, but is actually an application."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving \"crafted archives.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17082",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm's folder.  NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_security_suite:6.1.744.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE802075-5E7C-426D-8432-0D1CC3DB3CAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://reedarvin.thearvins.com/20060308-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015743",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427122/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427309/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://reedarvin.thearvins.com/20060308-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427122/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427309/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021147FB-D153-440D-95F2-B812FB9DEA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABAEFB19-C049-4C09-89CF-00E128FEC5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FC71F5-C279-40A8-ABC3-5A141D7DF419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837FA51A-A0C2-4BC0-9349-DB220BBB7A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C7E8DA-5108-4928-B05E-70827B5F39B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B384EB69-8D0C-4D15-B650-D157DE6E559A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19214",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427466/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427466/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.5",
            "matchCriteriaId" : "20C40D91-EB5A-4E7A-A519-78B39657611D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30585124-4E60-4207-A563-7EEC2A335A61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19215",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.jupiterportal.com/index.php?n=modules/forum&a=3&d=11&o=5&q=313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427406/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430903/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.jupiterportal.com/index.php?n=modules/forum&a=3&d=11&o=5&q=313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427406/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430903/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a \"%2E.\" (mixed encoding) in the pg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C16D34C-82DA-416C-8834-C8D3D74EBCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:2.4_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA13B86-7A13-4C52-B06C-021A49E98778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:2.4_p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55126FBA-FFF9-4C28-806B-CD57687D872D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:2.4_p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F4C1C6-6D1A-4205-9C90-1A9C147FC102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB6ACA7-793A-4F98-921F-980F13AEA4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63705B10-5468-4004-AE5F-3540ADBB8BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05FA6C5C-F354-4F1A-B716-791CBEF75A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9A9066-D465-4E0C-87E2-4B29426D57E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "363699B4-F672-42F0-A511-18DC158F92AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFAD866-FA6A-43B3-BD39-BF932767B75D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guppy:guppy:4.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55BE7338-DEF3-4E58-9D04-F35F10E1C278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19222",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015753",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freeguppy.org/?lng=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-291.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427329/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.freeguppy.org/?lng=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427329/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/53806",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19245",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427591/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/53806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427591/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/53803",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19245",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427588/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/53803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427588/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6946291-0F27-4666-95C8-E744800D3EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79713A65-5A3A-4682-8A49-614174AB7C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E42FFA3-6FAE-4764-AF83-F544E6BA6CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/53796",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19245",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19257",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1007",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23909",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427587/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/53796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427587/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5093F703-13AA-4EEC-8659-C5EB29A54AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/53805",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19245",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427589/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/53805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427589/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Drupal versions 4.6.x before 4.6.6, as well as versions 4.5.x before 4.5.8"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote attackers to execute arbitrary SQL commands via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA29887-EEE3-470E-8837-B45DEF171B10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19191",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability may affect all versions of Hosting Controller previous to 6.1 Hotfix 2.9 as well."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameter.  NOTE: the card_id vector was later reported to affect vCard 2.9, and the uploaded vector for 2.6."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:belchior_foundry:vcard:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "461F0DCB-51A3-4493-B040-FA409DA4A207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:belchior_foundry:vcard:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7693E8D3-2240-4939-B98F-59EC9326542D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:belchior_foundry:vcard:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7189E766-AFA4-4302-92CB-05A67E3BCDFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19216",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427408/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435310/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/461922/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0945",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427408/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435310/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/461922/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecv_dbgdatafile.sff temporary file."
      }, {
        "lang" : "es",
        "value" : "CAPI4HylaFAX 1.3, cuando es compilado con el conjunto GENERATE_DEBUGSFFDATAFILE, permite a usuarios locales modificar archivos arbitrarios a través de un ataque de enlace simbólico en el archivo temporal c2faxrecv_dbgdatafile.sff."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:julian_pawlowski:capi4hylafax:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A29A93-72C1-4412-A3B0-DEB59D2E93D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114176689513438&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427084/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114176689513438&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427084/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dsportal:dsdownload:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070565BC-9A64-4D45-98E9-2B665FC6636A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/99/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19202",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428808/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/99/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428808/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "\"magic_quotes_gpc\" parameter must be disabled in order for this vulnerability to be exploited.  This vulnerability may affect DSPortal, DSDownload versions previous to 1.0 as well."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or HTML via the (1) ArtCat parameter to wmview.php, (2) ctrrowcol parameter to footer.php, or (3) ArtID parameter to wmcomments.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mikael_software:wmnews:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36123E0A-849D-4152-8000-C02BD2BC6BF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/wmnews.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427479/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17076",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/wmnews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427479/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dsportal:dscounter:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953BBB84-B7D9-4211-8AF7-440D88458DA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/98/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19206",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428807/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/98/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428807/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0009",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-03-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1A57804E-CD79-4431-AA97-0F85C2CE20C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78389936-D2E5-4A3A-8E7A-AA42FFAD832B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:2001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4ADD440-2CF5-4BC9-8C48-91CF8D5500BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17037BD9-742D-42E2-98CC-C764E6F71957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B77363A-53A3-4CFC-87E0-B7D33445ACEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98B6FDD-E9AA-49A4-8D9C-422DF5520A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8E7A05-97EE-40A4-A410-B2DE582AA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C180D46-EEFE-416B-AB4D-A7EF0B749105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.securiteam.com/?author=28",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.securiteam.com/?p=557",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.securiteam.com/?p=559",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1618",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049540.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016720",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016886",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.darkreading.com/document.asp?doc_id=101970",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/682820",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23903",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427671/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432004/30/5340/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443890/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444051/100/200/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446370/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446425/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17000",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20059",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-001.txt",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.symantec.com/security_response/writeup.jsp?docid=2006-091810-5028-99",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MDROPPER.BH",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25009",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29009",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1504",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1553",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1653",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A798",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.securiteam.com/?author=28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.securiteam.com/?p=557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.securiteam.com/?p=559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.darkreading.com/document.asp?doc_id=101970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/682820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427671/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432004/30/5340/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443890/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444051/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446425/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/security_response/writeup.jsp?docid=2006-091810-5028-99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MDROPPER.BH",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0028",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-03-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1A57804E-CD79-4431-AA97-0F85C2CE20C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/583",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/339878",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23899",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427632/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-004.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25225",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1158",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1509",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1635",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/339878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427632/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0029",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-03-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1A57804E-CD79-4431-AA97-0F85C2CE20C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/585",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/586",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/235774",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23900",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25227",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1522",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1570",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1579",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1633",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/235774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0030",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-03-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1A57804E-CD79-4431-AA97-0F85C2CE20C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/123222",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23901",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/16181",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25229",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1401",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1510",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1630",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1666",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/123222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0031",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-03-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1A57804E-CD79-4431-AA97-0F85C2CE20C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1521.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/589",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/104302",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23902",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427699/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25228",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1327",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1525",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1750",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A763",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1521.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/104302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427699/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-073A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories) via the $deleteuser variable.  NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue; however, this might have been due to certain behaviors of rmdir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_ravenscroft:hithost:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE922AA-03DA-448A-8766-300876E73DB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19155",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426931/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427631/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426931/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427631/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossfire:crossfire:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32B2D9E-86D3-4F4F-9C68-C7E5780F1C2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19237",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17093",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0024",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-03-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.22.0",
            "matchCriteriaId" : "D070180F-4058-480E-B489-D83310404B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB0102B-7F42-40EA-AD40-B67C6942F860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF005FC1-50A0-4233-A500-1E677EACDBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB0BE19-EB29-4DEB-883C-89CB2023E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8A8FD0-F9C9-4125-B682-A7F2B73D9BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2A9976-1883-4D49-A512-C66FF12FDDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20DFF23-6215-4860-B091-ECC1C1C08DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1B943A-38AD-4472-B143-B66567EBC9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141B7F64-5EDD-450D-A244-124366AD5800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F44A2955-F536-4EA5-8D1E-94D35EE10B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:7.0.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA559D4-7887-4518-BAE4-17A60297014E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:7.0.60.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C9E32-62F6-4D99-A87E-4BFE2B734576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:7.0.61.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED0EDDC-B58E-4E1E-AE5E-1590D60AA013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:flash_player:7.0_r19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E436A0-D128-4225-8238-79E80353541D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=307179",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19198",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19218",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19259",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19328",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20045",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/28136",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015770",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-20.xml",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/945060",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_15_flashplayer.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/854/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/23908",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0268.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17106",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-075A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-129A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-352A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0952",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1262",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1744",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4238",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-020",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25005",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1894",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1922",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/945060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_15_flashplayer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/854/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0268.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-075A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-129A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-352A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dsportal:dsnewsletter:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451C0365-5D67-47F7-9718-47D529E7AEF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/97/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19207",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428664/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/97/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428664/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dsportal:dslogin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B948E03D-D6D6-46F5-A0DF-DE03436E34F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/100/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19201",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428902/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/100/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428902/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:countersoft:gemini:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C963DCC7-EB10-4737-8151-36CAAC2A64B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19049",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC6EE68-DABD-4314-B6D2-9EE51286F66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21106480-8D50-44FD-B314-FE41C59FCD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5A37B2-3866-4621-9963-DEEC077BEA68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17077",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firebirdsql:firebird:1.5.2.4731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16EB2258-65E6-4D5D-B01E-85B032E276E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17077",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The problems are fixed in the current 1.5.3 version of the Firebird binary distribution."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BB496-749A-40C8-BAA9-6CFBBE308065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF51F68C-60A5-451F-9150-6DABBAE1D41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3BF9D6-BE14-4590-91B8-501DC92261BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6E8B0E-DEDD-43D1-9841-4BAF5A805967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19402",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427622/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427753/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427893/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428605/30/6210/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427622/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427753/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427893/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428605/30/6210/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the blog_language parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included using install05.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.7.1",
            "matchCriteriaId" : "A91D953B-FE35-4115-A71F-7BE901A3D90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5484A9DD-01B6-42AC-AF93-F2B4CA33DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B1AB7A-63C5-43EA-8EF0-1934EE174719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9FA414-82D3-4540-99E1-35E6680316FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D0A226-6644-46C6-95ED-FAD553F6C736"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=564904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001138.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=564904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-15T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc.  NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed.  Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gpdf:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B06279-EFB2-4EC1-95F2-166DC5B1BB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D93638AD-2023-4216-89A3-DF417EA940AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D411F34-B792-4B41-9FBE-0F0222D4F099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54B9A148-A52E-4B77-A854-7BF3C03AD490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAEA984E-A346-42B8-ACA3-CE03D546EB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146D08C1-C651-4B6E-9997-474A81948764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAB7C4B-8017-42C4-AD3C-2A9846105D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B025EF7-1B61-40F0-9E03-C219C54E8E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF9CF5E-A531-4D75-B47E-6C81A7679BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F68AC7F5-371B-4F02-85E4-829C2B012FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CC6233-E207-40CC-81FF-A8670EEA4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DD9B5C-3DB8-4E15-B4A6-541E4E221C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0304E1E3-8766-40D0-8879-A652B4E9E72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188F1343-8082-4B54-8DA4-E344818ABD52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B95DA7DE-B786-4EE7-A3F4-C077A7986D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5306C05-4A71-4175-8C22-F2DE0F2FE4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9DEF16-ECD5-4BBE-8986-52A6171B3D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFDBEEC-B2C1-47F0-82D3-FC9147B590A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354487CF-0086-4AE2-872B-0032E3EB89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96767060-505A-42D2-A68A-6AD810DE800A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1169B802-7279-437F-AF59-621A67DC92EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B77866E-6818-4DE6-9457-39416871952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A09900-C462-4E3D-9399-0271F91DC5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D23CF8-2B6C-4D2A-8E5E-6AACE99A7C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdf:xpdf:3.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9107B531-7254-4908-97F0-3BF1EA0495AC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18948",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19021",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19065",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19091",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19164",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19364",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1019",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-979",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-982",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-983",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-984",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-998",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/270-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/270-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the (1) saveContent or (2) saveOptimized ADS commands, or the (3) loadContent command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:document_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5134806E-933A-420A-AE8B-F8A4491C21B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:document_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD4A8E3-DF14-43DE-9B36-52A82B8E8869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:graphics_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2855B3E0-230A-407A-8B20-05BA79084C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:graphics_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0404AFA3-6E18-40FA-9DA8-AD33F023CD49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19229",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015769",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/332989.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17113",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/332989.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1245",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-03-17T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the \"Multiple Event Handler Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0855.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19269",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015794",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/984473",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23964",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428810/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453436/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453554/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17131",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25292",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1451",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1569",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1599",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1632",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1766",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0855.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/984473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/23964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428810/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453436/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453554/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-17T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000641.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19235",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY82739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0602.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0957",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000641.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY82739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0602.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-17T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2276BED4-82F0-4F62-AA6F-7E1667F28E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45D47548-1C4D-4368-99D1-929905DD6B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20060307b.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/570689",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433850/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20060307b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/570689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433850/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amax_information_technologies:winmail:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5737F3-C5D3-49C8-971D-F757BD85E494"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.magicwinmail.net/changelog.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.magicwinmail.net/changelog.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sa-exim:sa-exim:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7BE68B-64EE-42AD-A454-41D376B9B4ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sa-exim:sa-exim:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FCD8D00-6EA8-4D6F-A78C-868A43E066CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sa-exim:sa-exim:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E98585-22BD-4728-A793-AE430EA40329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.merlins.org/linux/exim/files/sa-exim-cvs/Changelog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17110",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.merlins.org/linux/exim/files/sa-exim-cvs/Changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  greylistclean.cron is not supplied in the exim packages as distributed with Red Hat Enterprise Linux.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección Eval en cal.php en Light Weight Calendar (LWC) 1.0 permite a atacantes remotos ejecutar código PHP arbitrario a través del parámetro date en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:light_weight_calendar:light_weight_calendar:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2D9CE2-E12E-4325-8B39-22E6D2295ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000612.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17059",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000612.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E50A926-D68F-4B1E-A009-0808611885B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC24C84-A059-4F09-AE7D-1F077AE8F291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8C2E9C-2305-4DAD-8406-D5BFAFBBEEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D1CB71-B47D-4683-8174-328676D31DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C1CCAA-543B-45EA-ABA1-768CEC9B7B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1E9A9B-BD3E-4D6B-87F5-1A84ACE32115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FD5F55-1937-4063-B534-B04AD0C4DE18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99FE53F-F64C-486C-B36F-A987A00F0BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648069B8-DCAD-4E41-8721-64ED93CF5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC92E29-F4C6-4529-B691-1B3C9621BECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA83D5D1-47A5-4173-9C03-3BBECB446CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B349E5EE-7190-4CC3-9015-10380DBC281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AE9464-A3D2-4CAE-90F2-E241FEE8D75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB9FE1C-742B-4EE5-93E1-FF74AF070E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CA4FD5-451F-4657-B494-F48DA6D933E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C626C28-742B-4F6D-94E0-56B445260522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F0131D-0E50-433A-ABEB-3B0062BFDC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FFFE55-070E-45B1-889D-0F81EAA1E213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2931F258-AECE-4181-905A-D8801E12721B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D773FC-D4D3-495D-BDE0-155B896D1B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D405B1-8AF9-46A5-AFB0-628F067D8D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAED5165-E96B-45BD-9C93-A365C6569E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8215195F-1FE1-4F3C-A067-E69F177E58B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.0_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05E032C-B32F-4AD6-B226-9E49CCD5D44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.01_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17585572-DF7D-44A6-87EE-2FE7760AEBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.01_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5604AF-E077-4195-BF64-1855638C923F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.01_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D93E21-AC66-4D9C-9154-4698272F8268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glftpd:glftpd:2.01_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D17CAEF-2E71-4D51-8A92-500A3B147242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19221",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.glftpd.com/files/docs/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.glftpd.com/files/docs/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:borderware:mxtreme:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170B8F38-6B15-4FD3-BC27-3007B8953487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:borderware:mxtreme:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C28FF2-F68E-4E66-9FC8-933347819503"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT command, a different set of attack vectors and possibly a different vulnerability than CVE-2003-1177."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el servicio IMAP en Mercur Messaging 5.0 SP3 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente ejecutar un código arbitrario a través de una cadena larga a los comandos (1) LOGIN o (2) SELECT, un conjunto de vectores de ataques diferentes y posiblemente una vulnerabilidad distinta de CVE-2003-1177."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercur:mercur_messaging:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2005_5.0_sp3",
            "matchCriteriaId" : "7C099C85-F273-46D0-9979-FF958B291616"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2006/Mar/1111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2006/Mar/1167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19267",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2006/Mar/1111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2006/Mar/1167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skullsplitter:php_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "8219E9BE-2304-43AF-BDEB-35B74AC450A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skullsplitter:php_guestbook:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF63CF58-F2F7-4530-9560-4AC80D5F5B26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000613.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/104/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19268",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.boysen.be/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429254/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17136",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000613.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/104/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.boysen.be/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429254/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability can only be exploited if the \"magic_quotes_gpc\" parameter is set to 'off'."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:commerce_server:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64979B9-F0D7-4A74-8B2C-FECD0B61F21A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:commerce_server:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2400E1-66EA-40B8-B5B5-FFC65C60EE23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://msdn.microsoft.com/library/default.asp?url=/library/en-us/csvr2002/htm/cs_se_securityconcepts_cbgw.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427974/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17134",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://msdn.microsoft.com/library/default.asp?url=/library/en-us/csvr2002/htm/cs_se_securityconcepts_cbgw.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427974/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or HTML via the set_theme parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9852676-A91F-4FD6-A734-BF7E048411FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19277",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) pass parameter to admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maian:support:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F8BB76-A2C6-464F-9F5F-37266F8381E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/103/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19275",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429098/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/103/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429098/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled.  This vulnerability may affect earlier versions of Maian, Support as well."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8695C97E-2E1A-480D-9DC9-8AD981B72CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0CF9DF-AD61-458E-B421-4A8A286D501C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB79656-9923-4360-97DA-1A45CB7CD2B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10D5E41-1C2C-4AD7-B172-D09F02CC9130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5BC2A4-5F78-413A-B12D-7B901DDDF39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C10EAB2E-1E4C-4BBE-8E0C-9DE80CB2123D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61320CF4-7945-41EA-872F-017D7AE03CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64629495-1CFD-4831-87BF-8C5EFACE1073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4BE889-59D4-46FB-AB59-02E6D427E54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CE13CB-7F98-4AB5-970D-564A192D4143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7B6F5D-813B-48D2-85D4-C310D87E8581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF3B9E5-23C4-4236-BDA4-E5A65E35AF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064985D4-266B-4EEF-9BA2-B4F6EF22665F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03528181-D73F-473B-BA15-9052228690BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C592CD2-2836-4892-BB78-E794E5169009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E41299B1-934C-4CD8-A956-D12EFA0B1916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D3EBB9-CB0F-4C5A-BED1-0DF781197E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A94F9F-C39E-4A31-87DD-CA1248FAC299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0116F7F-D0EF-4E1A-97F8-F9D8BD0364EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B640CC-3623-4D11-A542-02A401AC814D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC11155-F78F-4C6A-B5CF-AA757996320A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BDB951-607D-4502-85E3-0629F958B0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF82BE80-C62C-4E1A-8AB9-5773E49142B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DEABE1-B6C4-4C6F-A098-D5BC9F3C65A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E486E1-3BC7-444A-8BBB-6571CCF44E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8E2B1E-C3C7-466D-982C-36FC51D0BE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E3B91F-F391-4126-832C-C5582F5D6FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2912428D-9A74-48C2-8866-669355CAB535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A17589E-AAD1-432A-A5E3-623A8EF66572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA1F0BF-6F17-4062-86B0-83EEDA5EAC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505DFF07-4F63-4A0E-87E4-DC899F345307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B313A4C-12CE-4CA9-8036-26580152AE7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7730FD04-0CC8-4D96-A3B5-9D628381653E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043657.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19246",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015771",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427710/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043657.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427710/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en ASPPortal 3.00 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspportal:aspportal:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03ED9E3-0CED-4DC9-A034-D3B948095E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114243660409338&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114243660409338&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en ASPPortal 3.00 tienen vectores de impacto y ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspportal:aspportal:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03ED9E3-0CED-4DC9-A034-D3B948095E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114243660409338&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114243660409338&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aspportal.net/content/news/News_Item.asp?content_ID=32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple \"unannounced\" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C33D37-2FFF-4DE5-B260-E090F4E6377B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4139FE-7C43-44AC-856F-226E1194D936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0395AD1D-3470-49EE-9F2A-349EF8782B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614956CB-0582-4EAD-86F4-5AB0BB781CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4671A-8449-438E-922B-94E5542137BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://wordpress.org/development/2006/03/security-202/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://wordpress.org/development/2006/03/security-202/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xhawk.net:discussion:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34838FF4-7E1E-422C-A300-5C5F65774254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/92/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17119",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/92/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xhawk.net:discussion:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34838FF4-7E1E-422C-A300-5C5F65774254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/92/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/92/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Service_Requests.asp in VPMi Enterprise 3.3 allows remote attackers to inject arbitrary web script or HTML via the Request_Name_Display parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_communication_services:vpmi_enterprise:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EFC064-CFA0-4886-AE1B-41DF381B8C67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000605.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23916",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000605.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/427751/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427847/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427751/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427847/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange implementation in Funkwerk X2300 7.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite.  NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:funkwerk:x2300:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB6B1E0-C2C5-4B0C-95BA-7655C8B139E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19233",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.funkwerk-ec.com/portal/downloadcenter/dateien/x2300/r7201p09/readme_721p9.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.funkwerk-ec.com/portal/downloadcenter/dateien/x2300/r7201p09/readme_721p9.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation.  NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahul_dhesi:zoo:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1857FC-C6A7-458F-A293-57BA9FC4ECA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19250",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183426",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Description field.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inprotect:inprotect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.21",
            "matchCriteriaId" : "4BC51F8C-29E9-43F6-9B20-023FDCC90A76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "A remote attacker must have \"Manage Zones and Server\" permissions on Inprotect to exploit this vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the oxynews_comment_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxynews:oxynews:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6045157-CD7C-4BA4-B1EA-FA7AD02319D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/oxynews.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428057/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/oxynews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428057/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=7368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-297.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427746/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17097",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=7368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kapda.ir/advisory-297.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427746/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.0.7 and 1.5.0.1 allows remote attackers to cause a denial of service (crash) via an HTML tag with a large number of script action handlers such as onload and onmouseover, which triggers the crash when the user views the page source.  NOTE: Red Hat has disputed this issue, suggesting that \"It is likely the reporter was running the IE Tab extension,\" and Mozilla also confirmed that this is not an issue in Firefox itself"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/31833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427977/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428159/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/31833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427977/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428159/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which is used to display scan reports."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir_personal:*:*:premium:*:*:*:*:*",
            "matchCriteriaId" : "BECD1C6B-EC0F-4203-BA12-F8B02472FF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir_personal:7:*:classic:*:*:*:*:*",
            "matchCriteriaId" : "DB66A5A4-6758-438D-9155-7475A5406DA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042868.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427412/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17071",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042868.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427412/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce malformed XML, including (1) trailing ' (apostrophe) character on the ID attribute in a PLAYER XML tag, (2) joining with a long ID attribute or non-trailing ' characters, which causes a <none> name to be assigned, and then disconnecting, or (3) a long CDATA message attribute, which prevents closing tags from being added to the string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ggz_gaming_zone:ggz_gaming_zone:0.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C686AB9C-5829-4C43-972B-FAD7D479CBD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ggzcdos-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17094",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/ggzcdos-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:himpfen_consulting:php_simplenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "72AB8B76-7D11-4E81-A39B-9C374E8951D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/94/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19195",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/94/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in signup.php in @1 File Store 2006.03.07 allows remote attackers to inject arbitrary web script or HTML via the (1) real_name, (2) email, and (3) login parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upoint:at1_file_store:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2006.03.07",
            "matchCriteriaId" : "93D232FE-552D-4F01-B00A-FF72D18A5BA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/95/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19224",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428659/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/95/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428659/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and (2) user.php in the libs directory, (3) edit.php and (4) delete.php in control/files/, (5) edit.php and (6) delete.php in control/users/, (7) edit.php, (8) access.php, and (9) in control/folders/, (10) access.php and (11) delete.php in control/groups/, (12) confirm.php, and (13) download.php; (14) the email parameter in password.php, and (15) the id parameter in folder.php.  NOTE: it was later reported that vectors 12 and 13 also affect @1 File Store PRO 3.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upoint:\\@1_file_store:2006.03.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20CC9D0-7695-42A4-90C2-E1D5BC8B4FC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/95/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/47017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/47018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19224",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31063",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/619",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015826",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-August/002246.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23851",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428659/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/30182",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/6040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/95/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/47017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/47018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-August/002246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/23852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428659/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/30182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/6040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly (3) Driver::sqlite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sherzod_ruzmetov:cgi_session:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.03",
            "matchCriteriaId" : "C1E73F84-47C9-4483-B914-574313BC3DCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19211",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db_file, which allows local users to obtain privileged information, such as session keys, by viewing the files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sherzod_ruzmetov:cgi_session:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.03",
            "matchCriteriaId" : "C1E73F84-47C9-4483-B914-574313BC3DCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19211",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vulnerability than CVE-2006-1272.  NOTE: 1.10 was later reported to be vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B59C3-0318-49F5-A409-E258E4D322C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F3D49D-C89A-44FB-B254-4F8BAA20BFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCAC700-1448-4BD4-97F4-8CC06F518524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE181AB-C597-48A3-A5DA-135E601968AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=7368",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kapda.ir/advisory-296.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://myimei.com/security/2006-03-09/mybb104memberphpxss-after-login.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19213",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427744/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17097",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=7368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kapda.ir/advisory-296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://myimei.com/security/2006-03-09/mybb104memberphpxss-after-login.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427744/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B59C3-0318-49F5-A409-E258E4D322C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F3D49D-C89A-44FB-B254-4F8BAA20BFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCAC700-1448-4BD4-97F4-8CC06F518524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE181AB-C597-48A3-A5DA-135E601968AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=7368",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kapda.ir/advisory-295.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://myimei.com/security/2006-03-10/mybb104redirectfunctionheaderinjection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427747/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17097",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=7368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kapda.ir/advisory-295.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://myimei.com/security/2006-03-10/mybb104redirectfunctionheaderinjection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427747/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, includes a default administrator login account and password, which allows local users to gain privileges or modify tasks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:ghost_solutions_suite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC78C2D-E376-40C9-A413-E7F1740F8CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_ghost:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4506E0-F4FE-43F0-886A-2F18C39934DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_ghost:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B6AF37-11B3-4F38-B6E9-04FC32A28630"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, gives read and write permissions to all users for database shared memory sections, which allows local users to access and possibly modify certain information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:ghost_solutions_suite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC78C2D-E376-40C9-A413-E7F1740F8CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_ghost:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4506E0-F4FE-43F0-886A-2F18C39934DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_ghost:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B6AF37-11B3-4F38-B6E9-04FC32A28630"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to Symantec Ghost 8.3 that is shipped as a part of Symantec Ghost Solutions Suite 1.1."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to read certain sensitive information from the database."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:ghost_solutions_suite:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC78C2D-E376-40C9-A413-E7F1740F8CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_ghost:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4506E0-F4FE-43F0-886A-2F18C39934DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_ghost:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B6AF37-11B3-4F38-B6E9-04FC32A28630"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to Symantec Ghost 8.3 that is shipped as a part of Symantec Ghost Solutions Suite 1.1.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and probably conduct other activities when the victim is using Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=206790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=206790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?act=Attach&type=post&id=9642",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=204627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?act=Attach&type=post&id=9642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=204627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, (3) team, (4) level, (5) status, (6) teamname, and (7) teamlead parameters in (a) auth.php; the (8) username, (9) action, and (10) filter parameters in (b) authuser.php; the (11) username parameter in (c) utils.php; the (12) id and (13) date parameters in (d) traffic.php; the (14) username parameter in (e) userstatistics.php; and the (15) USERNAME and (16) PASSWORD parameters in a cookie to (f) chgpwd.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milkeyway:milkeyway_captive_portal:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1B9598-82B8-4C73-A82C-E5A8804C5A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milkeyway:milkeyway_captive_portal:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6EBA5D-784A-4BD8-9F0B-BD56EC44EC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427890/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/team/ascii/hack-milkeway/advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/team/ascii/hack-milkeway/milkeyway.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427890/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/team/ascii/hack-milkeway/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/team/ascii/hack-milkeway/milkeyway.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) ipAddress, (2) act, (3) username, and (4) unspecified other parameters in (a) authuser.php; and the (5) username and (6) unspecified other parameters in (b) userstatistics.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milkeyway:milkeyway_captive_portal:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1B9598-82B8-4C73-A82C-E5A8804C5A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milkeyway:milkeyway_captive_portal:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6EBA5D-784A-4BD8-9F0B-BD56EC44EC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427890/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/team/ascii/hack-milkeway/advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ush.it/team/ascii/hack-milkeway/milkeyway.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/427890/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/team/ascii/hack-milkeway/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ush.it/team/ascii/hack-milkeway/milkeyway.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for write access to the calendars directory, which allows remote attackers to upload and execute arbitrary PHP scripts via a WebDAV PUT request with a filename containing a .php extension and a trailing null character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "0696F5DB-5ECE-459B-8144-6BC8D22E07CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B902EBA5-32AA-4944-A2CA-321ABB86839D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C478599-DCFC-4FEA-BCCF-1E76BD27B1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24EA9277-E46F-4EF6-84BB-9CBB444A82F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC91C699-46E8-4700-B70D-014C00629F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D831B19-C8BF-4BE8-AEC4-2E6846AE14D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869538E6-ECAA-4768-9368-ECEA2CD9ADEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/php-iCalendar-221.upload.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/php-iCalendar-221.upload.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the phpicalendar[cookie_language] and phpicalendar[cookie_style] cookies, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included by day.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "0696F5DB-5ECE-459B-8144-6BC8D22E07CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B902EBA5-32AA-4944-A2CA-321ABB86839D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C478599-DCFC-4FEA-BCCF-1E76BD27B1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24EA9277-E46F-4EF6-84BB-9CBB444A82F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC91C699-46E8-4700-B70D-014C00629F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D831B19-C8BF-4BE8-AEC4-2E6846AE14D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869538E6-ECAA-4768-9368-ECEA2CD9ADEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astalavista_it_engineering:contrexx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "BB2595EB-A9F4-44D4-BA12-931ABFE986C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astalavista_it_engineering:contrexx:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06EBC8B-1E8C-4403-9D81-2AB7C6D99538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astalavista_it_engineering:contrexx:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA297F8-0FFB-4791-8475-336D70B809C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astalavista_it_engineering:contrexx:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9BD7BD-A793-4484-935F-339884F0867A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://soot.shabgard.org/Contrexx-CMS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.contrexx.com/?section=media1&act=download&path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/&file=contrexx_v1.0.8_bugfix_27-02-06.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.contrexx.com/?section=news&cmd=details&newsid=54",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428075/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17128",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://soot.shabgard.org/Contrexx-CMS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.contrexx.com/?section=media1&act=download&path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/&file=contrexx_v1.0.8_bugfix_27-02-06.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.contrexx.com/?section=news&cmd=details&newsid=54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428075/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute arbitrary PHP code via a URL in the dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knowledgebasepublisher:knowledgebasepublisher:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F769ECEA-F559-4110-A6FE-C65F3E72D77E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=402179&group_id=144153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17120",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=402179&group_id=144153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote attackers to inject arbitrary web script or HTML via the recherche parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3C57F2-B911-4EE3-9988-913D9D11567D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.8.2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8D5C97-A36D-4E53-A591-20FE20AF00B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/17130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.silitix.com/spip-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.fr/advisories/read/id=1105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone.spip.org/trac/spip-zone/changeset/1672",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.silitix.com/spip-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.fr/advisories/read/id=1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone.spip.org/trac/spip-zone/changeset/1672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Beagle 0.2.2.1 might allow local users to gain privileges via a malicious beagle-info program in the current working directory, or possibly directories specified in the PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beagle-project:beagle:0.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94F163F-31CA-4CBC-9680-4FA8CDFE24CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=357392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00047.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=357392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1, for Netware Servers and Remote Agent 9.1 and 9.2, and Remote Agent for Linux Servers 10.0 and 10.1 allow attackers to cause a denial of service (application crash or unavailability) due to \"memory errors.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_server_9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A3E26-7FE0-4780-A202-8CEF4F752DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:netware_server_9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4BEBA2-8AA0-48E4-BE26-532837813267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:netware_server_9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E2448A-4501-487C-A194-8144F8A14E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:netware_server_9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC86B153-9696-4373-9E30-F7793BB4F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:unix_linux_server_10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7836C087-7F95-4264-AAB6-706AA6E9AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:windows_server_9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E41CFAC-A992-435A-8DED-E49C2284AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:windows_server_10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81B58325-B79E-4C91-9BF3-601D8CB17037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec_remote_agent:windows_server_10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA85325-2513-4C12-93A2-31EF7422A617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19242",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428016/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.03.17a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428016/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.03.17a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the Job Engine service (bengine.exe) in the Media Server in Veritas Backup Exec 10d (10.1) for Windows Servers rev. 5629, Backup Exec 10.0 for Windows Servers rev. 5520, Backup Exec 10.0 for Windows Servers rev. 5484, and Backup Exec 9.1 for Windows Servers rev. 4691, when the job log mode is Full Detailed (aka Full Details), allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted filename on a machine that is backed up by Backup Exec."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A5E1B0-A0CA-4F40-92A0-2F214C6D8032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:windows_servers:*:*:*:*:*",
            "matchCriteriaId" : "BD6DC805-9CAB-4CA2-9F69-999F6832B7E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.veritas.com/docs/282254",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428223/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17096",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.03.17b.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.veritas.com/docs/282254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428223/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.03.17b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability can only be exploited if the 'job log' mode is set to \"Full Detailed\" (aka Full Details).  Other older versions of Windows Server (those that have been End-Of-Life'd) should be upgraded to the latest patch of one of the current versions listed above."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-20T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "chpst in runit 1.3.3-1 for Debian GNU/Linux, when compiled on little endian i386 machines against dietlibc, does not properly handle when multiple groups are specified in the -u option, which causes chpst to assign permissions for the root group due to inconsistent bit sizes for the gid_t type."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runit:runit:1.3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C00DB25-5268-474C-AB74-AA675875F977"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356016",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability may be relevant only to Debian GNU/Linux implementations on little endian i386 machines."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-20T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssh:rssh:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E9E67F-82D8-4D50-85E3-2B27B23D7896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=346322",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=346322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-20T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webcheck before 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the (1) url, (2) title, or (3) author name in a crawled page, which is not properly sanitized in the tooltips of a report."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcheck:webcheck:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.5",
            "matchCriteriaId" : "309A7CD1-D843-409C-9CCA-8B583F85D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcheck:webcheck:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942FA119-297F-4A84-912A-D91943AA6DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcheck:webcheck:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D04E30C-D20D-4FBD-8A44-058F87CADEEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcheck:webcheck:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFA17BF-49DD-40FF-B74E-501B0EB628FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcheck:webcheck:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B925D2-44F0-47AE-B44B-EEAD22B497FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcheck:webcheck:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4AFDA5-942E-4A30-A756-71C09AB55315"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ch.tudelft.nl/~arthur/webcheck/news.html#20060130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ch.tudelft.nl/~arthur/webcheck/news.html#20060130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Versions before 1.0 are named \"linbot\" instead of \"webcheck\"."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service (ABEND) via an MDTM command that uses a long path for the target file, possibly due to a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.06.05",
            "matchCriteriaId" : "2EF76070-CF38-40E1-88EB-9713DE3FAD9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:netware_ftp_server:5.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EACC687E-DB67-4836-88F8-D2A371EEDB0D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3AB68F-1D78-4217-9C56-B1B25F62FF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973435.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973435.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WinHKI 1.6 and earlier allows user-assisted attackers to overwrite arbitrary files via a (1) RAR, (2) TAR, (3) ZIP, or (4) TAR.GZ archive with a file whose file name contains \"..\" sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtoolmaster_software:winhki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "F1F5B061-7ECB-438A-A149-BB0A2F326B01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/winhki.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19296",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428433/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/winhki.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428433/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1061",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC07A04-1E66-4054-ACB1-667D1D7A914C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09A7C68-B570-4495-896C-2B5ABA191CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daniel_stenberg:curl:7.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E40A18E-3B2A-48C2-B253-A4AC53D60C79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1326.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://curl.haxx.se/docs/adv_20060320.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19271",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19335",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19344",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19371",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/23982",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00048.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17154",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25318",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1326.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://curl.haxx.se/docs/adv_20060320.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 7.15.3."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2pl2e_lite",
            "matchCriteriaId" : "B589BE24-D738-43E9-AC92-EFD81936A812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.4",
            "matchCriteriaId" : "118C06FA-E415-416B-9F81-54997DEC1386"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19293",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Streber 0.055 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:streber:streber:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.055",
            "matchCriteriaId" : "99D3A10D-18B4-4241-8CBF-C87FD226668C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19263",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.streber-pm.org/phpBB2/viewtopic.php?p=491#491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.streber-pm.org/phpBB2/viewtopic.php?p=491#491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vulnerability has been fixed in version 0.055 (development release)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) result_type, (2) search_in, (3) nav, (4) forums, and (5) s parameters in the Search action to index.php; (6) st parameter to index.php with showtopics set to 1; (7) m, (8) y, and (9) d parameters in a calendar action; (10) t parameter in a Print action; (11) MID parameter in a Mail action; (12) HID parameter in a Help action; (13) active parameter in a search action; (14) sort_order, (15) max_results, or (16) sort_key parameter in a Members action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/25009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428015/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17144",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428015/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbb:softbb:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05110C80-F435-4922-BA23-F2D84ACED87D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) count_fieldname, (2) url_fieldname, or (3) url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skull-splitter:download_counter_wallpaper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "FA6E1C50-A47E-4939-98A6-CD524956C310"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/105/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19314",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/105/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service (\"c2s segfault\") by sending a \"response stanza before an auth stanza\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0_s10",
            "matchCriteriaId" : "E22FE974-6431-4B75-B77C-87A6E6F75DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA6A9A63-12D6-4D95-8808-9198368B8A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B844E6-D392-4940-9979-B1A2A5C14D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C883E4A8-2F31-4ED9-8484-3E94F25FEB57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_a4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1F4B27-129D-4556-A255-6B665FE8B290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_a5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "812163D2-5798-4E4D-B9E6-923B4AF2AEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_a6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B823DEE9-B795-4555-AFB6-31EDE8BF28C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B9126F-81EC-4E32-8250-25D57A1C4A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ACD1B6-6FCB-4EA3-9B87-7F52D2C3952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4CC0C6-9DA6-4CFA-B3FD-1871E7100693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1052CC03-10D8-4D49-A9CB-671A6866EF06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F59708-A368-467A-9310-B2F510A99345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C459A234-28B8-41FC-A01B-E5D4D547193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568C99F3-ADD2-41DE-B34E-8F55F9106036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4B1EA2-F5DF-44C5-8EF0-242BC1EDD6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4CE49D-16B1-4814-8600-B505A6BF84AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7394DD18-D1DF-4FA7-BA59-350D02B5C5E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6259F8-502A-49C0-AE51-CA87CC1E5689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB5F71F-E8AC-4602-AAB0-EB092793A703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C061F-A2CC-4E8A-AAE2-3EAC9F28B36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jabberstudio:jabberd:2.0_s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE99575-BCAC-4316-886E-7570649B5EDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://article.gmane.org/gmane.network.jabber.admin/27372",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19281",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://article.gmane.org/gmane.network.jabber.admin/27372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.apple.com/kb/HT4077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B0B838-401F-447D-A270-6B3C7416A2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DF86C4-176B-4E4E-AF89-15F090E9C0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3EAD02-CF8D-4154-9A67-9774BA4029AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19315",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1039",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "7BFDD5F6-900F-45CE-9AB0-59161C853476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone14.free.fr/advisories/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone14.free.fr/advisories/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "7BFDD5F6-900F-45CE-9AB0-59161C853476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp or (2) fldGalleryID parameter to template_gallery_detail.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaparticle:betaparticle_blog:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1327F5D1-1E11-48E9-8CCE-5C4874BE13F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaparticle:betaparticle_blog:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555FE151-D37C-4338-B625-CFACCF6DE3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaparticle:betaparticle_blog:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FBFAD5-9897-4035-8EDB-8EE7BE441629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaparticle:betaparticle_blog:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D864F66-E678-4727-B337-B28E95FD86E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.betaparticle.com/UserFiles/File/6fix.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19292",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.betaparticle.com/UserFiles/File/6fix.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 6.02."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maian_script_world:maian_weblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "DB9A51BB-EF41-488C-A2FF-9F239289A2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/101/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19273",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428903/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/101/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428903/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1335",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-21T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and access the session via the Ctl+Alt+Keypad-Multiply keyboard sequence, which removes the grab from gnome."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:screensaver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.13",
            "matchCriteriaId" : "CB4823F9-27B9-40C6-8932-13B3C3297E3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=326663",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19280",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24015",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25340",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=326663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vulnerability has reportedly been fixed in version 2.14."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0745",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-21T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9809AF-75A2-4E08-9E41-EE9DB960E789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r7:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02D3FA8-EDCD-4A3C-81CF-FC09633270DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r7:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D35005-EEB1-4FA1-95B5-EFF2ABC31AD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597094EC-D23F-4EC4-A140-96F287679124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "07EC6C5A-33C9-456A-A8C9-0DF67C76041E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3B94B6-A5E4-4432-802E-BFAD7F3B5B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*",
            "matchCriteriaId" : "16915004-1006-41D6-9E42-D1A5041E442D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19256",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19307",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19311",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19316",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/606",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015793",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102252-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_xorgx11server.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24000",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00026.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428183/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428230/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17169",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25341",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1697",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102252-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_xorgx11server.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428230/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) year, (2) month, (3) next, and (4) prev parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extcalendar:extcalendar:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F36EFE-7143-4642-8EAE-22C275CA4234"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428131/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17146",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428131/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This issue is reportedly addressed in ExtCalendar 2.0. Symantec has not confirmed this fix. Affected users are advised to contact the vendor for further information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:*:*:professional:*:*:*:*:*",
            "versionEndIncluding" : "1.72",
            "matchCriteriaId" : "3FE53A16-2225-473D-85CE-18680C76B8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "A544CCF3-B0E8-41EB-B7C4-0ED0EA73F51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.2a:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "CF075F8B-D289-420D-8372-7013CFBB6B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.5:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "E1113E29-79D8-4A51-A1B5-BCD7AF472167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.6:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "610E70C4-C94E-495B-814C-7F2EE959D1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.7:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C3E0762D-0A1F-4340-8779-7EF7E5A0B8E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.17:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "44B22BCD-666B-495C-8830-71A28B1C8247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.18:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C32BE32D-03F0-4C17-9F89-65F5D28E16DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.19:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "7F1FDBAB-2432-4A36-BB30-883856595EF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.51:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1D49A7E5-5B6A-478B-8DB7-8409FC55A68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.52:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C3CFCBFF-DB7E-411A-98BB-A2F942730048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.53:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D949EED6-7A58-46A0-ABE2-4388961115E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.54:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "B4B2B6C6-D979-4670-A2EF-DF40F536A245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.70:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "67262650-5A63-4B83-8BE6-E241AAE4FE67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.71:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "A742262A-ECF2-41FD-AD82-0D458EAC8768"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:*:*:enterprise:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "C11EA525-5A5A-4C83-90C6-C401440EC75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.00:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "0326FF49-77CA-49E3-9310-432FD350BAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "9378332B-CA61-4F05-B5AD-ABCD31DFC95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.01:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "FBA7ADBD-5577-4966-AB1B-363CB5BCEE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.02:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "12A45F2C-AACD-4868-9B4F-B61A725EE0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.03:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "A1DF5BF7-3729-4E92-8843-43C632CE5861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.04:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "F300C845-1CB8-41B7-9AAD-82CD8A96FC2F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:*:*:standard:*:*:*:*:*",
            "versionEndIncluding" : "1.92",
            "matchCriteriaId" : "6CB3AB7E-717B-496C-A289-4718E324A214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.8:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C0FC8AD6-6780-48CA-ADCD-A81054E44FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.71:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "143CBE04-3863-487D-B825-00154E8351F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.72:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C88F4AF1-B4C4-4A13-AA53-25768EE50135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.90:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "225DC78B-AEA7-4795-97C5-D281CCABFACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.91:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "D9A72240-954D-4363-B8F2-7D3B1875AC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.701:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "F70DFB03-157E-43CD-8015-5F95B14C0220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.702:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "C2340571-F7B1-4F0F-BA33-82215C72A5F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.703:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "282C4130-A381-4E23-9F36-19951250D144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable:1.704:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "18309658-7BF6-4E12-877D-77920545723A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19288",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/enterprisehistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/standardhistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/enterprisehistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/standardhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving \"incorrectly encoded quoted-printable emails\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA0B95-5875-41CF-90BA-EF07D240FF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E8638-CF5A-480B-89D7-0E029A0C5965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B664B5-EEF9-4C5F-B23C-E4D54DBF2EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F83EAD-9296-4A24-BF7F-905CC93FEADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27EEFD5-19B1-4F0C-BD52-257594C37310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB6A16-65D3-43CF-BFB4-E0616476A979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFAF9C8-DB67-446E-B63C-530CB0C170B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F30383-D23F-4CA5-BC02-7716398BC042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE40F5BA-6174-4959-BFD1-CCECAB138009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6DCAFE-CAC2-4B36-B3E1-FA2B490424EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32956E6-A13B-4663-BBC9-FEB08A1DCC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AABE2F0-FEC1-4BDE-B1C0-92FF2CEA48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652F54CA-1CCA-4BC9-8728-A0F6FABF8817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A9222A-6F22-40BD-8411-69A90E8E46AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AADE9-F3FB-4272-8026-58FC677D3F3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19288",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mailenable.com/enterprisehistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mailenable.com/enterprisehistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the archive parameter in an HTTP POST or COOKIE request, which bypasses a sanity check that is only applied to a GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "7371D19D-B133-4866-BC63-72931A646021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/cutenews.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19289",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/cutenews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "7371D19D-B133-4866-BC63-72931A646021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BB2223-5238-4E3D-895A-BE6793AE3A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4254A63A-3202-4D06-90B3-12D10511BC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A2D600-BEA7-4936-B210-91629B2EFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "674CC558-E3B7-4120-879A-0408A595C5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3793A0A-37B8-48C5-ACA3-A17F8482635B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/cutenews.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19289",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17152",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://hamid.ir/security/cutenews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"register_globals\" parameter is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-21T02:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maian_events:maian_events:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E01C0D-5CFF-407E-BEC1-4EE4ECB19F20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/102/description.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19274",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429093/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/102/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429093/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1342",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2006-03-21T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory."
      }, {
        "lang" : "es",
        "value" : "net/ipv4/af_inet.c en el kernel de Linux 2.4 no aclara sockaddr_in.sin_zero antes de devolver los nombres de socket IPv4 de las funciones (1) getsockname, (2) getpeername y (3) accept, lo que permite a usuarios locales obtener porciones de memoria potencialmente sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-netdev&m=114148078223594&w=2",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19357",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=09d3b3dcfa80c9094f1748c1be064b9326c9ef2b",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/bid/17203",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=114148078223594&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=09d3b3dcfa80c9094f1748c1be064b9326c9ef2b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1343",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2006-03-21T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory."
      }, {
        "lang" : "es",
        "value" : "net/ipv4/netfilter/ip_conntrack_core.c en el kernel de Linux 2.4 y 2.6 y posiblemente net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c en 2.6, no aclara sockaddr_in.sin_zero antes de devolver los nombres de socket IPv4 desde la función getsockopt con SO_ORIGINAL_DST, lo que permite a usuarios locales obtener porciones de memoria potencialmente sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-netdev&m=114148078223594&w=2",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19357",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.osvdb.org/29841",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435490/100/0/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/bid/17203",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0032/",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2071",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25425",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10875",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://marc.info/?l=linux-netdev&m=114148078223594&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435490/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0032/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTML_FILE parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verisign:mpki:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD4AA8E-D8A0-48F2-AE50-AB38E6C96699"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/common/showdoc.php?idx=522&idxseccion=10",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17170",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/common/showdoc.php?idx=522&idxseccion=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action with an \"option[]=null\" parameter value, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/428056/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428056/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a lang[*][file] parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included by index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.45",
            "matchCriteriaId" : "0B43C384-13B4-41FB-AB65-3C038D841FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:1.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DDF67C-FEA8-45CF-A97A-79EDB5D70E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE23487-8AA4-4B69-88E1-630DED9013FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000698.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000698.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.45",
            "matchCriteriaId" : "0B43C384-13B4-41FB-AB65-3C038D841FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:1.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DDF67C-FEA8-45CF-A97A-79EDB5D70E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE23487-8AA4-4B69-88E1-630DED9013FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000698.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000698.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Vulnerability can only be exploited if the \"magic_quotes_gpc\" parameter is set to Off."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang[*][file] parameter, which is injected into an error message.  NOTE: this issue might be resultant from CVE-2006-1346."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.45",
            "matchCriteriaId" : "0B43C384-13B4-41FB-AB65-3C038D841FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:1.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DDF67C-FEA8-45CF-A97A-79EDB5D70E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE23487-8AA4-4B69-88E1-630DED9013FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000698.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19322",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000698.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05557F2-F712-4B01-98AC-C7A53A3A2FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/23967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428972/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428972/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:articlesone:99articles_directory:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30FCC4D7-C05A-40C4-A8EC-7755B57E8354"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000626.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428354/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000626.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428354/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a \"default internal servlet\" accessed through HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/180",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19310",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17166",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "AC5439C1-D06F-44C6-94F5-2BD8598A506C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "E40C38EC-ECA4-4F0C-8468-16191CDB9997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "C4FD8871-680E-40F9-85AB-417B5195D4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2FE768F-363B-49BC-8410-739B164FB32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "D3DA28D0-18CC-4F99-AABB-EC7863CBD455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "FED6AE20-974B-44A7-98C4-F69E6E33D9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:win32:*:*:*:*:*",
            "matchCriteriaId" : "38DB9544-534D-4B95-B81A-7F80B6E6F4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "D2D05BAB-AB3B-466E-8301-01A41644DE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*",
            "matchCriteriaId" : "6C444DA3-69E3-4465-9173-85966B1162A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:win32:*:*:*:*:*",
            "matchCriteriaId" : "3BA3BF4B-7616-49BA-916B-17068B6C85E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
            "matchCriteriaId" : "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
            "matchCriteriaId" : "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*",
            "matchCriteriaId" : "1A1A59C0-31BB-4EE9-90C1-3289C94F690E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*",
            "matchCriteriaId" : "209CDA09-CAB2-481D-8DA0-161B670335E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/183",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19310",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_ID parameter in news/News_Item.asp; authenticated administrators can also conduct attacks via (3) user_id parameter to users/add_edit_user.asp, (4) bannerid parameter to banner_adds/banner_add_edit.asp, (5) cat_id parameter to categories/add_edit_cat.asp, (6) Content_ID parameter to News/add_edit_news.asp, (7) download_id parameter to downloads/add_edit_download.asp, (8) Poll_ID parameter to poll/add_edit_poll.asp, (9) contactid parameter to contactus/contactus_add_edit.asp, (10) sortby parameter to poll/poll_list.asp, and (11) unspecified inputs to downloads/add_edit_download.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspportal:aspportal:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03ED9E3-0CED-4DC9-A034-D3B948095E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspportal:aspportal:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9820ED6A-DE4D-47C9-9D13-609436AC94C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspportal:aspportal:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822D7908-E593-4851-BD79-EC3002DA69A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1402.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1431.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=21",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428355/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428615/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1402.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428355/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428615/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via \"Insufficient input validation\" in the EAP-MSCHAPv2 state machine module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49152208-4DBD-4AF7-BCB3-3D56650899F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AF846A-F239-4963-B260-7CB48334B8B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95ADE53-BFBE-4B06-A1BF-EF576D567554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F03F8FE-80BA-41A3-85CE-FFB6A18E6DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48FE12-68CB-462D-B75E-204894325F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1321F1E7-4B14-4B16-91D0-AE9E9951D12A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeradius:freeradius:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313EFEC5-1580-4ACE-BB9C-84E3714F2C37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0271.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19300",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.freeradius.org/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "avast! Antivirus 4.6.763 and earlier sets \"BUILTIN\\Everyone\" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.763",
            "matchCriteriaId" : "247FC548-9B8F-4365-8292-F8AC4441A2D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.avast.com/index.php?topic=19862.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19284",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.avast.com/index.php?topic=19862.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_hsu:libvc:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC40AFB6-8967-4254-A102-3416BC6A53D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_hsu:rolo:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01040F84-BF40-4D96-959E-FC2550350A69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/23/23985-libvc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/23/23985-libvc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_4100:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85AE9E11-C5F0-462E-AEFA-68ABE3B6AB0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428318/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17175",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-22T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C72232-7D9A-43BF-9018-6D51EA35BF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAB0CC7-DB7F-401B-8E9C-E3A33BD18F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0A3F3F-F960-4418-B520-3AECCA0DDB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA2A8E6-1BEF-430B-85FD-AFFA44B891CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "BF066EF7-82D6-42A4-97AC-C3A71A042152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_portal:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "22257A94-EB2C-432E-A9ED-224D8AB9527F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftpna.beasys.com/pub/releases/security/patch_CR259534_81SP5.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/182",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19308",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftpna.beasys.com/pub/releases/security/patch_CR259534_81SP5.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0038",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-22T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using \"virtualization solutions\" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19330",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee4bb818ae35f68d1f848eae0a7b150a38eb4168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17178",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=186295",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25400",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10945",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee4bb818ae35f68d1f848eae0a7b150a38eb4168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=186295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Linux kernel version 2.6.16 has been released to address this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0058",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-03-22T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E0D099-C149-4923-A06C-200A23CEA943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B75BCD-9187-4DB0-903D-5F73429AEE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DB5E2A-0E79-45DF-BD85-FD216A970771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20FAC60-445E-4847-B5DE-8ACDDA55E1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9962F81C-A08C-4F8E-A07C-4F4B5C441EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38C234D-EF75-4A96-A0FD-E1DDDADAC1BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-010.txt.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.24/SCOSA-2006.24.txt",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060302-01-P",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19342",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19345",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19346",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19349",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19356",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19360",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19361",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19363",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19367",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19368",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19394",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19404",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19407",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19450",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19466",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19533",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19676",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/19774",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/20243",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/20723",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/securityalert/612",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securityreason.com/securityalert/743",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1015801",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102324-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200494-1",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-074.htm",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY82992&apar=only",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY82993&apar=only",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY82994&apar=only",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-151.shtml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1015",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-2.shtml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-21.xml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.iss.net/threats/216.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/834865",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:058",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sendmail.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sendmail",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.007-sendmail.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.osvdb.org/24037",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00017.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00018.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0264.html",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0265.html",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428536/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428656/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17192",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.sendmail.com/company/advisory/index.shtml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-081A.html",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1049",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1051",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1068",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1072",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1139",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1157",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1529",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2189",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2490",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24584",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11074",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1689",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-010.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.24/SCOSA-2006.24.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060302-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102324-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200494-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-074.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY82992&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY82993&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY82994&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-151.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-2.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.iss.net/threats/216.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/834865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sendmail.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sendmail",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.007-sendmail.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0264.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0265.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428536/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428656/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sendmail.com/company/advisory/index.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-081A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1359",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-03-23T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:7.0:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "4A33815E-5D85-4F0E-A4D1-DB31A64C8801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1427.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1430.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1434.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1662.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18680",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-7/advisory/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015812",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-154.shtml",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.computerterrorism.com/research/ct22-03-2006",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/876678",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/917077.mspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/24050",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428441",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428583/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428600/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429088/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429124/30/6120/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17196",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1050",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25379",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1178",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1657",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1702",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A985",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1662.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-7/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/q-154.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.computerterrorism.com/research/ct22-03-2006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/876678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/917077.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428583/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428600/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429088/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429124/30/6120/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0050",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "A6B060E4-B5A6-4469-828E-211C52542547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "974C3541-990C-4CD4-A05A-38FA74A84632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "C9419322-572F-4BB6-8416-C5E96541CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "BFC50555-C084-46A3-9C9F-949C5E3BB448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "AD18A446-C634-417E-86AC-B19B6DDDC856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "E4BB852E-61B2-4842-989F-C6C0C901A8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "24DD9D59-E2A2-4116-A887-39E8CC2004FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "F28D7457-607E-4E0C-909A-413F91CFCD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19318",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1013",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17182",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25442",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0905",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A \"programming error\" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "09BFA20B-2F31-4246-8F74-63DF1DB884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p7:*:*:*:*:*:*",
            "matchCriteriaId" : "B19BEAB3-8BED-422F-B228-240269CB0704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE93D3D-34B4-47B7-A784-61F4479FF5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*",
            "matchCriteriaId" : "6E21E50A-A368-4487-A791-87366CC5C86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "E18328E2-3CB5-4D36-8EA3-77DD909B46A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "EF73D76B-FBB8-4D10-8393-9FAF53392A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:11.ipsec.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-011.txt.asc",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/19366",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015809",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/24068",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17191",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25398",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:11.ipsec.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-011.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:open_enterprise_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DA33CB-1F9D-4042-BD23-1E41A6079511"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D328A81E-DC60-4B67-B707-F0AD9A6F48E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB9CEA-9245-490F-88F6-EFD23B11A19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*",
            "matchCriteriaId" : "0669D0E2-AB83-44AE-A87C-C7EB7AA2953A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*",
            "matchCriteriaId" : "062E2A9A-CF88-4844-B5A1-7418722087D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8E031C-CE1F-410F-8F32-B3E33719C498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "87F80FDC-7851-4EA8-BC7D-87B85C6BB93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3AB68F-1D78-4217-9C56-B1B25F62FF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session."
      }, {
        "lang" : "es",
        "value" : "La implementación del servidor SSL en NILE.NLM en Novell NetWare 6.5 y Novell Open Enterprise Server (OES) a veces selecciona un cifrado débil en lugar de un cifrado más fuerte disponible, lo que facilita a atacantes remotos rastrear y descifrar una sesión SSL protegida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:open_enterprise_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DA33CB-1F9D-4042-BD23-1E41A6079511"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D328A81E-DC60-4B67-B707-F0AD9A6F48E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB9CEA-9245-490F-88F6-EFD23B11A19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*",
            "matchCriteriaId" : "0669D0E2-AB83-44AE-A87C-C7EB7AA2953A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*",
            "matchCriteriaId" : "062E2A9A-CF88-4844-B5A1-7418722087D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8E031C-CE1F-410F-8F32-B3E33719C498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "87F80FDC-7851-4EA8-BC7D-87B85C6BB93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3AB68F-1D78-4217-9C56-B1B25F62FF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/64758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/64758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session."
      }, {
        "lang" : "es",
        "value" : "La implementación del servidor SSL en NILE.NLM en Novell NetWare 6.5 y Novell Open Enterprise Server (OES) permite a un cliente forzar el servidor para usar cifrado débil afirmando que se requiere un cifrado débil para la compatibilidad del cliente, lo que podría permitir a atacantes remotos descifrar contenidos de una sesión SSL protegida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:open_enterprise_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DA33CB-1F9D-4042-BD23-1E41A6079511"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D328A81E-DC60-4B67-B707-F0AD9A6F48E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB9CEA-9245-490F-88F6-EFD23B11A19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*",
            "matchCriteriaId" : "0669D0E2-AB83-44AE-A87C-C7EB7AA2953A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*",
            "matchCriteriaId" : "062E2A9A-CF88-4844-B5A1-7418722087D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8E031C-CE1F-410F-8F32-B3E33719C498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "87F80FDC-7851-4EA8-BC7D-87B85C6BB93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3AB68F-1D78-4217-9C56-B1B25F62FF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/64758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/64758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a) index.php; or the (4) message1 or (5) message parameter to (b) cart.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05557F2-F712-4B01-98AC-C7A53A3A2FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/428972/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428972/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oswiki:oswiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "61B91EDF-501E-4FFC-A731-AB22ED0B7816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19290",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nOSWiki, OSWiki, 0.3.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp.  NOTE: The pages.asp/id vector is already covered by CVE-2006-0870."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-nuke:mini-nuke_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "6768531D-1610-4D1C-9FCF-B72B59DE3212"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428361/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428361/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justin_white:freewps:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5F6080-D8C7-4199-BEFD-B52870E184C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "8B666A98-0AC9-41D5-AB92-226BB6BC4681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net:1.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC441C4B-3A1E-4709-8601-44477A6D5FA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hackingspirits.com/vuln-rnd/w3wp-remote-dos.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044291.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044292.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015825",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5KP0O0KI0Y.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428622/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17188",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25392",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1601",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://hackingspirits.com/vuln-rnd/w3wp-remote-dos.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044291.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044292.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5KP0O0KI0Y.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428622/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1283",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-03-23T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd."
      }, {
        "lang" : "es",
        "value" : "'opiepasswd' en One-Time Passwords en Everything (OPIE) en FreeBSDE 4.10-RELEASE-p22 a 6.1-STABLE anteriores a 20060322 usa la función \"getlogin\" para determinar la cuenta de usuario invocante, lo que podría permitir a usuarios locales para configurar acceso de OPIE a la cuenta 'root' y posiblemente ganar privilegios de root si un intérprete de comandos de root es permitido por la configuración del grupo 'wheel' o sshd.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C496B665-70DA-4B98-A5D1-E2935C0CE840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34797660-41F5-4358-B70F-2A40DE48F182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F25E27BA-F884-456B-9600-A4A0B8877A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C9E23D-AB82-4AE1-873E-C5493BB96AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4054D69F-596F-4EB4-BE9A-E2478343F55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA26ABBE-9973-45FA-9E9B-82170B751219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7891202C-62AF-4590-9E5F-3514FDA2B38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4F7002-A525-4A66-BE8B-E50ABBF144B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8F9B2F-E898-4F87-A245-32A41748587B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183667CA-6DF1-4BFB-AE32-9ABF55B7283A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1156954-25AD-45BE-AE49-9705ECD5BDA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDDEC3F-52EB-4E1E-84C4-B472600059EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314BA420-4C74-4060-8ACE-D7A7C041CF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAD7613-A5B3-4621-B981-290C7C6B8BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED84E66-CFD9-4DF8-9679-13457D340D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE38C50A-81FE-412E-9717-3672FAE6A6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A3F7B6-2878-40C0-B59C-EBA8D171D2F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263F3734-7076-4EA8-B4C0-F37CFC4E979E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0419DD66-FF66-48BC-AD3B-F6AFD0551E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B982342C-1981-4C55-8044-AFE4D87623DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E02BE6-4800-4940-B269-385B66AC5077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB09993-B837-4352-B09D-3656F62638A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0361EA35-FBD7-4E8F-8625-C8100ED7BB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "29EAA113-2404-4ABB-826B-3AA2AA858D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A585A1-FF82-418F-90F8-072458DB7816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F7EB61-55A5-4776-B0E7-3508920A6CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "A442DE97-4485-4D95-B95D-58947585E455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE31DFF8-06AB-489D-A0C5-509C090283B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A6564-129A-4555-A5ED-6F65C56AE7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "237174A4-E030-4A0B-AD0B-5C463603EAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BF03-C25E-4737-84D5-892895C86C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7F8F11-1869-40E2-8478-28B4E946D3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2019E0E-426B-43AF-8904-1B811AE171E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "9062BAB5-D437-49BE-A384-39F62434B70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1504C-14FE-4C21-A801-944041F2946F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "6E53C673-9D6D-42C8-A502-033E1FC28D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C5FC1A-1253-4390-A4FC-573BB14EA937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AC452-6042-409D-8673-ACAD108EE3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE1009B-371A-48E2-A456-935A1F0B7D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C844A170-B5A7-4703-AF3B-67366D44EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3D41CB12-7894-4D25-80EC-23C56171D973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD9C12-EDAB-473F-9CC5-04F06B413720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "09789843-6A1A-4CDB-97E8-89E82B79DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*",
            "matchCriteriaId" : "118211EF-CED7-4EB5-9669-F54C8169D4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*",
            "matchCriteriaId" : "58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "9A405AE2-ECC4-4BB0-80DD-4736394FB217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*",
            "matchCriteriaId" : "E5612FB0-8403-4A7E-B89A-D7BDFAC00078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*",
            "matchCriteriaId" : "FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "AFDA151E-E614-4A24-A34D-B6D5309110CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441BE3A0-20F4-4972-B279-19B3DB5FA14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "09BFA20B-2F31-4246-8F74-63DF1DB884EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:release_p7:*:*:*:*:*:*",
            "matchCriteriaId" : "B19BEAB3-8BED-422F-B228-240269CB0704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EAEA17-033A-4A50-8E39-D61154876D2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE93D3D-34B4-47B7-A784-61F4479FF5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD9D1C-A459-47AD-BC62-15631417A32F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*",
            "matchCriteriaId" : "6E21E50A-A368-4487-A791-87366CC5C86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "43E84296-9B5C-4623-A2C4-431D76FC2765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*",
            "matchCriteriaId" : "E18328E2-3CB5-4D36-8EA3-77DD909B46A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "EF73D76B-FBB8-4D10-8393-9FAF53392A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "F177AE1C-58C2-4575-807C-ABFFC5119FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:12.opie.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19347",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015817",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/24067",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17194",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1074",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25397",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:12.opie.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer en swfformat.dll en múltiples productos y versiones RealNetworks incluyendo RealPlayer 10.x, RealOne Player, Rhapsody 3 y Helix Player permite a atacantes remotos ejecutar código arbitrario a través de un archivo SWF (Flash) manipulado con (1) un valor de tamaño que es menor que el tamaño real o (2) otras manipulaciones no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B288E1C-4511-482A-B39D-E6BB9585AF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5695A49-561F-434E-92AE-AEF13162BD78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E6B49C-BDF7-41A8-A6B4-4AA1A47C87FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B857582E-8B1A-4ED4-8C0C-9D8D5BDD1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348F3214-E5C2-4D39-916F-1B0263D13F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:rhapsody:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91156125-28D3-498A-9521-F748D9FA7FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19362",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19365",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19390",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-24.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/231028",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_18_realplayer.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0257.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430621/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.service.real.com/realplayer/security/03162006_player/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/231028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_18_realplayer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0257.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430621/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.service.real.com/realplayer/security/03162006_player/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Motorola PEBL U6, the Motorola V600, and possibly the Motorola E398 and other Motorola phones allow remote attackers to add an entry for their own Bluetooth device to a target device's list of trusted devices (aka Device History), and possibly obtain AT level access to the target device, by initiating and interrupting an OBEX Push Profile that pretends to send a vCard, aka a \"HeloMoto\" attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:e398:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6472146A-2D5E-4E2C-B609-286D6D0DBD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:pebl_u6:08.83.76r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2FE8AA-E373-492D-978B-AF95D3EDE989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:v600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21807BE8-84AE-40D2-B241-DF63BDC741E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://trifinite.org/trifinite_stuff_helomoto.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428431/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trifinite.org/trifinite_stuff_helomoto.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service (device shutdown), and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer (aka FTP) service on Bluetooth channel 9."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:pebl_u6:u6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123374F3-17F0-4182-9D9C-D564EAD0C93C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044287.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19319",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428431/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044287.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Arbitrary code execution may also be possible, but has not been confirmed.  This vulnerability may affect other versions of Motorola P2K-based phones."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones does not require pairing for a connection related to the Headset Audio Gateway service, which allows user-assisted remote attackers to obtain AT level access and view phonebook entries and saved SMS messages by connecting on Bluetooth channel 3 and tricking the user into pressing Grant, aka a \"Blueline\" attack.  NOTE: while user-assisted, the attack is made more feasible because of a GUI misrepresentation issue that allows a default message to be replaced by an attacker-specified one."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:pebl_u6:u6_08.83.76r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21572F7-B427-4F3A-BD90-942E53BFDC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:v600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21807BE8-84AE-40D2-B241-DF63BDC741E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044287.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428431/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17190",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1045",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044287.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply data but not the reply structure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.15",
            "matchCriteriaId" : "F7A893C0-1374-4B55-92C9-47CA407B7842"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8763716bfe4d8a16bef28c9947cf9d799b1796a5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8763716bfe4d8a16bef28c9947cf9d799b1796a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 2.6.16."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message (PM) in certain circumstances."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=209178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19299",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=209178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 2.1.5 (2006-03-08 or later)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc) file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "19BC5A59-BCBD-4859-8329-B4974D43DB90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6051B4-1B15-44C0-B2CD-5504E68C60F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD49D16C-B0AC-4228-9984-010661596232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91278EFD-0285-4389-9C53-50FE225C3C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336246FA-A06F-4792-9923-E6948F3494FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7BF07-8B9A-4BDF-BEA9-C55ABDEA8165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC15988-96A0-4EBE-BF99-14D46F5A9553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F65BDA-393F-4274-B193-B578255DB013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4CADDC-84D2-45D9-99BA-A662D7490154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1348:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB407A17-771F-4F46-A5F9-2458358C47AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/451556",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.service.real.com/realplayer/security/03162006_player/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/451556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.service.real.com/realplayer/security/03162006_player/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of RealNetworks, RealPlayer from 10.5 v6.0.12.1040 through 10.5 v6.0.12.1348."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-23T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to upload and execute arbitrary PHP files using (1) manager.php, (2) standalonemanager.php, and (3) images.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xhp:cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5",
            "matchCriteriaId" : "CD06B685-C2AF-48A2-AB56-791D868E10BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19353",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000649.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1052",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xhp.targetit.ro/index.php?page=3&box_id=34&action=show_single_entry&post_id=10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xhp.targetit.ro/index.php?page=3&box_id=34&action=show_single_entry&post_id=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) EventID parameter in viewEvent.cfm, (2) NewsID parameter in newsView.cfm, or (3) ThisDate parameter in mainCal.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benson_it_solutions:1webcalendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "643C9F88-65F9-48F7-93CB-A28549228A3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/1webcalendar-v-4x-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/1webcalendar-v-4x-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Benson Solutions",
        "comment" : "WebCalendar v4 has been updated to include fixes that filter the url numeric and date variables in question and prevent non-numeric and non-date values from being passed to the SQL queries.  This fixes the problems with the pages in question. http://www.bensonitsolutions.com/Calendar/v4/",
        "lastModified" : "2007-01-03T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the base_url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_live:php_live:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "33DF97EB-2F02-4B31-83A2-17C386D66FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_live:php_live:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF93BB1-4A41-4E09-8D02-2523C96CBB2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19340",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428452/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17184",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428452/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactions_offset parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brain_book_software:adman:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.20051221",
            "matchCriteriaId" : "CAEC9B6A-2F1A-47A3-877D-C1E04915426F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/adman-v10x-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19351",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/adman-v10x-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brain_book_software:adman:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.20051221",
            "matchCriteriaId" : "CAEC9B6A-2F1A-47A3-877D-C1E04915426F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/adman-v10x-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19351",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/adman-v10x-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service (disk consumption)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3047C7D-E114-4CF2-A42E-A660C8DB22AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comoblog_project:comoblog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E7998-766A-431D-83E3-FB551D0F5A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easymoblog:easymoblog:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3B5948-7B06-4DD5-A162-7689BD19C4ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428553/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17199",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428553/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand() seed values and conducting a known plaintext attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:password_safe:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4BAC9B-809C-438D-A307-7D07D07A27E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428552/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445509/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17200",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428552/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445509/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability exists only in Windows OS environments before XP.  For some reason it would not let me notate that in the \"vulnerable software\" section."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot) and (2) space characters in the extension of a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orionserver:orion_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.6",
            "matchCriteriaId" : "44553F7F-8E0B-4B7B-A4BB-0803C8D96C07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1455.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18950",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-11/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015823",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/24053",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428601/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17204",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1055",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25405",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1455.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-11/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/24053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428601/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "Update to version 2.0.7 or contact the vendor for a patch."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as (1) tmntsrv.exe and (2) tmproxy.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:pc-cillin_2006:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "14.10.0.1023",
            "matchCriteriaId" : "DCAAE1D4-5A89-41A7-BC03-9D0708A06873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:pc-cillin_2006:14.00.1485:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7275738E-9E4F-4A0C-B046-543ADAE6A63F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_messaging_security_suite:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7486EBFA-3262-4F37-ACD8-B1E37BCDFE25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19022",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C563A4F9-14B8-481C-9C52-1483C8D507BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/11576",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/11576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register_globals is disabled, allows remote attackers to include arbitrary files via the systempath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:impex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.74",
            "matchCriteriaId" : "67E0E518-47C5-4B49-B32C-49459CB1D596"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044318.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19352",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/467666/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044318.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/467666/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablo_software_solutions:baby_ftp_server:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF066D6-27C4-4F35-86C9-9FA713A2F790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19338",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_business_systems_manager:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C947BC-4D5A-493A-B331-8082A463513F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19332",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función parseTaggedData en WavePacket.mm en KisMAC R54 hasta la versión R73p permite a atacantes remotos ejecutar código arbitrario a través de múltiples SSIDs en una etiqueta del vendedor Cisco en un marco de gestión 802.11."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70682692-C51B-4945-94D2-7C7DBE4C7B08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7AF074-BA99-4CD3-9852-588C30F45AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFF52E8-4206-473E-B360-54B3BA115FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D098ED9-320A-4942-B9EA-997095B7F12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.5d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC340DD-84D7-4D21-B047-126477E9774C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.5d4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC95BBD3-CB6F-4036-86C4-3955CB3158F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B2574AF-4403-4370-BEEE-6E8204ABC499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.11a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA8156D-4EB7-41C4-B701-6310C66CA5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kismac:kismac:0.12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C4D22F-077E-4021-BEF1-2C94830652E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kismac.de/_trac/changeset/113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044323.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19354",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_032006.115.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428537/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kismac.de/_trac/changeset/113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044323.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_032006.115.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428537/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version R73p."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-24T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1415.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jeffrey.vanderstad.net/grasshopper/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://news.zdnet.com/2100-1009_22-6052396.html?tag=zdfd.newsfeed",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/434641",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1415.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jeffrey.vanderstad.net/grasshopper/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://news.zdnet.com/2100-1009_22-6052396.html?tag=zdfd.newsfeed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/434641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-25T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19373",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015819",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-076.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17215",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00622788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-076.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00622788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-25T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980553F2-8662-47CF-95F0-645141746AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40EBF1CD-B392-4262-8F06-2C784ADAF0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "960DC6C2-B285-41D4-96F7-ED97F8BD5482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1FD0EB4-E744-4465-AFEE-A3C807C9C993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "57772E3B-893C-408A-AA3B-78C972ED4D5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=122376",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=125902",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=127167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=127319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-23.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428739/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=122376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=125902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=127167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=127319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428739/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability applies only to the following games/versions: \r\n1) NetHack 3.4.3-r1 and previous \r\n2) Falcon's Eye 1.9.4a and previous \r\n3) Slash'EM 0.0.760 and previous"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-25T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablo_software_solutions:baby_asp_web_server:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E8A721-94EA-441D-B0F7-3E149D68376F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablo_software_solutions:quick_and_easy_web_server:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1267BA-88BC-44C2-A35F-13E40F3D45B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablo_software_solutions:quick_and_easy_web_server:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B44A633-BD60-4EEC-A00B-31AC9378A23D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19306",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19312",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-19/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24100",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428667/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17222",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-19/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428667/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-26T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E0A8F3-02EE-4A6D-BAAC-1D52DF063197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-26T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E0A8F3-02EE-4A6D-BAAC-1D52DF063197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2001-09-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354C8BA8-603D-4556-8C4C-39DEE4891719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CC3B43-A77A-471E-A0ED-E91E53C2400C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374ADC0F-0EE2-4DEC-8A37-5F5F15C8137A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC5965A-BFC8-42B3-AF13-28E097381E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94AFFF9-5951-43A9-8018-B10C3F097CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F823DF7-B38E-4FBF-8D9A-C1B49FC237BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA8E461-0CAA-4B44-8BCC-21CD8E1A6A41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAdvisoryDosAttackWithInclude",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAdvisoryDosAttackWithInclude",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-26T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified inputs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32433F8A-8ECA-43E7-B73A-4AE115D3C6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5B4A6F-3CF2-43D0-8E32-79017E1DDB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20FF0B0-61B9-4D61-9FA1-013D0867F7BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7C9244-4AEA-4C70-BF96-9D8CD125339F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AFBDFF-11FB-4EE9-BCD2-9281AE33DE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8AF8CDA-1EF6-4B7B-8D75-3F5F8CE78113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6318AC28-703C-4154-9485-861B9E930310"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pubcookie.org/news/20060306-login-secadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337585",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pubcookie.org/news/20060306-login-secadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-26T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32433F8A-8ECA-43E7-B73A-4AE115D3C6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5B4A6F-3CF2-43D0-8E32-79017E1DDB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20FF0B0-61B9-4D61-9FA1-013D0867F7BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7C9244-4AEA-4C70-BF96-9D8CD125339F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AFBDFF-11FB-4EE9-BCD2-9281AE33DE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8AF8CDA-1EF6-4B7B-8D75-3F5F8CE78113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6318AC28-703C-4154-9485-861B9E930310"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pubcookie.org/news/20060306-apps-secadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/314540",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pubcookie.org/news/20060306-apps-secadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/314540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-26T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32433F8A-8ECA-43E7-B73A-4AE115D3C6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5B4A6F-3CF2-43D0-8E32-79017E1DDB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20FF0B0-61B9-4D61-9FA1-013D0867F7BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7C9244-4AEA-4C70-BF96-9D8CD125339F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AFBDFF-11FB-4EE9-BCD2-9281AE33DE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8AF8CDA-1EF6-4B7B-8D75-3F5F8CE78113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_washington:pubcookie:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6318AC28-703C-4154-9485-861B9E930310"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pubcookie.org/news/20060306-apps-secadv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/314540",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pubcookie.org/news/20060306-apps-secadv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/314540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-26T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cholod:mysql_based_message_board:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C44FA39-5BDE-468D-9764-63D8F366041A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17224",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-26T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cholod:mysql_based_message_board:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C44FA39-5BDE-468D-9764-63D8F366041A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-27T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUG_STACK stack during the do_debug function call."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux 2.6.16-rc2 y versiones anteriores cuando se ejecutan sistemas x86_64 con prioridad activada, permite a usuarios locales provocar una denegación de servicio (oops) a través de múltiples tareas ptrace que realizan pasos individuales, lo que pueden provocar la corrupción de la pila DEBUG_STACK durante la llamada a la función do_debug."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=113932292516359&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24098",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17216",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113932292516359&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:fp:businessserver:*:*:*:*:*",
            "matchCriteriaId" : "74DFFDE3-533A-4F35-949A-C85CBFCD7C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:fp:datacenter:*:*:*:*:*",
            "matchCriteriaId" : "F7B2572C-C560-4D7F-8824-A04DA07583FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:mp:businessserver:*:*:*:*:*",
            "matchCriteriaId" : "BCA898F1-6E9A-41DE-ABB3-4006D16CF315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:mp:datacenter:*:*:*:*:*",
            "matchCriteriaId" : "6F18487E-ADA8-4362-9F50-73568716825A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E3592CA8-4F02-421D-B373-A859231A447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "790282C3-9148-4D78-95ED-058D2166EB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D6AD552C-8462-4B56-865C-7858A1892E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.1:*:server:*:*:*:*:*",
            "matchCriteriaId" : "F570650A-8E21-4F66-B4D2-447FBB8EA9D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:6.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "BE706E94-7808-4C59-A17D-0E300D5E939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:6.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "2B52E958-2728-48C8-ACBC-CED68045A9FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seer.support.veritas.com/docs/281521.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/880801",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428944/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seer.support.veritas.com/docs/281521.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/880801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428944/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:fp:businessserver:*:*:*:*:*",
            "matchCriteriaId" : "74DFFDE3-533A-4F35-949A-C85CBFCD7C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:fp:datacenter:*:*:*:*:*",
            "matchCriteriaId" : "F7B2572C-C560-4D7F-8824-A04DA07583FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:mp:businessserver:*:*:*:*:*",
            "matchCriteriaId" : "BCA898F1-6E9A-41DE-ABB3-4006D16CF315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:mp:datacenter:*:*:*:*:*",
            "matchCriteriaId" : "6F18487E-ADA8-4362-9F50-73568716825A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E3592CA8-4F02-421D-B373-A859231A447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "790282C3-9148-4D78-95ED-058D2166EB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D6AD552C-8462-4B56-865C-7858A1892E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.1:*:server:*:*:*:*:*",
            "matchCriteriaId" : "F570650A-8E21-4F66-B4D2-447FBB8EA9D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:6.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "BE706E94-7808-4C59-A17D-0E300D5E939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:6.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "2B52E958-2728-48C8-ACBC-CED68045A9FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seer.support.veritas.com/docs/281521.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/744137",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428992/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seer.support.veritas.com/docs/281521.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/744137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428992/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted \"Request Service\" packets to the vnetd service (TCP port 13724)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:fp:businessserver:*:*:*:*:*",
            "matchCriteriaId" : "74DFFDE3-533A-4F35-949A-C85CBFCD7C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:fp:datacenter:*:*:*:*:*",
            "matchCriteriaId" : "F7B2572C-C560-4D7F-8824-A04DA07583FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:mp:businessserver:*:*:*:*:*",
            "matchCriteriaId" : "BCA898F1-6E9A-41DE-ABB3-4006D16CF315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:4.5.0:mp:datacenter:*:*:*:*:*",
            "matchCriteriaId" : "6F18487E-ADA8-4362-9F50-73568716825A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "E3592CA8-4F02-421D-B373-A859231A447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "790282C3-9148-4D78-95ED-058D2166EB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.1:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "D6AD552C-8462-4B56-865C-7858A1892E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:5.1:*:server:*:*:*:*:*",
            "matchCriteriaId" : "F570650A-8E21-4F66-B4D2-447FBB8EA9D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:6.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "BE706E94-7808-4C59-A17D-0E300D5E939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:6.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "2B52E958-2728-48C8-ACBC-CED68045A9FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seer.support.veritas.com/docs/281521.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/377441",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428979/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seer.support.veritas.com/docs/281521.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/377441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428979/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or (2) certain parameters to the login form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0845A199-2B04-474D-8F03-A4A646A018A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906D4516-6D64-47AA-ADAE-AC96D071C07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0456A2-AAA5-463B-BE1F-90032EF745CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5BAA40-7585-4877-B227-ED0C4EF78A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CE9A50-87BA-4BEC-9076-9E0C24B2E972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9A8ABA-941E-474B-A1AF-329678D424E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2_dev_2001-10-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B27D5E0-0A62-407E-9597-F9B6E79BE929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308814A1-A5D5-4DB6-81B9-18EE0B92D6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:2.0.4_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6EA06C-E45D-4D6D-84B2-7DB37A8A85C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D30F73-4815-41BE-994E-8B399AB75593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC4EC37-7D4E-48A2-8325-C16A06CF094D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phpadsnew.com/two/nucleus/index.php?itemid=46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19384",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015828",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015829",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=404963",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=404964",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428898/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17251",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpadsnew.com/two/nucleus/index.php?itemid=46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=404963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=404964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428898/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the g_message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sixal:g-book:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FA0795-4754-4E63-8E20-BD1B9F3D1AF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19414",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-006-g-book.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428900/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-006-g-book.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428900/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the search_term parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_lite:meeting_reserve:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85504E5-E0D1-4D9C-836D-2C3C43BC8F8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19372",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metisware:instructor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "B9329206-333D-465D-80FF-3BBF0A7007EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/metisware-instructor-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19385",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/metisware-instructor-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) allwords or (2) oneword parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_lite:calendar_express:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997E9458-4347-4C79-859B-EF803CFDBA8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19393",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to (1) cause a denial of service via a long nickname or teamname to the SV_SetupUserInfo function or (2) execute arbitrary code via a long string sent when joining a match or a long chat message to the SV_BroadcastPrintf function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csdoom:csdoom:2005_0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E096099-A33F-4D3D-B09B-758B51F882BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/csdoombof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19389",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://voxelsoft.com/csdoom/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/csdoombof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://voxelsoft.com/csdoom/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato en cadena de caracteres en la función PrintString en c_console.cpp en client/server Doom (csDoom) 0.7 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar comandos arbitrarios a través de especificadores de formato en cadena en cadenas pasadas a la consola."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csdoom:csdoom_2005:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19EF973-7962-426B-A053-B5F2B940B559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/csdoombof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19389",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://voxelsoft.com/csdoom/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/csdoombof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://voxelsoft.com/csdoom/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "<a href=\"http://cwe.mitre.org/data/definitions/134.html\">CWE-134: Use of Externally-Controlled Format String</a>"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file or (2) function parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:industrial_imagination:blankol:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1",
            "matchCriteriaId" : "1CABD0D3-B684-4272-B051-76ED2EC33050"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/blankol-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/blankol-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sheer_vision_technologies:sscms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "DD7E7732-87CD-402C-8316-7762D19A193F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtuser or (2) txtpassword parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniforum:uniforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4",
            "matchCriteriaId" : "54B2CC42-1CA2-4485-8671-EDB7FFBE51A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/uniforum-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/uniforum-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtDomainName parameter to domains.asp or (2) SearchText or (3) UserLevel parameters to default.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.10",
            "matchCriteriaId" : "50A739F0-A063-4BB6-8492-BC10B243A7EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000654.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19375",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000654.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "These issues are reportedly fixed by the vendor. Version 3.2.10-stable will contain these fixes when it is released. Contact the vendor for further information on obtaining fixes."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via (1) a packet with no data or (2) a large packet, which prevents Vavoom from discarding the packet from the socket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4548D4-641A-401E-8DC5-66F89AFA6AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AF9F9D-7D1B-4A54-AF79-2D71DBA7012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEC79C0-A874-420C-84C8-DF431D95A7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F840BE8-B260-477F-B102-E5D0BD440E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A173FD4C-0437-41F9-B98D-5CFA47A18355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71281E80-40FB-44FC-9DF8-E5F80DA3F794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322E65D8-D5F7-4D75-9C7D-7F9E50D864E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B883A2-D3F8-4481-BEB2-89E3309447FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7DBD47-02D8-429D-95BA-8A0C9D49FA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D4015F-CBED-4F9A-9422-27BF84C9BD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29C0A756-2D39-466E-A1DC-786D539F1D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4265C606-24B2-4354-9CF9-0487EE20B8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC03548-AD79-4BF9-8DA5-11EAA31825A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D910D2-47B5-4C65-83E6-2372C2D8831A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C583DB-9078-4950-B9CC-94A7B860CD51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B6761E-74F2-4097-93B0-10BBF8F5ED6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54049FE9-7D56-42A3-99E2-D9E3D1A51801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5C9A17-2EE6-4B1F-950F-AD19430939EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0101709A-6776-4CD9-984B-F9F58E680022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD8AD7C-BAE3-4423-8871-03C844051950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D6F72B-DF73-4228-ABED-A9C2FC45C2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8761024-2A58-4CD1-9AA0-DA563EC5D23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DCB768-95EC-4FEA-8757-50AA6DCF5D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E561E6-74A6-4215-835D-280B31E3DC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B3701-8287-43EF-8AD0-7586E0420A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5969AAA6-0A0F-4324-AACE-4AAABA52C01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE85859B-91B0-4674-971C-506C42E190F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49A19DE-407E-41DD-8CF8-3C382B524C28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70C7DE91-D2CD-4D1B-B2BE-7142A960A3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB54146-A171-4846-A905-FE8C72808C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8189461B-D6F9-42D2-A8E9-E6AB4071DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BF9FC2-9410-432B-A193-07B90DD18BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DDAAFA-5E6D-4736-B73E-57C1ED26087E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B959616-D98F-407A-8341-7B6A59CDE4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.666:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD640356-507A-4C80-A4A6-55FF01D2B8FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.666_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF6B93A-E7EE-4847-9AB8-DD1241B6A282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.666_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B0EF09-A182-4540-8C26-2CBC491065B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/vaboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19388",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17261",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/vaboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (application crash) via an invalid comprLength value in a compressed packet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4548D4-641A-401E-8DC5-66F89AFA6AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AF9F9D-7D1B-4A54-AF79-2D71DBA7012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEC79C0-A874-420C-84C8-DF431D95A7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F840BE8-B260-477F-B102-E5D0BD440E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A173FD4C-0437-41F9-B98D-5CFA47A18355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71281E80-40FB-44FC-9DF8-E5F80DA3F794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322E65D8-D5F7-4D75-9C7D-7F9E50D864E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B883A2-D3F8-4481-BEB2-89E3309447FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7DBD47-02D8-429D-95BA-8A0C9D49FA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D4015F-CBED-4F9A-9422-27BF84C9BD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29C0A756-2D39-466E-A1DC-786D539F1D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4265C606-24B2-4354-9CF9-0487EE20B8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC03548-AD79-4BF9-8DA5-11EAA31825A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D910D2-47B5-4C65-83E6-2372C2D8831A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.7_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C583DB-9078-4950-B9CC-94A7B860CD51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B6761E-74F2-4097-93B0-10BBF8F5ED6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54049FE9-7D56-42A3-99E2-D9E3D1A51801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F5C9A17-2EE6-4B1F-950F-AD19430939EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0101709A-6776-4CD9-984B-F9F58E680022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD8AD7C-BAE3-4423-8871-03C844051950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D6F72B-DF73-4228-ABED-A9C2FC45C2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8761024-2A58-4CD1-9AA0-DA563EC5D23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DCB768-95EC-4FEA-8757-50AA6DCF5D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E561E6-74A6-4215-835D-280B31E3DC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9B3701-8287-43EF-8AD0-7586E0420A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5969AAA6-0A0F-4324-AACE-4AAABA52C01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE85859B-91B0-4674-971C-506C42E190F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.15_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49A19DE-407E-41DD-8CF8-3C382B524C28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70C7DE91-D2CD-4D1B-B2BE-7142A960A3ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB54146-A171-4846-A905-FE8C72808C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8189461B-D6F9-42D2-A8E9-E6AB4071DDB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BF9FC2-9410-432B-A193-07B90DD18BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DDAAFA-5E6D-4736-B73E-57C1ED26087E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B959616-D98F-407A-8341-7B6A59CDE4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.666:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD640356-507A-4C80-A4A6-55FF01D2B8FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.666_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF6B93A-E7EE-4847-9AB8-DD1241B6A282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vavoom:vavoom:1.666_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B0EF09-A182-4540-8C26-2CBC491065B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/vaboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19388",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17261",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/vaboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Screen name or (2) Session Topic field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xigla:absolute_live_support_xe:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFA264F-E8F6-4BF2-996A-ADC2F4D0DFD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19415",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xigla:absolute_image_gallery_xe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "B67C5110-0356-4422-8146-34AC98CC0E10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tft_gallery:tft_gallery:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783D54CA-B043-4F4A-8C27-A2A6F866D4F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19411",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453471/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453485/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453471/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453485/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) adid or (2) aname parameter in (a) common/email.asp, (b) users/users_search.asp, or (c) users/users_profiles.asp; (3) page parameter in (d) users/users_calendar.asp; (4) usid parameter in (e) users/users_mgallery.asp; or (5) m parameter in (f) users/users_search.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmljunction:ezhomepagepro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "86F823CF-7F2A-4D8F-BB10-268177C7684B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/ezhomepagepro-multiple-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19386",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24133",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24136",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/ezhomepagepro-multiple-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, (3) message, or (4) dayprune parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toast_forums:toast_forums:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CB8EF6-D9D9-400A-998D-D4D64969369C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/xss-in-toast-forums-16.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19401",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17249",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/xss-in-toast-forums-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the em parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotnetbb:dotnetbb_forums:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.42ec_sp_3",
            "matchCriteriaId" : "0A8549A2-3770-463B-B0F2-30DC330811EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/xss-vuln-in-dotnetbb-v24.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19398",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/xss-vuln-in-dotnetbb-v24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xigla:absolute_faq_manager_.net:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "6FE25041-39C1-4731-8108-2D059A3661D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/absolute-faq-manager-net-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/absolute-faq-manager-net-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro), possibly 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) exam parameter in prequiz.asp or (2) msg parameter in student.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caloris_planitia_technologies:web_quiz_pro:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90E92255-9316-43E6-838E-21526153B81F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/web-quiz-pro-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24130",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/web-quiz-pro-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caloris_planitia_technologies:e-school_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "D2D7B9D3-8463-4F02-A5DF-65FD8B0C1B49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/e-school-management-system-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19381",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17257",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/e-school-management-system-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "A new version of School Management System was released on May 28, 2006."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "5157FE81-262C-4AD2-80F3-BC6EC6CB7268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BF5DD-6F61-4752-B9B4-D98DA7DC3575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C996587-6713-407B-B834-73C5BD6D52C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33599EC7-49CA-4AFC-9DC2-6B7CC9CCA40F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F896FAC-3E50-4608-86AC-7A9984219A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6196D1-613D-43C5-A284-A633567C508B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4445F3-266B-4950-A4D2-2BF800B236F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.5_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ECB1A5C-EE38-4FB7-BD17-7F45359E5B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6318A231-4093-4E7C-B5F6-66B4BF64B33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428895/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428895/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabless:saphplesson:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC6C9F0-BB82-4B2D-9690-01C975299A8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428891/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17239",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428891/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in akocomment.php in AkoComment 2.0 module for Mambo, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) acname or (2) contentid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arthur_konze_webdesign:akocomment:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7711ECA6-87AF-460A-A0A5-103CCABA4E7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428893/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17241",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428893/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "In order to exploit this vulnerability, the 'magic_quotes_gpc' parameter must be disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the event_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jjwwebdesign:phpbookingcalendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0c",
            "matchCriteriaId" : "ACD47CAC-AE71-44BF-9102-F9E27E4603E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/17230",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED11502-50F6-446B-B223-8E2B1B0163CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:br5:*:*:*:*:*:*",
            "matchCriteriaId" : "A403E549-40B5-4F5A-98B3-9AF0B9E2081F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094040BF-4C59-4266-9683-76C59D332F16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428833/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428833/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2023-11-07T01:58:37.427",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-1482.  Reason: This candidate is a duplicate of CVE-2006-1482.  Notes: All CVE users should reference CVE-2006-1482 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en track.php en phpmyfamily 1.4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro nombre."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfamily:phpmyfamily:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CB6C85-459F-4C48-A980-1C7422160ED4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114344921211241&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428901/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114344921211241&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428901/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) password parameter in admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel_motion:pixel_motion_blog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10852BB8-8028-49C5-A40C-112190649BB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter in cgi-bin/index.cgi, or (10) vsSD parameter in /mods/calendar/index.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8C727E-412A-4044-8FE9-63C4FD8D4779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B45A79-F173-44D6-8737-22DDE3877AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A343A7FD-E5BA-4C84-913B-2B56AFA555FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9216F8B4-8B90-4DF0-9135-CFBBBE8E199E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7890A9-68D0-4882-9BF0-EE90C32DA554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-app.org:webapp:0.9.9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124D5CC6-651A-4C59-975E-D23500DE0EA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/webapp-multiple-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/webapp-multiple-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3694A116-C0E7-453A-82DC-4AEEF9B5F40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B22A008-0873-4BE0-B4CA-2441703D8197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41ED1103-3E78-4E0C-A2E5-300B096C1AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D9693E-D179-414E-AA4B-50C27E4C4EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19419",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rtn parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionzone:classifiedzone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "B507188A-49C0-49F0-B913-A2C707F65EAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/classifiedzone-v12-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19427",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/classifiedzone-v12-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dedicatedPlanID parameter to dedicated_order.php, (2) sharedPlanID parameter to shared_order.php, (3) plan_id parameter to customers/server_management.php, and (4) email field to customers/forgotpass.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:controlzx:hms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.4",
            "matchCriteriaId" : "12C88555-6F0F-4ACB-B4D2-8B587133A339"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19432",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24174",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24175",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24176",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script or HTML via URL-encoded (1) srchfor and (2) srchby parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionzone:couponzone:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C87005-64CF-4258-8953-12D765905E11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17272",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-28T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionzone:couponzone:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C87005-64CF-4258-8953-12D765905E11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the \"failed\" functionality in Raindance Web Conferencing Pro allows remote attackers to inject arbitrary web script or HTML via the browser parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raindance:web_conferencing_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7516C14-BC77-49FD-9762-FD5EA7006704"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/428971/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428971/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windows Firewall would have produced for a non-ADS file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/428970/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429111/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428970/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429111/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is \".exe\" (with no characters before the \".\"), which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious \".exe\" program in a folder named \"Internet Explorer,\" which triggers a question about whether to unblock the \"Internet Explorer\" program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/428970/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429111/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428970/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429111/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute arbitrary PHP code via the abs_path parameter in (1) initiate.php, (2) waiting.php, (3) welcome.php, (4) admin/index.php, (5) javascript.php, (6) checkchat.php, and (7) blank.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_web_tools:php_live_helper:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C93ED5E-E1D4-4956-8D16-1FF270F1F7AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19428",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428976/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437648/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437741/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.turnkeywebtools.com/forum/showthread.php?p=10415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.worlddefacers.de/Public/WD-TMPLH.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428976/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437648/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437741/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turnkeywebtools.com/forum/showthread.php?p=10415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.worlddefacers.de/Public/WD-TMPLH.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability may affect all versions prior to 1.8  as well."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as demonstrated by uploading PHP code in a gl_session cookie to users.php, which causes the code to be stored in error.log, which is then included by initiate.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_web_tools:php_live_helper:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C93ED5E-E1D4-4956-8D16-1FF270F1F7AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428976/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.turnkeywebtools.com/forum/showthread.php?p=10415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.worlddefacers.de/Public/WD-TMPLH.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428976/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turnkeywebtools.com/forum/showthread.php?p=10415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.worlddefacers.de/Public/WD-TMPLH.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability may affect all other versions of Turnkey Web Tools, PHP Live Helper."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in (1) newProject.php, (2) newList.php, and (3) newWaitingOn.php; the Title field in (4) newProject.php, (5) newList.php, (6) newWaitingOn.php, (7) newChecklist.php, (8) newContext.php, and (9) newGoal.php; the (10) Category Name field in newCategory.php; the (11) listTitle field in listReport.php; the (12) projectName field in projectReport.php; and the (13) checklistTitle field in checklistReport.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serge_rey:gtd-php:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D08A4E4-8143-4311-9489-FEFB6089FA7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24149-gtd-php.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24151",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24152",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24153",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24156",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24157",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24158",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24149-gtd-php.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duda:webalbum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.02",
            "matchCriteriaId" : "B96EABED-416D-4887-BB1F-EDBC622B50F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19400",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17228",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_ticket:php_ticket:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.71",
            "matchCriteriaId" : "88CEF90B-850D-4FB8-AACE-A7662CAC5E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_ticket:php_ticket:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D149A5-CE13-47FE-AEE1-85E91CE8223B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_ticket:php_ticket:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D4427D-F387-4EFA-A4CB-52DDAD2E4D40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19412",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17229",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conftool:conftool:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6337590B-AA3C-4952-A70F-131B4EDFFF3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000664.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428899/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-March/000664.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428899/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blazix Web Server before 1.2.6, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot), (2) space, and (3) slash characters in the extension of a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:desiderata_software:blazix_web_server:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "22B9B7E8-CB15-4C51-A93C-FD4F138CE3D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19341",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-22/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429108/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17270",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-22/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429108/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by opening arbitrary files via the \"save as\" dialog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:kye:genius_videocam_nb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309FC8ED-9D73-4949-AF9E-CA120C522BF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429107/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17284",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429107/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to execute arbitrary programs by uploading files to locations within the web root.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "A529C74F-95E2-498C-BBA7-278F4A95262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874BAA81-17CC-4DB7-A4CB-15550598B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B2D814-E051-4B07-8383-3FC0F2C4B4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6105C89A-CFE3-44CF-A2A2-5EC22194E3DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E73E823-1049-4A35-A991-42165AA1A15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:1.21a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E53B0BA-B8AD-4272-A35C-B97D64C95749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:1.21b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421B87A0-74BD-4B33-939A-F7651B51C6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:1.21c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CFB426-4A87-4FE8-9C4E-7BA2304D12DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greymatter:greymatter:1.21d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC60001A-8A59-49CE-A4C0-1F8242317619"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19423",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17271",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) bamin, (2) bemin, (3) pmin, and (4) state parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionzone:realestatezone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "B99FD2C0-12C5-455E-8CBC-C6B5CA25EB2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/realestatezone-42-multiple-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19429",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17277",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/realestatezone-42-multiple-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:supporttrio:2.50.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D1448B-07B9-404C-B2EC-3455CED4DCFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/activecampaign-supporttrio-25-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/activecampaign-supporttrio-25-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T02:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or (2) print parameters in a kb action to index.php, or (3) an invalid category parameter to modules/KB/pdf.php, which leaks the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:supporttrio:2.50.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D1448B-07B9-404C-B2EC-3455CED4DCFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/activecampaign-supporttrio-25-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/activecampaign-supporttrio-25-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) companyid, (2) scat, and (3) coid parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionzone:couponzone:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C87005-64CF-4258-8953-12D765905E11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24179",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17274",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1490",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-29T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a \"binary safety\" issue.  NOTE: this issue has been referred to as a \"memory leak,\" but it is an information leak that discloses memory contents."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=127939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?r1=1.112&r2=1.113",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?view=log",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19499",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19570",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20052",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200605-08.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:063",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429162/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429164/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17296",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1149",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25508",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11084",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=127939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?r1=1.112&r2=1.113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200605-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429162/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429164/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC8BBFC-263E-4735-847D-5544D18922E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB1F389-5D64-4B8C-B207-7D23F0C12DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8892DF-11F2-4991-97E8-D561DEAC4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B46B6F5-055E-44EB-BB78-503811C0E57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B197B0-F3B7-40D6-9872-C1A94622C242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAEAAF02-1B61-421A-887C-107B7234262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.4_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01557585-CE92-49FB-B9BB-AAAE7D355BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2698E2D7-09BF-4490-B362-4245CD3087D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B40A46-117D-4D85-8CC8-27236A3280C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFBECFF-D1A4-465D-B59F-E70246DE4BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57ABD1BD-6676-4B54-9F3E-FACF1346794F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EC6167-5D16-4236-8EBC-412EE1784802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.horde.org/diff.php?f=horde%2Fservices%2Fhelp%2Findex.php&r1=2.85&r2=2.86",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000271.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000272.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19504",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19528",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19619",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19692",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015841",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000671.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_07_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17292",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1154",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.horde.org/diff.php?f=horde%2Fservices%2Fhelp%2Findex.php&r1=2.85&r2=2.86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000272.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000671.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_07_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the chemin parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikolay_avrionov:explorer_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15EC7124-0051-4C80-9069-37C7D88F90A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1806.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.silitix.com/explorerxp.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.silitix.com/explorerxp.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-29T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web script or HTML via the chemin parameter.  NOTE: it is possible that this issue is resultant from CVE-2006-1492."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nikolay_avrionov:explorer_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15EC7124-0051-4C80-9069-37C7D88F90A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1806.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.silitix.com/explorerxp.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1806.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.silitix.com/explorerxp.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0459",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-29T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:westes:flex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.32",
            "matchCriteriaId" : "E0145625-8490-4671-A17C-85426C258AF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://prdownloads.sourceforge.net/flex/flex-2.5.33.tar.bz2?download",
        "source" : "secalert@redhat.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/19071",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19126",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19424",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/570",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=20060223020346.GA11231%40tabitha.home.tldz.org&forum_name=flex-announce",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-07.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23440",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16896",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1020",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0770",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24995",
        "source" : "secalert@redhat.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/260-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://prdownloads.sourceforge.net/flex/flex-2.5.33.tar.bz2?download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://secunia.com/advisories/19071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_name=20060223020346.GA11231%40tabitha.home.tldz.org&forum_name=flex-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://usn.ubuntu.com/260-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue only affects parsers which are generated by grammars which either use REJECT or rules with a variable trailing context (in these rules the parser has to keep all backtracking paths).  The Red Hat Security Response Team analysed all packages that include flex generated parsers in Red Hat Enterprise Linux (2.1, 3, and 4) and found none were vulnerable.\n",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the \"forgotten password\" option."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netoffice:netoffice:2.5.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8154251B-4FE5-4C30-A61A-535468EEE91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcollab:phpcollab:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E3645C-2A9B-4F9D-B8FC-EFABB5550706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcollab:phpcollab:2.5.rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C01C67C-4668-4E9A-9751-F55A2F63BE85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PHPCollab_NetOffice_SQLINJ.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19449",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200812-20.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17283",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PHPCollab_NetOffice_SQLINJ.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200812-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vihor:vihordesign:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0121D8E-2373-4764-AE99-FDE64697CC64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000650.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000651.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428737",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17226",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000650.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000651.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vihor:vihordesign:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E16EBE-BCF0-4B4A-8834-38BD46E3FCEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19403",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000650.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000652.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428737",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17226",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000650.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-March/000652.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/428737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitrary web script or HTML via crafted encoded links."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174665BA-F231-45F6-922C-933B8A613009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45833DC-F104-42BB-8688-4DE66AFF72F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B316A8E-DED1-427B-8137-11C767E9DF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A75AFB-2706-42FF-8534-B910997987AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F335EB4-1A74-4FAE-ADAF-AC9FB37A80DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116C8AA3-481D-409A-ABA8-C8DA1EE8FF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DCE478-7D30-4BBC-8878-C3745D6ADAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBFFA2C-6768-4CB9-B0B0-BDB79CA1DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0C4A1E-B084-4C78-BEE4-4E733159F367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2571B43E-234C-4312-9640-1E338092A673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D5C7E1-6664-4A90-9E55-1F53F98D7702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4963F3C5-A207-4BD3-9C3C-4EBAC1F5B2B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE0D158-DB0B-45B2-9E26-E11A7D5D2CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9214FE72-045E-457A-B3C5-BCDFC506DDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB55E62-A345-49F6-ACD0-A710977CA6E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340D0AB-2B4A-4DE6-9FA1-662D8F8205BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C8B11E-5C0B-49B1-ACFA-5926057EF002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A4EA0A-54E1-484A-ADDB-216CBC9C40FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0ABA75-E966-43A2-90B1-89557BB0B7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B6CE989-B7AD-42AA-986C-23266D965122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FD9374-5B8A-4102-A005-D3F39186ABBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B28DC19-7E6A-4CC7-86A9-10EA9FD79FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD296DF-21C6-43E4-AC4D-8F57220ECDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AD23BE-5400-43D8-A667-7AE60B0500B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFE2FA-CAE0-42C3-AA84-4F8D59045A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9703151E-85D7-4F81-AFB5-5BC72C44D81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66E99D9-8ED9-445A-908D-58A70A32E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E4BE45-F7F2-46DF-995D-1A7203DF5EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E607C45-A499-4F08-A15E-608EB28788E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.5_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38FFBC7-5731-42B7-8BAE-C1F230F4610C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.wikipedia.org/pipermail/mediawiki-announce/2006-March/000040.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mediawiki.org/wiki/MediaWiki",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_07_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17269",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.wikipedia.org/pipermail/mediawiki-announce/2006-March/000040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mediawiki.org/wiki/MediaWiki",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_07_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI (_SERVER[REQUEST_URI] variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:source_workshop:vcounter:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910B0066-C3A8-47BD-A339-202C65448901"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/108/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19422",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430353/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/108/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430353/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Tilde CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tilde:tilde_cms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF0B25-DA76-4192-9FAE-2049BEC1FDEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24233-tilde.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19447",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24233",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1145",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24233-tilde.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero:1.6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8F316D-4829-4605-A155-C822000A4D17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24228-oneorzero.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19446",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24228",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1146",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24228-oneorzero.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_pre7try2",
            "matchCriteriaId" : "D5D0864C-F35B-432D-8E54-D24D1843354B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044615.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19418",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429251/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xfocus.org/advisories/200603/11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044615.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429251/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xfocus.org/advisories/200603/11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the vwar_root parameter.  NOTE: this is a different vulnerability than CVE-2006-1636."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDAD337-4009-474B-9105-B18BEE690479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B1A470-C615-498F-9292-19370DE5379F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51D11E1-8756-4D5F-9F2A-1048411911CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A7E74A-113E-46C9-AB7B-85DBFCCD2522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1C5ED5-2892-4F00-941A-EE64C9B56565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D51F5A-3B53-4938-951E-3B3F1024BD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCA7085-CD42-418D-8DBE-B191582DFBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143EC184-3132-439B-835D-AF4D41FA3598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256509A6-F4A0-4443-BC04-EE74CF48BA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3805AC03-2AC5-4233-8BF0-EB799164028B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EF75D3-DB96-48EF-A002-4532A860ABA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87E2E48-B53E-4638-86EC-A284DF2F2F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFA22F-659A-4CBE-B3D7-A8D7B2D7AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E672D937-CF21-478E-82AD-A5FB31AF6CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED33CE9-48E3-4EBC-8236-EA9913CE36D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21EF3A6-287C-448E-AAAD-AD0946C2B604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4DBDAC-3B64-47D1-A2E6-D9D80AA1BDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E470DF7A-A93C-4C5E-92C2-7CEE4D529519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C792C4-6B80-48D3-851C-FF85511246ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEE99F9-C46B-4688-B70E-CEF6EC8A40D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4998F301-A079-4ED8-8A8C-BC11153DBAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C72A2E-A54B-40B0-8E2F-8DD543C56EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E9FFC7-E606-489B-A135-98F6B6BEF5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC93C7E2-C78B-4F62-95C7-6029A32EF22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2604BF9F-711A-4423-B325-48A9BBE96A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8649B70-E499-48B9-BEC0-40A5CBA965AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259BA0C6-2604-47F9-9F3F-9C1723D92B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E1C96A-E919-4217-9740-7A0E091FB173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF2E5CD-19A3-4B28-B0DF-A9E78FD9E00D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8E151E-B445-476A-A984-EDB2912D5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A272DC-9B30-417A-9C77-67A7C35063C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F12BA77-5F39-44B3-A18F-69C8019FE276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966D4C0E-E82C-4BD2-AE42-F56A4B137CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4395243-2E0A-4DBA-90AD-4D74491A0E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331164B3-F2B7-4D74-8F72-6D183A4CE5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08559C71-79AA-4051-98AB-8DABA0571A13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000679.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19438",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429090/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17290",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000679.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429090/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"register_globals\" parameter is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 (aka Arab Dynamic Portal or ADP) stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in (1) online.php and (2) download.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arab_portal:arab_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D16BAE4-E97A-480A-B7E5-E15632BFE17D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19445",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429109/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429109/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"register_globals\" parameter is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa), when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to \"yes\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_analysis_and_security_engine:base:1.1.2_zora:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA89BD7E-878E-4C32-9A9E-DC5E6772E8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_analysis_and_security_engine:base:1.1.3_lynn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A68A944-5D9C-41A2-A686-575966DF8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_analysis_and_security_engine:base:1.1.4_cheryl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3E6FAF-3998-4650-A225-8DF27F41B1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_analysis_and_security_engine:base:1.1_elizabeth:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D4D69D-D47D-49FC-9EDD-F92A1E9DFE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_analysis_and_security_engine:base:1.2.1_kris:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8181790-E40D-4C77-93D6-2013C5D06928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_analysis_and_security_engine:base:1.2.2_cindy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DFD4E0-0E84-44DE-B792-6BFF605AF769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_analysis_and_security_engine:base:1.2_betty:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F2F149-5084-483F-A8C1-D8DA89F45E65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/secureideas/base-php4/docs/CHANGELOG?rev=1.233&view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.sourceforge.net/viewcvs.py/secureideas/base-php4/docs/CHANGELOG?rev=1.233&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Succesful exploitation requires that the product is running in standalone mode."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in rsh in Sun Microsystems Sun Grid Engine 5.3 before 20060327 and N1 Grid Engine 6.0 before 20060327 allows local users to gain root privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AE9E9D-462D-426E-A6C5-274DF7407ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:n1_grid_engine:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CB1FFB-0D29-4214-BA95-CFDC3B3515AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015835",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102268-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102268-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects Sun Microsystems, Sun Grid Engine 5.3 before 20060327 & N1 Grid Engine 6.0 before 20060327."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error parameter to include.php, possibly due to a problem in login/login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:1.6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD305C66-3B8B-468E-945A-DFEE09E6FB8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429249/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429249/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) calendar_id, (2) style_sheet, and (3) start parameters in (a) ViewDay.html; the (4) txtSearch and (5) opgSearch parameters in (b) ViewSearch.html; the (6) calendar_id and (7) approved parameters in (c) ViewYear.html; the (8) item_type_id parameter in (d) ViewCal.html; and the (9) week parameter in (e) ViewWeek.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mh_software:connect_daily:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.9",
            "matchCriteriaId" : "6363E3CC-FA03-4086-95D1-E852E2A6FC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mh_software:connect_daily:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06E8E63-E65A-4988-B071-48B656404D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/connect-daily-multiple-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19434",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/connect-daily-multiple-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "/sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 \"does not recover gracefully from some error conditions,\" which allows local users to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17280",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00619550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00619550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of HP-UX B.11.00, B.11.11, and B.11.23 before 20060326."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766661C0-6A35-4F62-8325-3840A75CF3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp1:sdk:*:*:*:*:*",
            "matchCriteriaId" : "A68B91D1-5DA0-4F58-BBF9-CE3FCBDC7F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp2:sdk:*:*:*:*:*",
            "matchCriteriaId" : "644D1C0E-482D-4C6D-AE9D-6B1F99306BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A927C9E-5CCC-4FC1-AE63-24B96A5FC51A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:sdk:*:*:*:*:*",
            "matchCriteriaId" : "EB1AAAB4-FCB4-4BFB-B425-49923D00D2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://owasp.net/forums/234/showpost.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://owasp.net/forums/257/showpost.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19406",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://owasp.net/forums/234/showpost.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://owasp.net/forums/257/showpost.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Succesful exploitation can only occur when ntdll.dll system library is used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK packages."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a function with a long name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "C6AF9FB5-74E7-4518-BDA7-F8E42E03E0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp1:sdk:*:*:*:*:*",
            "matchCriteriaId" : "A68B91D1-5DA0-4F58-BBF9-CE3FCBDC7F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp2:sdk:*:*:*:*:*",
            "matchCriteriaId" : "644D1C0E-482D-4C6D-AE9D-6B1F99306BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "4F6C9500-F487-4100-8A50-CB54E6A22607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:sdk:*:*:*:*:*",
            "matchCriteriaId" : "EB1AAAB4-FCB4-4BFB-B425-49923D00D2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://owasp.net/forums/234/showpost.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://owasp.net/forums/257/showpost.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19406",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://owasp.net/forums/234/showpost.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://owasp.net/forums/257/showpost.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B2E8AE8-3B62-472D-B3BD-AC780B2D1340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E29ACE-2333-49D0-98B4-E6535152EA8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24232-php_classifieds.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19440",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24232-php_classifieds.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourceworkshop:newsletter:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B92A507A-7522-4BBF-BB24-19D12FF70465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/107/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19425",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430375/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/107/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430375/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via (1) the user_email parameter in (a) lostpass.php, and the (2) user_email and (3) user_username parameters in (b) sub.php and (c) unsub.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:null_news:null_news:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F61ACA3-3DFD-4923-8532-09BAF8E11071"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/109/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19413",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430298/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/109/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430298/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Succesful exploitation of this vulnerability requires the \"magic_quotes_gpc\" parameter to be disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoetux.net:phxcontacts:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBED34A-0978-44B9-8995-C603BDF21126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoetux.net:phxcontacts:0.93.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05AFA0E-8872-400A-8E59-CE95BEE9B5B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429259/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17307",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429259/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) motclef and (2) nbr_line_view parameters in (a) carnet.php, and the (3) id_contact parameter in (b) contact_view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoetux.net:phxcontacts:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBED34A-0978-44B9-8995-C603BDF21126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoetux.net:phxcontacts:0.93.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05AFA0E-8872-400A-8E59-CE95BEE9B5B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429259/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429259/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to (1) includes/index.php, (2) tests/add_duration_test.php, (3) tests/all_tests.php, (4) groups.php, (5) nonusers.php, (6) includes/settings.php, (7) includes/init.php, (8) includes/settings.php.orig, (9) includes/js/admin.php, (10) includes/js/edit_entry.php, (11) includes/js/edit_layer.php, (12) includes/js/export_import.php, (13) includes/js/popups.php, (14) includes/js/pref.php, or (15) includes/menu/index.php, which reveal the path in various error messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3978222-2030-429A-99D0-C79BAABBF746"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enova:x-wall_asic:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5C3F73-3BFB-4603-A5C2-6F1551924B30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hexview.com/docs/20060328-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hexview.com/docs/20060328-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Physical access to the device or hardware token is required to perform\r\nthe attack."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo Linux might allow local users with games group membership to gain privileges by modifying tetris-bsd.scores to contain crafted executable content, which is executed when another user launches tetris-bsd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bsd-games:tetris-bsd:gold:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "785665D4-3A6D-4F76-98C5-F5B671826CBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=122399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-26.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17308",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=122399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200603-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain \"01 00 00 00\" byte sequence with an \"FF FF FF FF\" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll; (2) an Excel .xlw document, which triggers an access violation in excel.exe; (3) a Word document, which triggers an access violation in mso.dll in winword.exe; and (4) a PowerPoint document, which triggers an access violation in powerpnt.txt.  NOTE: after the initial disclosure, this issue was demonstrated by triggering an integer overflow using an inconsistent size for a Unicode \"Sheet Name\" string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AD45BF-8A91-4C87-AF15-D38D8468A4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "716DDA05-D094-4837-852C-0511CDDD5ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:student_teacher:*:*:*",
            "matchCriteriaId" : "ADD36A6D-10D8-4E06-899A-70FF822DAD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "A78DC369-DCAE-4D75-8C33-0FFF108640F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "5D0E4E8A-CE64-4771-A925-8DE7079512C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB85A3C-EFA3-485D-84C5-7976718AEAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9D02D769-061D-44A5-B019-F4E653DF615A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21012",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015855",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/609868",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27150",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439697/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17252",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27607",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27609",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A639",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1615",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/21012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/609868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439697/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Default.asp en EzASPSite 2.0 RC3 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios y obtener el hash SHA1 de la contraseña de admin a través del parámetro Scheme."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezaspsite:ezaspsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0_rc3",
            "matchCriteriaId" : "1A88D784-6700-49BD-B4AD-3887EAB385C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114367573519326&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=22",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429487/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114367573519326&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429487/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a \"stack overflow,\" and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function.  NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.2",
            "matchCriteriaId" : "90C1DEDF-83D3-43A8-B716-8EC1AD2F7960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.gotfault.net/research/exploit/gexp-python.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1591",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.gotfault.net/research/exploit/gexp-python.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the Python is running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187900\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) loginvar parameter in (a) admin/admin.php, and the (2) news and (3) nom parameters in (b) news.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscripts:vnews:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B7B232-CB88-4C05-AFAB-49A4C4F7FEFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430674/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430674/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza and (2) tresckomentarza parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscripts:vnews:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B7B232-CB88-4C05-AFAB-49A4C4F7FEFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430674/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430674/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-30T11:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscripts:vnews:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B7B232-CB88-4C05-AFAB-49A4C4F7FEFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430674/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430674/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1059",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-30T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B918306-8743-404D-A035-CC3997ADCC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43684906-D3AA-40FB-A75D-ED65C1DC9BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E39538-4811-49DB-97CF-1F018C58BAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85D69FE-AF43-4B0E-A7A9-2D2C16426180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19455",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19539",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015850",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://us1.samba.org/samba/security/CAN-2006-1059.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24263",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00114.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429370/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17314",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25575",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://us1.samba.org/samba/security/CAN-2006-1059.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00114.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1546",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-30T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.8",
            "matchCriteriaId" : "4839E719-F3DA-4768-BB37-B575207BEC22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=38374",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/struts-dev/200601.mbox/%3cdr169r%24623%242%40sea.gmane.org%3e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/struts-user/200601.mbox/%3c20060121221800.15814.qmail%40web32607.mail.mud.yahoo.com%3e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19493",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1205",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25612",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=38374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/struts-dev/200601.mbox/%3cdr169r%24623%242%40sea.gmane.org%3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail-archives.apache.org/mod_mbox/struts-user/200601.mbox/%3c20060121221800.15814.qmail%40web32607.mail.mud.yahoo.com%3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1547",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-30T22:02:00.000",
      "lastModified" : "2026-04-16T14:02:43.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-21",
      "cisaActionDue" : "2022-07-21",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apache Struts 1 ActionForm Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-749"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.9",
            "matchCriteriaId" : "B108ED90-C4AA-496F-B3C7-4AA392564C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:apache:commons_beanutils:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7987ADF-7D37-4D26-BA04-B4279082F327"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=38534",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19493",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1015856",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1205",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25613",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=38534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1015856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2006-1547",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1548",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-30T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.8",
            "matchCriteriaId" : "4839E719-F3DA-4768-BB37-B575207BEC22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=38749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19493",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1205",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25614",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.apache.org/struts/browse/STR-2781",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.apache.org/bugzilla/show_bug.cgi?id=38749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.apache.org/struts/browse/STR-2781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1550",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-03-30T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1BE015-DB85-40B7-8E46-EF1F3AC325B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D772EF-ACB9-4299-9BE3-3F0579145BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF88FD4E-7248-499A-A0E3-A944D403D424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.92.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0814A4A-83A2-495F-88C4-7066341514AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4B312B-5056-4941-8B71-71D602CD9597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C2501-F15B-4292-9C0C-A1205304A9A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19469",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19505",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19507",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19543",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19546",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19765",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015853",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0280.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429357/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17310",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/266-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0280.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429357/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/266-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0052",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CF8999-445E-4E03-89F1-81669F9F93D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D965E3E-E08C-40EA-AF66-470F473F0262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64179C1D-C96F-431F-AD80-CBCA77CB9E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6B30F6-70A8-43C7-BA5C-6DD8A6ED829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "767101D3-ABB0-4D34-AA28-75F78A392F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB60D06-E9D0-4949-8542-334D180F491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F884774-D1A1-42A6-A3FE-9B0500725666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C56B981-FD66-46F2-806A-3FFDEC520482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3E1994-6CAC-48E9-8438-0D894A76FE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8742B0-A91D-457D-BF57-06AFC5219BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04EDBE-4B04-4B4C-A2BE-5286AC7C8952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615566E3-9EBD-49B3-9727-0883D3F0334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59D0CCF-3CD0-4D99-B1F1-38F331422801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADF5CE8-D072-4CFE-8A96-BA86187B478B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72278005-5F2A-4459-8813-DF7EC2D1F063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E39A909-E266-4BA9-87C6-DE26052433E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA16FD9-0625-4D3D-9F10-130A28C88DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE33EFBF-E155-4C3B-93CC-63AA1266A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F2FB70-7EB9-4AA7-9E85-C151C3CC8104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F9AC7B-C0EB-4B7F-8997-1491301D0EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D6A976-FFEA-4DB6-B002-8036E778C78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8894855-E303-4B55-B3BC-DCBE3A0AB703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1500D8-952A-46C6-920C-096760C36A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503D7346-4891-40B1-A0CD-0FACC5359431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643610C6-99A9-43C9-A8FC-463A244C08DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C53260-503F-4934-B1FE-9FACD8E0EE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085C333C-E2E7-4ACD-9CC8-C37C67725954"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358892",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19522",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19545",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19571",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20624",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015851",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1027",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:061",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_08_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/24367",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0486.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17311",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9475",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/267-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_08_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0486.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/267-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka \"Deja-Doom\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A419AE8-F5A2-4E25-9004-AAAB325E201A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857C92E2-6870-409A-9457-75F8C5C7B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443FF271-A3AB-4659-80B2-89F771BF5371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3112AFEB-7893-467C-8B45-A44D5697BB79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC83309-3A97-4619-B5C1-574610838BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891514D5-50C8-4EDC-81C5-24ABF8BCC022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86DEDD-ABDC-46BD-BAD3-A409635F7801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C977D9-26B7-4731-B8E1-CA44EB387B9A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:imageio:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E7DDD0-15E0-4464-9FA0-154188BC0FA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drunkenblog.com/drunkenblog-archives/000760.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drunkenblog.com/drunkenblog-archives/000760.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tachyon:vsns_lemon:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3803FD-65F5-449F-BF34-14C1440931BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/106/description.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430345/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/106/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430345/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tachyon:vsns_lemon:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3803FD-65F5-449F-BF34-14C1440931BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/106/description.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430345/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/106/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430345/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"magic_quotes_gpc\" parameter is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsns[topic_id] cookie to the targeted topic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tachyon:vsns_lemon:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3803FD-65F5-449F-BF34-14C1440931BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/106/description.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430345/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/106/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430345/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) CatName, (2) CaricatierID, or (3) CatID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:al-caricatier:al-caricatier:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1D56C4-DFE3-4129-B92B-F2483E14476B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429095/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17289",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429095/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the (1) from and (2) into parameters in a calculate action, and the (3) id parameter in an edit action to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skintech:x-changer:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0671FBAF-80A1-4010-A6F9-AE7892AAA08E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17322",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php_script_index:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE709964-0C58-434C-8CCC-C20389F4DC62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24243-script_index.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19443",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24243-script_index.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php_script_index:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE709964-0C58-434C-8CCC-C20389F4DC62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/1158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly (1) id and (2) topicid, in (a) browse.php, (b) category.php, (c) gallery.php, (d) poll.php, and (e) possibly other unspecified scripts.  NOTE: portions of the description details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skintech:phpnewsmanager:1.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD44FD4D-0280-46C5-8720-67E819E140B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430311/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430478/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430311/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430478/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscripts:vbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC8069E-2DD5-453A-A84C-FE4173CD3155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430624/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430624/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is set to off."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) autor, (2) www, (3) temat, and (4) tresc parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscripts:vbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC8069E-2DD5-453A-A84C-FE4173CD3155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430624/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430624/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other [V]Book scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscripts:vbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC8069E-2DD5-453A-A84C-FE4173CD3155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430624/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430624/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is set to off."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the (1) mod_authz_svn.so and (2) mod_dav_svn.so modules, which might allow local users to gain privileges by installing malicious libraries in that directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359234",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17288",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in libgpib-perl 3.2.06-2 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the LinuxGpib.so module, which might allow local users to gain privileges by installing malicious libraries in that directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359239",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17288",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-03-31T11:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the tunepimp.so module, which might allow local users to gain privileges by installing malicious libraries in that directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17288",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-01T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in searchresults.asp in SiteSearch Indexer 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchField parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitesearch:indexer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "ED0A57A2-80AD-4DD0-B4F3-188F7FDFF018"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/sitesearch-indexer-35-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19467",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/sitesearch-indexer-35-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-01T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) email, (2) location, or (3) website parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redcms:redcms:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488E37F8-A3D3-4AA9-BC5B-5A3FD198E185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/115/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19475",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431001/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/115/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431001/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-01T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters to (a) login.php or (b) register.php; or (3) u parameter to (c) profile.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redcms:redcms:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488E37F8-A3D3-4AA9-BC5B-5A3FD198E185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/115/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19475",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431001/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/115/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431001/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-01T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Esqlanelapse 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esqlanelapse:esqlanelapse:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97742AB9-3A52-466E-AE26-FC763FE58ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esqlanelapse:esqlanelapse:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE302C11-1B68-404F-A57D-E9D1CAD44AD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19474",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406021",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-01T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r2xdesign:qlitenews:2005-07-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D09638C-82AB-473D-AA49-51FE1A67C015"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/114/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19476",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430873/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/114/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430873/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires \"magic_quotes_gpc\" to be disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-01T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a newthread action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:o2php.com:oxygen:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFE8054-7CDC-40BF-8A0A-A31AAF02A2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:o2php.com:oxygen:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C07449C-BA7F-47F7-BEF0-66FC8074251B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:o2php.com:oxygen:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2351B4E7-A840-4CB7-BC43-1E03F57A9CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:o2php.com:oxygen:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A743D497-070A-4B10-A3E2-055C08D75767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:o2php.com:oxygen:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289B6C7D-8311-46EB-8B8A-3366D22450A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19481",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429474/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429474/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-01T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in MediaSlash Gallery allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter (part of the $page_menu variable)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediaslash.com:mediaslash_gallery:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD064FA-FB14-414B-B153-920DA5D3ED44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429395/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429395/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-01T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A92F603-AD3F-4308-A1CB-19C3520BD9D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7921EB-BE36-4E86-A27F-2299F207BD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3881F85B-51A4-4C3E-A984-2043BC59C666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220355B-6334-44E9-BFC8-331129C2AFE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06631C10-25DC-4733-A1D2-F37556978AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop_scheduler:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A32803-8EC6-4846-AA9F-BFA4E9D2BA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web_scheduler:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89606FE1-4064-4A69-B77E-86B7433FB113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web_scheduler:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D83233-0E11-4BC0-A80A-0F7D9F0E9A61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19483",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply patch :\r\nhttp://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorx and (2) newsx parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscripts.pl:qlnews:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534B10A3-B097-409A-BD84-F04763580076"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/113/description.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430741/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/113/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430741/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscripts.pl:qlnews:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534B10A3-B097-409A-BD84-F04763580076"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/113/description.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430741/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/113/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430741/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) start_day, (2) start_year, and (3) start_month parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C62F6BC-4397-44BD-A7DA-CD4C52425BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DB707C-29DF-442C-BBBE-650182692A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C420189-4748-465C-96FE-DC89502F7E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3A1BAC-F777-413E-BFB7-972C687C2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BE023-C283-4775-915C-79817723917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337E18A7-07A3-456D-868A-2002F96D7A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5AE0B4-15AB-49E7-9B97-96BA322B0966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/mantis-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19471",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17326",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/mantis-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Keystone Digital Library Suite (DLS) 1.5.4 and earlier allow remote attackers to execute arbitrary SQL commands via the subject_type_id parameter in (1) the index page and (2) the search module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:index_data_aps:keystone_digital_library_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.4",
            "matchCriteriaId" : "271B93B4-C387-4402-B749-C1BD11916C0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/03/keystone-dls-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/03/keystone-dls-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topics.php in Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier allows remote attackers to execute arbitrary SQL commands via the limite parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dbbs:dbbs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0-alpha",
            "matchCriteriaId" : "2E3D02C8-C108-4E25-B8BF-D89E38EC39B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429512/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429512/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter in query.jsp and (2) entryId parameter in edit.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websina:bugzero:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1",
            "matchCriteriaId" : "E8E3A26D-EE7E-4CD3-92AF-564D329D6DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/bugzero-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/bugzero-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the _path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blanknberg:blanknberg:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6C88FC-FD4F-4115-8BF0-B0294B587BCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.silitix.com/bnb.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.silitix.com/bnb.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via the _path parameter.  NOTE: this might be resultant from the directory traversal issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blanknberg:blanknberg:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6C88FC-FD4F-4115-8BF0-B0294B587BCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.silitix.com/bnb.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.silitix.com/bnb.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter.  NOTE: post-disclosure analysis by CVE suggests that the \"page\" parameter is not used in this product, and \"id\" might be the affected parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juliusz_julas_gonera:warcraft_iii_replay_parser_php:1.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A2D351-B312-45A1-B231-6EAA9B2BED7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429535/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429535/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads.  NOTE: post-disclosure analysis by CVE suggests that the \"page\" parameter is not used in this product, and \"id\" might be the affected parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juliusz_julas_gonera:warcraft_iii_replay_parser_php:1.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A2D351-B312-45A1-B231-6EAA9B2BED7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429535/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429535/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via (1) the pc parameter in (a) index.php and (2) pnom, (3) pcourriel, and (4) pcommentaire parameters in (b) image_agrandir.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3dsrc:monalbum:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ACBA753-1457-4253-A3E3-0EA28BAA83DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bash-x.net/undef/adv/monalbum.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429475/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bash-x.net/undef/adv/monalbum.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429475/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-02T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_solutions_professionals:site_man:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA40C7B-0DC4-484F-8E37-E6409FFF93B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetBSD 1.6 up to 3.0, when a user has \"set record\" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19465",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19464",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015846",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17312",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via an ELF interpreter that does not have a PT_LOAD section in its header, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-008.txt.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015848",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-008.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The NetBSD 2.x versions are only affected if the kernel is compiled with the USE_TOPDOWN_VM option (not default in generic kernels)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE) 1.2.4 and (2) Analysis Console for Intrusion Databases (ACID) 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the (a) back parameter to base_graph_main.php, (b) netmask parameter to base_stat_ipaddr.php, or (c) submit parameter to base_qry_alert.php within BASE, or (d) query string to acid_main.php in ACID, which causes the request URI ($_SERVER['REQUEST_URI']) to be inserted into a refresh operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D78AC4-55B1-46FE-9875-112A27E740E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:0.9.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C43D3C-AFB0-4265-AE28-5965AD62B1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D08241-B90D-420A-B763-654B99ACEE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FA0D32-A1BC-47D6-89ED-A559585F2F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7533848B-C871-4113-B211-A507026F95BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B66DBD-535B-4704-A3C0-35E299F07F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096B0DBE-1C6E-4C91-B0F3-16F52FBEDFDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87ACDA32-560F-427D-A61E-5EDE14D351C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A36A890-6FF6-42A5-9A99-FB7743D360F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F102F800-F452-48AA-98F0-01B956565915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10AEE525-2F5F-4194-A9D0-D62417D4700F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A85C8C5-0A44-4F85-8E71-252334A0D664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6594E7A8-E4E4-4637-B6CC-1D21FAB211A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1326FC5-FE73-4489-8A4A-85F3B9904C7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C23F76-63F7-4B03-AC57-6817796EF57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roman_danyliw:analysis_console_for_intrusion_databases_\\(acid\\):0.9.6b23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480953F8-598A-4543-ADC5-C5C170ECA3DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=10064470&forum_id=42223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/20835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=10064470&forum_id=42223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/20835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Analysis Console for Intrusion Databases - The vendor has discontinued this product and therefore has no patch or upgrade that mitigates this problem.\r\n\r\nBasic Analysis and Security Engine - Upgrade to cvs version or version 1.2.5 (daiga) or higher, as it has been reported to fix this vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file."
      }, {
        "lang" : "es",
        "value" : "desbordamiento de búfer basado en memoria dinámica (heap) en Microsoft Windows Help winhlp32.exe permite a los atacantes asistidos por el usuario ejecutar código arbitrario a través de datos de imagen incrustados creados en un archivo .hlp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "35346A7B-2CB5-446D-B0C3-1F21D71A746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "BBD9C514-5AF7-4849-A535-F0F3C9339051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*",
            "matchCriteriaId" : "416F06DD-980E-4A54-822D-CBA499FD1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "B1CDE116-BFE5-47F9-8EA4-F6510A17CCFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*",
            "matchCriteriaId" : "A08D0EA1-DA1B-4C52-883A-3F156F032517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "56094D8B-1049-475F-B6B8-BB9DA143DA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*",
            "matchCriteriaId" : "02BE9817-E1AE-4619-8302-CA7AA4167F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "26557DD5-C8A2-4AE3-B135-23F8B5F11DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*",
            "matchCriteriaId" : "88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "306FC85F-9947-4721-B823-60733FA9E317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*",
            "matchCriteriaId" : "12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "DCC020E3-EA09-4E40-B607-8F0602B255BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
            "matchCriteriaId" : "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*",
            "matchCriteriaId" : "EDDD8DA8-D074-4543-AEDF-F856B5567F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D113B353-03B6-4821-9F83-25D88423C229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "2FECD4B0-23A0-4C0B-9888-D28A5941D848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044748.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.open-security.org/advisories/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430871/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044748.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.open-security.org/advisories/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430871/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x-doom:x-doom:1.06.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E08C58-D33A-4A60-9EF6-61D576777AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zdaemon:zdaemon:1.08.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112A6DF-9775-4BB1-85BA-62177E42C193"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/zdaebof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429521/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/zdaebof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429521/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x-doom:x-doom:1.06.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E08C58-D33A-4A60-9EF6-61D576777AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zdaemon:zdaemon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.08.01",
            "matchCriteriaId" : "DB39FBA3-6A2A-46E3-9542-5D447C64BF28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/zdaebof-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429521/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1198",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1199",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/zdaebof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429521/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use \"..\" (dot dot) sequences to (1) read arbitrary files via the file parameter in a rqEditHtml command to document/rqmkhtml.php or (2) execute arbitrary code via the includePath parameter to learnPath/include/scormExport.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.4",
            "matchCriteriaId" : "472DB59F-0201-4492-A877-ACA8864CAF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE56684-B98B-4642-93F3-8C6297246E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BD0DDD-51EC-40E6-8E6D-635E449478AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EA479E-E55B-45B2-9DD2-4E2D088AF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F49508-B7BC-4971-B3A7-279DCE45E369"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/claroline_174_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/claroline_174_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via \"..\" sequences in the file parameter in a rqEditHtml command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.4",
            "matchCriteriaId" : "472DB59F-0201-4492-A877-ACA8864CAF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE56684-B98B-4642-93F3-8C6297246E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BD0DDD-51EC-40E6-8E6D-635E449478AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EA479E-E55B-45B2-9DD2-4E2D088AF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F49508-B7BC-4971-B3A7-279DCE45E369"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1905.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/claroline_174_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24285",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17344",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1905.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/claroline_174_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to execute arbitrary PHP code via the includePath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE56684-B98B-4642-93F3-8C6297246E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BD0DDD-51EC-40E6-8E6D-635E449478AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EA479E-E55B-45B2-9DD2-4E2D088AF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F49508-B7BC-4971-B3A7-279DCE45E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC9DF44-4883-422F-9FB8-57CDE7EA6C43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1888.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/claroline_174_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19461",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1888.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/claroline_174_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T14:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Annuaire (Directory) 1.0 allows remote attackers to obtain sensitive information via a direct request to include/lang-en.php, which reveals the full installation path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:annuaire:directory:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2599412-59E9-457A-BDB3-1048DB53154C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24302-annuaire_directory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24302-annuaire_directory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T14:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inscription.php in Annuaire (Directory) 1.0 allows remote attackers to inject arbitrary web script or HTML via the Comment Field (COMMENTAIRE parameter)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:annuaire:directory:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2599412-59E9-457A-BDB3-1048DB53154C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24302-annuaire_directory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24302-annuaire_directory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T14:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in genmessage.php in Accounting Receiving and Inventory Administration (ARIA) 0.99-6 allows remote attackers to inject arbitrary web script or HTML via the Message Field (message parameter)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accounting_receiving_and_inventory_administration:aria:0.99-6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01FBCAAB-16FE-4DEE-AA65-54023DF5CCE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24255-aria.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24255-aria.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T14:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword_list parameter to (a) index.php; (2) title, (3) article, (4) author, and (5) keywords parameters to (b) submit_article.php; and (6) Question, (7) Name, and (8) Email parameters to (c) submit_question.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andy_grayndler:andys_php_knowledgebase:0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EF1264-F668-425E-93D3-F9BA91F86E2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24310-aphpkb.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24310-aphpkb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.42n",
            "matchCriteriaId" : "6500E874-9772-40D0-96C5-7EFFD5680078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1527A-4BE5-47BA-9FA9-C19DE1718E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D6B81E-4362-4FE6-8F28-EAD7C0EEA59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17E8AF6-7171-4790-AF9B-BB8BC8A02B09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE7DA9E-6D96-43B4-8853-94892ACA8CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BE60DD-D7EF-46AF-A8B2-8B942E846A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.41b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0444AD2-4096-44D9-9121-6EB40D0EC604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:an:an-httpd:1.41c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADA8F67-3EEE-4573-BA2C-D38B6366C4C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19326",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-21/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429667/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17350",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-21/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429667/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VC_CRYPTO_METHOD option is OPENSSL, allows remote attackers to execute arbitrary commands, possibly due to problems in the (1) encrypt and (2) decrypt functions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-creator.com:v-creator:1.3_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4200F9A9-B46E-4543-B043-85857DEBF505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19453",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=557129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceforge.net/p/vcreator/news/2006/03/v-creator-v13-pre3-released/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=557129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/p/vcreator/news/2006/03/v-creator-v13-pre3-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-03T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in category.php in PhpWebGallery 1.4.1 allows remote attackers to execute arbitrary SQL commands via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A25DD-835C-43FF-A040-90B59B5C8D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429665/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429665/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1058",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables."
      }, {
        "lang" : "es",
        "value" : "BusyBox 1.1.1 no utiliza una \"sal\" cuando genera contraseñas, lo que facilita a usuarios locales adivinar contraseñas a partir de un fichero de contraseñas robado usando técnicas como tablas \"rainbow\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:busybox:busybox:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5408DA3E-9CA1-4768-992C-1732A45C4365"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:aura_application_enablement_services:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA477675-E93D-41F6-A10C-4B6CFBA97C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:aura_application_enablement_services:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBE1432-359B-4250-8381-E24511D24B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:aura_sip_enablement_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "7CCDF311-E2C3-4AAC-83D1-44938370FBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8F6982-2F4D-4D78-92C1-97689D59F3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avaya:messaging_storage_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "9AEA45A8-8768-4CB4-8996-91D7F7AEC9F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.busybox.net/view.php?id=604",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19477",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25848",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0244.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17330",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25569",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugs.busybox.net/view.php?id=604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0244.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187385\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 or 3.",
        "lastModified" : "2006-09-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en SunPlex Manager en Sun Cluster 3.1 4/04 permite a usuarios locales con autorización 'solaris.cluster.gui' ver ficheros de su elección mediante vectores no especificados.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:cluster:3.1:4_04:*:*:*:*:*:*",
            "matchCriteriaId" : "613E60E9-1FB4-4B1F-B110-72A66622CD76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19444",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102278-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102278-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_common.php in the VWar Account module (vWar_Account) in PHPNuke Clan 3.0.1 allows remote attackers to include arbitrary files via a URL in the vwar_root2 parameter.  NOTE: it is possible that this issue stems from a problem in VWar itself, but this is not clear."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en includes/funcions_common.php en el módulo VWar Account (vWar_Account) en PHPNuke Clan 3.0.1 permite a atacantes remotos incluir ficheros de su elección mediante una URL en el parámetro vwar_root2. NOTA: es posible que esta cuestión provenga de un problema en el mismo VWar, pero no está claro.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke-clan:phpnuke-clan:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A76C8553-81A3-4A09-AB88-1B56870C54D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19501",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429615/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429615/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via the cur_password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24353-phpbb.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19494",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24353-phpbb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not \"typecasted.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD825E86-09EF-48C6-BCA5-E396B8F9506F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE650BD7-6469-44A4-ABF5-844D20898A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6523ED-8368-463A-A3F7-D52EA4F20D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF50CC96-F6F8-4669-87D4-BC57968779C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19498",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving \"parsed PHP.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD825E86-09EF-48C6-BCA5-E396B8F9506F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE650BD7-6469-44A4-ABF5-844D20898A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6523ED-8368-463A-A3F7-D52EA4F20D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF50CC96-F6F8-4669-87D4-BC57968779C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19498",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows \"directory disclosure\" with unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD825E86-09EF-48C6-BCA5-E396B8F9506F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE650BD7-6469-44A4-ABF5-844D20898A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6523ED-8368-463A-A3F7-D52EA4F20D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF50CC96-F6F8-4669-87D4-BC57968779C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19498",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows \"php injection\" via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD825E86-09EF-48C6-BCA5-E396B8F9506F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE650BD7-6469-44A4-ABF5-844D20898A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6523ED-8368-463A-A3F7-D52EA4F20D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF50CC96-F6F8-4669-87D4-BC57968779C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19498",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service (server process and transfer control process stop) when the products \"receive data unexpectedly\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:xfit_s:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DD7527-FB58-4022-A857-10E7D90E6BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:xfit_s_jca:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A4BCEE-A2B3-493B-8376-641DA69A2612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:xfit_s_zengin:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36EDE27C-AE72-48BF-8DA7-1B191C495351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:xfit_s_zgin:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFEC846-20AC-453E-A7DA-185D5D4DE026"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-004_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-004_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party (ALP), allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.  NOTE: this only occurs when register_globals is disabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squery:squery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "7FE10A14-FF1C-4FCB-BABE-B43253157E73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429611/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17434",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429611/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kgb:archiver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFF01D9-F855-4B92-A794-A2240E6DFB05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=162546&release_id=406411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=162546&release_id=406411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of KGB, Archiver before 1.1.5.22"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) yname, (2) emailadd, (3) subject, and (4) comment parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aweb_labs:awebnews:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B3548D-871F-4590-A3CE-797A77022B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/116/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19487",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/116/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable in (a) login.php or (b) fpass.php; or (2) cid parameter to (c) visview.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aweb_labs:awebnews:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B3548D-871F-4590-A3CE-797A77022B56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/116/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19487",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/116/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Condition: magic_quotes_gpc = off\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-04T14:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:webshield_smtp:*:mr2_patch:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "E0B91756-AD17-4D68-BE4C-E169BE6FEE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19491",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429812/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16742",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429812/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has released a patch (P0803), along with version 4.5 MR2 to address this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0051",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is \"fetching remote playlists\", which triggers the overflow in the http_peek function."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en playlistimport.cpp en Kaffein Player 0.4.2 a 0.7.1 permite a atacantes con implicación del usuario ejecutar código de su elección mediante peticiones HTTP largas cuando Kaffeine está \"obteniendo listas de reproducción remotas\", lo que que dispara un desbordamiento de búfer en la función http_peek.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaffeine:kaffeine_player:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789E99F5-9047-4B97-9F5D-0A83A5B2C264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaffeine:kaffeine_player:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AEDC59-1392-45A6-A498-07061345ED1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaffeine:kaffeine_player:0.4.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E1BFF-C301-43FA-B6A0-FF14CFBC6E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaffeine:kaffeine_player:0.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D173DD-913A-4A32-B687-B4E2F7BBEB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaffeine:kaffeine_player:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79CBD359-6818-444C-A0DD-212B21832640"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19525",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19540",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19542",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19549",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19557",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19571",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1015863",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1023",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060404-1.txt",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:065",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_08_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430319/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17372",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1229",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25631",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/268-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060404-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_08_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/268-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Mac OS X anteriores a 10.4.6, cuando se ejecuta en un ordenador basado en Intel, permite a atacantes con acceso físico saltarse la contraseña 'firmware' e iniciar sesión en Modo De Un Usuario mediante vectores no especificados. \r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19462",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to comments.php or (2) poll_id parameter to page.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL  en Advanced Poll 2.02 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante (1) el parámetro id de comments.php o (2) el parámetro poll_id de page.php.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_poll:advanced_poll:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A1428F-87C3-4D20-A86E-EEBD68755E55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ns79.hosteur.com/~secuti/advancedpoll.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ns79.hosteur.com/~secuti/advancedpoll.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to comments.php or (2) poll_id parameter to page.php.  NOTE: it is possible that this issue is resultant from CVE-2006-1616."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de guiones en sitios cruzados (XSS) en Advanced Poll 2.02 permite a atacantes remotos inyectar guiones web o HTML de su elección mediante (1) el parámetro id de comments.php o (2) el parámetro poll_id de page.php. NOTA: es posible que este asunto sea resultante de CVE-2006-1616."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_poll:advanced_poll:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A1428F-87C3-4D20-A86E-EEBD68755E55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ns79.hosteur.com/~secuti/advancedpoll.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ns79.hosteur.com/~secuti/advancedpoll.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en las funciones (1) Con_message y (2) conPrintf en con_main.c en Doomsday engine 1.8.6 permite a atacantes remotos ejecutar código de su elección mediante especificadores de cadena de formato en un argumento de la orden JOIN, y posiblemente argumentos de otras órdenes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doomsday:doomsday:1.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F157362-1282-4984-BEBD-CF877CFD98C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/doomsdayfs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044865.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19515",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-05.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429857/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/doomsdayfs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044865.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429857/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a large header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929036D8-2958-4B3D-A1EA-05E83A91158F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D49E8F43-497A-4AC2-B771-C0DDC89C319B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89952309-97EE-462A-B9A3-8013BC1CA1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21053738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21053738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an \"Update User\" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE.  It was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1_hotfix_3.3",
            "matchCriteriaId" : "C18F4F55-D4B2-4A6D-8C75-0BE66C638764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:2002_rc_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BABF84D-F609-429E-9C77-7C251F23AB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429731/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/26862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429731/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/26862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:2002_rc_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BABF84D-F609-429E-9C77-7C251F23AB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/24772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429731/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429731/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via (1) the description parameter to linklist.php and possibly other vectors involving (2) index.php and (3) linksubmit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpselect:phpselect:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB25A75-27C0-4C59-82C6-8287321D3B79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429608/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429608/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in main.php in an unspecified \"file created by Andries Bruinsma,\" possibly a FleXiBle Development (FXB) application, allows remote attackers to include and execute arbitrary PHP code.  NOTE: this disclosure is extremely vague and has very little information about the specific vulnerability type.  In addition, there is little public information on the named product. Finally, an XSS vector is implied in the subject line, but because there is no other information and evidence of a cut-and-paste error, it will not be assigned a separate CVE identifier unless additional information is provided."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andries_bruinsma:flexible_development:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42A783E-835A-49E6-A7A8-5E6C0C544115"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000680.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429613/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430334/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000680.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429613/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430334/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of syslogd in the Linux sysklogd package does not enable the -x (disable name lookups) option, which allows remote attackers to cause a denial of service (traffic amplification) via messages with spoofed source IP addresses."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3313D5-52E8-49B3-B145-170D9A26DA43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429618/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429739/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429618/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429739/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Mandriva",
        "comment" : "Mandriva does not enable the -r option in syslogd per default, which prevents syslogd from listening for remote events.  The -x option is also described in /etc/sysconfig/syslog for those who wish to enable the -r option.",
        "lastModified" : "2006-07-20T00:00:00"
      }, {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a security issue. Enabling the -r option is not suggested without the -x option which is clearly documented in the /etc/sysconfig/syslog configuration file.",
        "lastModified" : "2006-12-06T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode email tag, as demonstrated using the onmousemove event."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en inc/functions_post.php en MyBB (también conocido como MyBulletinBoard) 1.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un evento JavaScript en una etiqueta de correo electrónico BBCode, como se demuestra usando el evento onmousemove."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429748/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429748/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading.  NOTE: this is a different vulnerability than CVE-2006-1192."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429719/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429891/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440851/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429719/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429891/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440851/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects any version of Windows OS previous to XP SP2 that is using Internet Explorer 6.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1055",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-05T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825%3Bhp=597a7679dd83691be2f3a53e1f3f915b4a7f6eba",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24443",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17402",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1273",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25693",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825%3Bhp=597a7679dd83691be2f3a53e1f3f915b4a7f6eba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-05T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service (device reload) via (1) \"valid, but obsolete\" or (2) \"specially crafted\" HTTP requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF28C435-C036-4507-8E3F-44E722F9974A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060405-css.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060405-css.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the command parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de guiones en sitios cruzados (XSS) en index.php de LuckdCMS 2.0.0 RC4 permite a atacantes remotos inyectar guiones web o HTML mediante el parámetro \"command\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcms:lucidcms:2.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339E1D89-9C18-460F-B387-9A8082B0AE4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429744",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17360",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LucidCMS 2.0.0 RC4 allows remote attackers to obtain sensitive information via a direct request to /lucid_phplib/translator.php, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "LucidCMD 2.0.0 RC4 permite a atacantes remotos obtener información sensible mediante una petición directa a /lucid_phplib/translator.php, lo que revela la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucidcms:lucidcms:2.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "339E1D89-9C18-460F-B387-9A8082B0AE4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429744",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter.  NOTE: this is a different vulnerability than CVE-2006-1503."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en get_header.php de VWar 1.5.0 R12 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"vwar_root\". NOTA: Esta es una vulnerabilidad distinta de CVE-2006-1503."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDAD337-4009-474B-9105-B18BEE690479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B1A470-C615-498F-9292-19370DE5379F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51D11E1-8756-4D5F-9F2A-1048411911CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A7E74A-113E-46C9-AB7B-85DBFCCD2522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1C5ED5-2892-4F00-941A-EE64C9B56565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D51F5A-3B53-4938-951E-3B3F1024BD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCA7085-CD42-418D-8DBE-B191582DFBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143EC184-3132-439B-835D-AF4D41FA3598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256509A6-F4A0-4443-BC04-EE74CF48BA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3805AC03-2AC5-4233-8BF0-EB799164028B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EF75D3-DB96-48EF-A002-4532A860ABA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87E2E48-B53E-4638-86EC-A284DF2F2F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFA22F-659A-4CBE-B3D7-A8D7B2D7AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E672D937-CF21-478E-82AD-A5FB31AF6CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED33CE9-48E3-4EBC-8236-EA9913CE36D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21EF3A6-287C-448E-AAAD-AD0946C2B604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4DBDAC-3B64-47D1-A2E6-D9D80AA1BDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E470DF7A-A93C-4C5E-92C2-7CEE4D529519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C792C4-6B80-48D3-851C-FF85511246ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEE99F9-C46B-4688-B70E-CEF6EC8A40D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4998F301-A079-4ED8-8A8C-BC11153DBAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C72A2E-A54B-40B0-8E2F-8DD543C56EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E9FFC7-E606-489B-A135-98F6B6BEF5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC93C7E2-C78B-4F62-95C7-6029A32EF22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2604BF9F-711A-4423-B325-48A9BBE96A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8649B70-E499-48B9-BEC0-40A5CBA965AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259BA0C6-2604-47F9-9F3F-9C1723D92B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E1C96A-E919-4217-9740-7A0E091FB173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF2E5CD-19A3-4B28-B0DF-A9E78FD9E00D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8E151E-B445-476A-A984-EDB2912D5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A272DC-9B30-417A-9C77-67A7C35063C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F12BA77-5F39-44B3-A18F-69C8019FE276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966D4C0E-E82C-4BD2-AE42-F56A4B137CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4395243-2E0A-4DBA-90AD-4D74491A0E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331164B3-F2B7-4D74-8F72-6D183A4CE5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08559C71-79AA-4051-98AB-8DABA0571A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74736F85-D744-4999-B4BB-09A766EFDF9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/VWar_1.5.0_R12.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429742/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1228",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/VWar_1.5.0_R12.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429742/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) tname or (2) fpost parameters to (a) post.php; (3) fullname, (4) emailadd, (5) country, (6) sig, or (7) otherav parameters to (b) editac.php; or (8) fullname, (9) emailadd, or (10) country parameters to (c) register.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de guiones en sitios cruzados (XSS) en aWebBB 1.2 permiten a atacantes remotos inyectar guiones web o HTML de su elección emdiante los parámetros (1) tname o (2) fpost de (a) post.php; los parámetros (3) fullname, (4) emailadd, (5) country, (6) sig o (7) otherav de (b) editac.php; o los parámetros (2) fullname, (9) emailadd, o (10) country de (c) register.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aweb_labs:awebbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC1331D-F927-4FCD-8CB8-F797D549798F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/117/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/117/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php, (c) editac.php, (d) feedback.php, (e) fpass.php, (f) login.php, (g) post.php, (h) reply.php, or (i) reply_log.php; (2) p parameter to (j) dpost.php; (3) c parameter to (k) list.php or (l) ndis.php; or (12) q parameter to (m) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aweb_labs:awebbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC1331D-F927-4FCD-8CB8-F797D549798F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/117/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/117/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires \"magic_quotes_gpc\" to be disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in wpBlog 0.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire_plastik_design:wpblog:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821C2DA3-A5DC-4643-BBFD-D1CCCF8B6779"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/119/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19538",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431186/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/119/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431186/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled.  This vulnerability may affect all previous versions of Wire Plastik Design, wpBlog before 0.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to inject arbitrary web script or HTML via the email parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:czaries_network:czarnews:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E46CCB6-A6A0-4EFB-B35C-F68F54758EFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/118/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19541",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431132/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/118/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431132/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute arbitrary SQL commands via the (1) usern or (2) passw parameters to (a) cn_auth.php, (3) s parameter to (b) news.php, or (4) a parameter to (c) dpost.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:czaries_network:czarnews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14",
            "matchCriteriaId" : "11277695-34E7-46CC-9B2F-8E85E9E8BDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:czaries_network:czarnews:1.13b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AF4192-01E8-4727-A5B9-2FE9FC35B7B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/118/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19541",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431132/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/118/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431132/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_name, (3) last_name, (4) email, (5) password, and (6) confirm_password parameters to (b) userinput.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party.  In addition, the lack of precision in the third party descriptions makes it unclear whether the named vectors are correct."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "E7FCABD8-681A-4BB7-ADEB-91A30CA3994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6120F7-8ADC-4143-BF18-6F6B0D078BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAD4D95-FF60-4293-84E4-1A1CE0EE6859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F939127E-3755-4E1A-8CED-C7F951AC5650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86171EF-DA76-4BB1-9B17-76A5D826D10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCC2EB6-BA3E-426B-A903-9631064131ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19488",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "E7FCABD8-681A-4BB7-ADEB-91A30CA3994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6120F7-8ADC-4143-BF18-6F6B0D078BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAD4D95-FF60-4293-84E4-1A1CE0EE6859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F939127E-3755-4E1A-8CED-C7F951AC5650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86171EF-DA76-4BB1-9B17-76A5D826D10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCC2EB6-BA3E-426B-A903-9631064131ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19488",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "E7FCABD8-681A-4BB7-ADEB-91A30CA3994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF6120F7-8ADC-4143-BF18-6F6B0D078BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAD4D95-FF60-4293-84E4-1A1CE0EE6859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F939127E-3755-4E1A-8CED-C7F951AC5650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86171EF-DA76-4BB1-9B17-76A5D826D10A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact:interact:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCC2EB6-BA3E-426B-A903-9631064131ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19488",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web script or HTML and gain leverage to execute arbitrary PHP code via the User-Agent HTTP header, which is displayed by admin/modules/general/statistic.php in the administration panel."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reloadcms:reloadcms:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43EF4EC4-D6D7-4361-AE23-EE17675A72F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reloadcms:reloadcms:1.2.0_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A2649E-3040-4FA6-8F15-ACF0B73BB39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reloadcms:reloadcms:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF1319-416C-447F-8AED-FD9C6740722C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reloadcms:reloadcms:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F25D41F-1C54-4995-BD4C-F0669B2AF6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reloadcms:reloadcms:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C95699C-4908-4AAF-A25F-D4E3EE78220F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reloadcms:reloadcms:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220CA1D-AAD2-4F74-9DAB-01108DDD2B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reloadcms:reloadcms:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA12FC6D-44E4-40B2-A368-DD3407A1C430"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19470",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429666/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17353",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429666/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote attackers to cause a denial of service (daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_key_exchange:internet_key_exchange:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CADA641-1232-4EB0-A067-F0132A93A204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-003.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2006/01/19/0017.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-003.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail-index.netbsd.org/source-changes/2006/01/19/0017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified \"logical programming mistake\" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service via a large packet to the Teacher discovery port (UDP port 5496), which causes a thread to terminate and prevents communications on that port."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smart_technologies:synchroneyes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "A47A7A50-2812-453C-88A2-8A7774C22A72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429843/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429843/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service (memory consumption) via a certain packet to the Teacher discovery port that causes SynchronEyes to connect to the attacker's machine and read a value that is used as a parameter to malloc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smart_technologies:synchroneyes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "A47A7A50-2812-453C-88A2-8A7774C22A72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429843/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429843/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"restore to\" selection in the \"quarantine a file\" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eset_software:nod32_antivirus:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38649A99-9442-4D2C-9EB7-4D80D88BCE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eset_software:nod32_antivirus:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7150969B-8948-4CCA-8393-CFFD433B4127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eset_software:nod32_antivirus:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C276FE8A-3B0A-45CA-8A54-63A6A8736CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eset_software:nod32_antivirus:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1997DD1E-C6D2-441D-B5C6-1FC9F1D8B04E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429892/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17374",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429892/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "ESET NOD32 Antivirus version 2.51.26 fixes this vulnerability.  All versions of this product prior to 2.51.26 are vulnerable."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading.  NOTE: a followup was unable to replicate this issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429927/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430348/30/5730/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429927/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430348/30/5730/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets.  NOTE: An established researcher has disputed this issue, saying that \"Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB374F9-AD99-4CC9-B004-DEC83A7FBA14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429816/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429846/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430281/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430684/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429816/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429846/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430281/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430684/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability has been disputed."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an overflow in Log::ReallyPrint; and (2) allow remote attackers to cause a denial of service (server crash) via a long HTTP GET request to TCP port 5800, which triggers an overflow in VNCLog::ReallyPrint."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultravnc:tabbed_viewer:1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A88AF12-6226-469C-BA57-AFB5CBE1A563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultravnc:vnc_viewer:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5176614B-7653-49B8-A83A-99A22D3EDF5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044901.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430287/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1240",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044901.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430287/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "There are two seperate vulnerabilities here;  One allows escalated priveleges to authenticated users, the other allows remote unauthenticated users to cause a Denial of Service (DoS)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the installPath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angelinecms:angelinecms:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC84ECB0-F2E7-4BDA-BDD3-FDBF5BC3E898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv27-K-159-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429983/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17371",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv27-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429983/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:color_laserjet_2500_toolbox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A304024-34D2-42C3-98F4-6BE6BEEEE380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:color_laserjet_4600_toolbox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C88DC2-EAE6-443A-BAF2-78943D1F88C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet:4600dn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B99CE20D-49C1-4F5B-9C38-9CAE666A291B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet:4600dtn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DEF370-33FF-427F-A18B-7256856F7231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet:4600hdn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "001EEE62-31B1-40AC-81BC-A75D75798887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E92501-3E8C-4E61-9B65-87A7344747E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500l:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16651605-4616-44F8-8401-8DD057932BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500lse:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADB9132-CEF5-47A0-AC21-BE6B7F89B166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500n:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB99C79-1DB4-4545-8457-515B1F9F484B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_2500tn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B58AD8-F848-4286-8AB4-A8EA0372D5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A133B7-AEA8-4F26-8632-2CEDE9EBB66E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015862",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429893/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429984/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17367",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429893/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429984/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3.  NOTE: this issue might be related to CVE-2004-0991, but it is not clear."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:0.59r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F8EEF7E-C6BB-4669-81D2-68AABF8A7686"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/mpg1DoS3.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17365",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/mpg1DoS3.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:util-vserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.30.210",
            "matchCriteriaId" : "CE232428-F9A7-409F-8300-3B6EB59CF0AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vserver:util-vserver:0.30.209:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE9A404-1D1D-40E6-8BAC-18AD1394061D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17361",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A4541A-2560-482A-BAEA-275579B499B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9006F64F-D72B-49C4-9F51-8AD9273957B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5698AB2-94DE-480D-9E55-C05871562B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADBDEE-1421-42E5-8DE2-404087613B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56722F-F61A-404B-B0B2-1C92C22D0436"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19534",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19536",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://up2date.astaro.com/2006/05/low_up2date_6202.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1024",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.overflow.pl/adv/clamavupxinteger.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430405/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://up2date.astaro.com/2006/05/low_up2date_6202.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.overflow.pl/adv/clamavupxinteger.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430405/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code.  NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized properly."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.88",
            "matchCriteriaId" : "902416C3-C831-4528-8BCD-FD92B44ED660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EC0AEB-91CF-4A79-AF40-A475E896FB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5935EDE0-9203-4150-9B7A-AB10B377F9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C2680C-C187-487A-B6C4-F509E0C52436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A796E5E1-6481-49EF-8D97-9EC2A01C712B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "812B11BD-344F-40DC-9996-0CBB4BB143B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22958219-46D6-4868-B324-BFC2F2C893F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4543DDEE-C1D1-428F-91C7-98B8985A5931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FED760C-7106-49CE-B4FE-CA53A1092C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821EF522-A058-4509-A4CB-E9B800E83EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*",
            "matchCriteriaId" : "CABA4177-6B24-4364-BC34-D5ED171E60FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F488ACB2-A013-4BF3-B5AC-897E40BA87F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5799FA-DD99-4A35-BC56-B2FBEB747226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32EA99F-088E-499E-9DCE-EFA9A64D1673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B04C5B-316D-4C6A-96CF-F145F7C9E636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66D5CDE-ED5D-41BA-A4B1-28E8559EC056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20769174-C51F-47D5-A34F-EB772F542A57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "721B8B46-DFD9-4937-96A3-8D731304415B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF18A59-FB30-45C6-B28E-4499DCD78F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B28E0BE-1E2D-45D2-B483-2D81326BF482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7029650-6DF1-4616-BE9F-DE40E9BBE3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47FD5DF-F22E-4B78-9B92-A9C41950F836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F9571F-9192-414F-B680-10A22C71CFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7CAC876-9AAC-407C-A34E-98AA6801D25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470FC8FE-785A-4934-8989-D17C1796870E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A6C0FE-2EED-447D-9F62-12CFF1E0918A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0928E05F-92E7-4451-AC11-4E6A014E1154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E7A70A-3584-4259-80CA-03AE290ABAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AF81C1-5B68-4D84-AFB9-C0419B7F98D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27D70A0-EC82-4DC7-A66D-60D263B76E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "28C9C5AD-97A9-42C8-917C-2787785F5BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AB3389-1C30-47BB-9DAE-0F744E7F8877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4D3D3E-067B-4A37-A851-99D2A3E20FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA837A0-C8CB-486B-845E-A370E3137697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235A144A-4AB1-4756-AFB1-58AFFE02649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767BBE7F-6CC4-42D4-9730-6E617D36AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA7CD6A-133F-48E4-87BC-77CF21A25940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65A7930-A913-4C3D-95A3-E629D6A468C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "05D1FAF4-B4F8-446F-88C3-01289C01DB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "342A854F-0942-4A3E-AF08-BD41D8F453DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DA6E00-8126-4B62-9E7F-1E3BFC827BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0958CD-187F-4DD0-A31B-5002861F6326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "9C24942D-7AD6-4391-8F05-2827AB6A751E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA719FE4-04E0-4664-8EEC-70CD613408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7364D6-36F6-4615-95F0-E0B56722DAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C859F864-B68F-4805-B804-E50F2C3FFE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CAFEA5-C062-43EA-A302-38887DA6768C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525DC218-308C-4A0E-96A7-DC74B8973B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A4969C16-F67D-4C30-A537-FE64F4CFC3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D72B20-1F61-4499-9ADE-88AF98C3C19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C71B82-8F84-4855-A138-7E7436788D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "039341D8-8E2B-4901-BFA6-9CCC46A18C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C048A75E-6587-485C-9F2B-E12BED34FF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "97DAD83E-F14F-4B87-B5D8-7BCAD8F446BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B003639-3228-4AC1-AB46-73481BB5DDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6A495D-F9BB-41B9-A912-670D837EA278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F5E6B4-88DD-4426-9FB6-D9009F6B8740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19534",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19536",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19564",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19567",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19570",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19608",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://up2date.astaro.com/2006/05/low_up2date_6202.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1024",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1258",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://up2date.astaro.com/2006/05/low_up2date_6202.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6457C946-123B-4B85-9253-D284A7A16A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF6B1F4-6313-4BF4-AD87-431A1C9D40C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42CB75B-355B-4D80-91EA-77723B275D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5EFEC7-D9B6-454A-A36A-C75874564FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21846206-4CF3-426F-9BE7-93471987BC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED93D78-3BA8-43DB-B5AF-D2D3941C9DAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19531",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osreviews.net/reviews/security/openvpn-print",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17392",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osreviews.net/reviews/security/openvpn-print",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "OpenVPN version 2.0.6 fixes this vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an \"invalid memory access.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A4541A-2560-482A-BAEA-275579B499B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9006F64F-D72B-49C4-9F51-8AD9273957B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5698AB2-94DE-480D-9E55-C05871562B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADBDEE-1421-42E5-8DE2-404087613B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56722F-F61A-404B-B0B2-1C92C22D0436"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19534",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19536",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://up2date.astaro.com/2006/05/low_up2date_6202.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1024",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://up2date.astaro.com/2006/05/low_up2date_6202.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Chucky A. Ivey N.T. 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not filtered when the administrator views the \"Login Log\" page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chucky_a._ivey:n.t.:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C9BF07-AE0E-4F8A-8BE0-CEED1764E0CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/121/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19526",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431344/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/121/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431344/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chucky_a._ivey:n.t.:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C9BF07-AE0E-4F8A-8BE0-CEED1764E0CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/121/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19526",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431344/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/121/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431344/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-24T18:56:27.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbizscripts:image_gallery_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE57CB9-BB5D-4CB1-B59D-38483813B22B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24368",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24369",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24370",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24371",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24372",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429763/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17339",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1217",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25616",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "This vulnerability most likely affects all versions of Softbiz, Image Gallery."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-24T18:56:37.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbizscripts:image_gallery_script:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AE57CB9-BB5D-4CB1-B59D-38483813B22B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1217",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/19523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ],
      "evaluatorSolution" : "This vulnerability most likely affects all versions of Softbiz, Image Gallery."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sk_soft:skforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "E64C48EE-63DE-499C-8963-D7E1C4D70929"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19484",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17389",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20A5711-44DE-42FD-A16F-0BF59F1171E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D899CC0B-334F-4794-A7C2-449545D728C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0728.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426428",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429946/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0728.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/426428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429946/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2023-11-07T01:58:40.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0996.  Reason: This candidate is a reservation duplicate of CVE-2006-0996.  Notes: All CVE users should reference CVE-2006-0996 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D402CB-4DED-4525-AF38-B5EC73C39E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A905719D-4520-4374-B3A7-55034728B85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2899EF34-824B-4893-8636-64A83EC5885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8D295-B589-4E88-8FEE-DDD1591D9189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB10333-6C25-4359-BB3F-D76468170825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377493B-8CC0-414B-AA5F-B7777C852195"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=128838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/xinelib_poc.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00956.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00976.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=128838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/xinelib_poc.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00956.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00976.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the (1) adminJump and (2) forum_middle parameters in (a) forum.php, and the (3) form parameter in (b) members.php, (c) pm.php, and (d) mail.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arab_portal:arab_portal:2.0.1_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C677870C-947C-4548-9295-66FCA3EBB62E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/429940/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429940/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arab_portal:arab_portal:2.0.1_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C677870C-947C-4548-9295-66FCA3EBB62E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429940/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/429940/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticated users to execute arbitrary SQL commands via the limitquery_s parameter when the $projectid variable is less than 1, which prevents the $limitquery_s from being set within slides.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crafty_syntax_image_gallery:crafty_syntax_image_gallery:3.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D969C9-907A-4203-8A43-DF44E2A62F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bash-x.net/undef/adv/craftygallery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://bash-x.net/undef/exploits/crappy_syntax.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17379",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bash-x.net/undef/adv/craftygallery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://bash-x.net/undef/exploits/crappy_syntax.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticated users to upload and execute arbitrary PHP code via a multipart/form-data POST with a .jpg filename in the fullimage parameter and the ext parameter set to .php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crafty_syntax_image_gallery:crafty_syntax_image_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1g",
            "matchCriteriaId" : "242E830D-AA6E-4FD1-A954-96A3BC2DE2DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bash-x.net/undef/adv/craftygallery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://bash-x.net/undef/exploits/crappy_syntax.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19478",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17379",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bash-x.net/undef/adv/craftygallery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://bash-x.net/undef/exploits/crappy_syntax.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/19478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires privileges to upload images.  This product is also known as PHP thumbnail Photo Gallery."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter.  NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval() call, but since the username originated from the SQL injection, it could be a resultant issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpheaven:phpmychat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.14.5",
            "matchCriteriaId" : "A272D41D-842A-4F43-91D1-750A17276D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpheaven:phpmychat:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A03E7CE-4B5E-484C-842D-F720AF4DDC80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430358/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17382",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430358/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1888FF-6126-4F40-A7EA-1ED5123FA729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B6D45F-25A7-4055-9D9C-42DEACBFFE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31461FAA-2F90-47B0-BDA3-D81A8186960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF8D104-CABD-4036-A4AF-68B80D83AE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5331AAD2-7E21-4407-9DF7-9D2A8058FAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6509622E-7E8D-4238-92F2-7DB88A3DB4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80460930-7D3D-4315-8D00-FFDCDBA69477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0993B9A9-599B-4662-AEC2-EC771BCE8200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04472ED2-EB97-47E1-938E-D69C363E81C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "10988AA9-A807-4E70-8197-6F9EFC13AE86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8951276-CDEF-4F54-93DF-B96DB10E6530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D886A75-5A73-4B1C-8B2A-45D589267B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A594C2-98BB-4AC5-9CC5-89FE97D63323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B35325A-98F6-41DF-ADD8-91ED992A3ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9758019-F6EA-4552-B070-5A9EBE73BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DDAC96-7467-4FFF-B337-C0475B7214B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEC7814-61D4-420A-AB81-6720F3C2D6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "413133A5-F600-4B2B-82E1-3EAC10B7E6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ons_15310-cl_series:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B96C9A-FA1D-4E74-95C2-4355ED257FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ons_15600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811149AD-89DC-4D93-A598-F6318C9EA64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E3A7E4-39CD-44B9-B72D-0C9B810A2158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ons_15454_mstp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B98B943-24D6-4B37-A44F-0E3985BBB54E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17384",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a \"crafted\" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a \"crafted\" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a \"malformed\" OSPF packet, aka bug ID CSCsc54558."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:transport_controller:4.0.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F7F982-4359-4107-843C-E54CDA4A9E89"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1888FF-6126-4F40-A7EA-1ED5123FA729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B6D45F-25A7-4055-9D9C-42DEACBFFE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31461FAA-2F90-47B0-BDA3-D81A8186960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF8D104-CABD-4036-A4AF-68B80D83AE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5331AAD2-7E21-4407-9DF7-9D2A8058FAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6509622E-7E8D-4238-92F2-7DB88A3DB4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80460930-7D3D-4315-8D00-FFDCDBA69477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0993B9A9-599B-4662-AEC2-EC771BCE8200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04472ED2-EB97-47E1-938E-D69C363E81C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "10988AA9-A807-4E70-8197-6F9EFC13AE86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8951276-CDEF-4F54-93DF-B96DB10E6530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D886A75-5A73-4B1C-8B2A-45D589267B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A594C2-98BB-4AC5-9CC5-89FE97D63323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B35325A-98F6-41DF-ADD8-91ED992A3ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9758019-F6EA-4552-B070-5A9EBE73BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DDAC96-7467-4FFF-B337-C0475B7214B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEC7814-61D4-420A-AB81-6720F3C2D6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "413133A5-F600-4B2B-82E1-3EAC10B7E6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ons_15310-cl_series:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727F672F-6227-4DF3-86A7-A259F97EB92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ons_15600:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E7CD66-ADA5-4397-9A59-E5C6B51B8A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E3A7E4-39CD-44B9-B72D-0C9B810A2158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has released fixes to address these issues."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing \"fs/LAUNCHER.jar\", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:transport_controller:4.0.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F7F982-4359-4107-843C-E54CDA4A9E89"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1888FF-6126-4F40-A7EA-1ED5123FA729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B6D45F-25A7-4055-9D9C-42DEACBFFE17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31461FAA-2F90-47B0-BDA3-D81A8186960C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF8D104-CABD-4036-A4AF-68B80D83AE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5331AAD2-7E21-4407-9DF7-9D2A8058FAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6509622E-7E8D-4238-92F2-7DB88A3DB4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80460930-7D3D-4315-8D00-FFDCDBA69477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0993B9A9-599B-4662-AEC2-EC771BCE8200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04472ED2-EB97-47E1-938E-D69C363E81C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "10988AA9-A807-4E70-8197-6F9EFC13AE86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8951276-CDEF-4F54-93DF-B96DB10E6530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D886A75-5A73-4B1C-8B2A-45D589267B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A594C2-98BB-4AC5-9CC5-89FE97D63323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B35325A-98F6-41DF-ADD8-91ED992A3ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9758019-F6EA-4552-B070-5A9EBE73BB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DDAC96-7467-4FFF-B337-C0475B7214B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEC7814-61D4-420A-AB81-6720F3C2D6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "413133A5-F600-4B2B-82E1-3EAC10B7E6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ons_15310-cl_series:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727F672F-6227-4DF3-86A7-A259F97EB92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ons_15600:0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E7CD66-ADA5-4397-9A59-E5C6B51B8A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E3A7E4-39CD-44B9-B72D-0C9B810A2158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-07T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbug_tracker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.1",
            "matchCriteriaId" : "AB4ACE4C-2040-461E-98AB-218962F9F047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-08T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GUI (nod32.exe) in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eset_software:nod32_antivirus:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1997DD1E-C6D2-441D-B5C6-1FC9F1D8B04E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-17/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-17/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0053",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-04-10T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by writing a 2- or 4-channel JPEG image (or a 2-channel TGA image) to a scalar, which triggers a NULL pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1B81CB-50C9-432A-9015-570CF7D36644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3C84B2-40D9-46E7-BA3E-94537758829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343803EE-CE3B-4272-BC49-C52D366A2DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.44_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2EBA3A-E39A-4568-B84C-7E2F27D9E3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34213F75-A363-4282-99C6-3BE1D58EAA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.45_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD701807-DC28-436C-82C9-1EF60E2E9BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC22102-E019-430D-B916-68648A755C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108D694E-777E-4BBD-BE06-B0091FEBD6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tony_cook:imager:0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693E747D-B315-4272-A221-40BFEE97A2A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359661",
        "source" : "security@debian.org"
      }, {
        "url" : "http://rt.cpan.org/Public/Bug/Display.html?id=18397",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19575",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19577",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1028",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17415",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1294",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25717",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rt.cpan.org/Public/Bug/Display.html?id=18397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-10T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en phpinfo (info.c) en PHP 5.1.2 y 4.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de variables de array largas incluyendo (1) un gran número de dimensiones o (2) valores largos, que impide que las etiquetas HTML de ser eliminadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260&r2=1.261",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=php-cvs&m=114374620416389&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19599",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19775",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20052",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20222",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21564",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200605-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/34",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-4.php#4.4.3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0501.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17362",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260&r2=1.261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=php-cvs&m=114374620416389&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0276.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200605-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-4.php#4.4.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-10T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B3138-3DCC-4682-B9A8-920E1110700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19599",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0567.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0568.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/05-05-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0568.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of OpenSSH as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-10T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B3138-3DCC-4682-B9A8-920E1110700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19599",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/37",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://us.php.net/releases/5_1_3.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430461/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441210/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://us.php.net/releases/5_1_3.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430461/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441210/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\n",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-10T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in PHPWebGallery 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-1675."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A25DD-835C-43FF-A040-90B59B5C8D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.Silitix.com/phpwebgallery",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.Silitix.com/phpwebgallery",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-10T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) num, and (3) search parameters to (a) category.php, and the (4) slideshow, (5) show_metadata, and (6) start parameters to (b) picture.php, a different vulnerability than CVE-2006-1674."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A25DD-835C-43FF-A040-90B59B5C8D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430481/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430481/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1522",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-10T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19573",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c3a9d6541f84ac3ff566982d08389b87c1c36b4e",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24507",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17451",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1307",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188466",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25722",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9325",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c3a9d6541f84ac3ff566982d08389b87c1c36b4e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-10T22:58:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function.  NOTE: it has been reported by a reliable third party that some later versions are also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/achievement_securityalert/35",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/2312",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015880",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/24485",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php-security.org/MOPB/MOPB-02-2007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430453/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430598/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430742/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431018/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/22766",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1290",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25704",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/2312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/24485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php-security.org/MOPB/MOPB-02-2007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430453/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430598/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430742/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/22766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "Upgrade to PHP 5.1.3-RC3",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The PHP interpreter does not offer a reliable &quot;sandboxed&quot; security\nlayer (as found in, say, a JVM) in which untrusted scripts can be run;\nany script run by the PHP interpreter must be trusted with the\nprivileges of the interpreter itself.  We therefore do not classify\nthis issue as security-sensitive since no trust boundary is crossed.\n",
        "lastModified" : "2007-04-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a display action, which is not properly handled in PNuserapi.PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.75",
            "matchCriteriaId" : "4A52E727-432B-4108-AF79-7F89FEC675D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99020306-8FD3-4544-B64E-79CBBBD052EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D8CEF6-E28C-4F21-B71D-F82272AA7A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.maxdev.com/Article592.phtml",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430370/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437831/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1282",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.maxdev.com/Article592.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437831/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via a direct request to includes/legacy.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.75",
            "matchCriteriaId" : "4A52E727-432B-4108-AF79-7F89FEC675D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99020306-8FD3-4544-B64E-79CBBBD052EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D8CEF6-E28C-4F21-B71D-F82272AA7A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.maxdev.com/Article592.phtml",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430370/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437831/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1282",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.maxdev.com/Article592.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437831/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784EF815-B20A-4D26-8FCA-04BCBAD65BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59384A5A-F530-4417-8AFB-005EE4A54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CFC048-C7C5-47E6-A7E9-E1ED99142493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120A58AE-69B7-426D-947D-9C0D9D9CE1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980AC0DB-2759-49D3-8347-C119AFFF8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91ABFE90-9D9D-40FD-A2ED-A7021DFCC301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3663CE-AF25-4A0A-811E-DE58B7E5D934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F14B08F-6583-4686-B534-616D42B7D90B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CD5425-79A4-4506-8BDA-299449EB51DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F754BBA9-765F-4BDE-9AF3-3DA4300B17C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A136E97-05EA-4ADF-82F5-E2D0C7737D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53AE58C1-CB8C-415F-BF58-BD356D3AC000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666B78D-5DC9-4256-8A23-A4021AE7044A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229DE8B7-489B-4848-B1BE-2339CB771573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BC58E6-CA26-4760-A6A4-D65184A50539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7C97E-60C6-417F-86F7-963ADE52A895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48888218-B238-4F0D-A4C2-E9877D3F3A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A393256A-A5BE-4467-8058-E9CA5D626D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C4839-2356-4630-BDB3-4A0171F3A785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C55462-6370-45B3-8F00-50F4502981F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BBE005-1FEC-4178-A6A0-CAAB148948F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929F5CD6-51F3-42CF-8BA8-579120DD835D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B58A87-7A30-494D-9A9A-AF9FE6E59600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF345665-3C1D-4F44-B648-B695D88267BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C525B9-636F-49B9-B528-50AEB0E98F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD740315-190A-43B7-8399-9B72FA592AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B51601C-EDDC-41B7-82E9-EA4E7745F935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD9F5E-B01D-4F1E-8BC2-F140ACF1472F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600D28-5583-4FA2-835F-BCE10813DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AAD482-064D-4CFB-A1AE-49095036485A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3C5C9D-A802-40F3-B3CE-593CFED745CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FE9713-54BE-4A70-82F8-03B8E1915E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2887738D-57A8-4E43-8498-5C8D0FAAA030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892F5D72-1814-48A5-8CCA-A74EE9D633CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25A359B-8FFD-4941-9419-4E99373D9588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F79633E-19C0-4448-92F1-7C291C9CCD6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB372559-61D8-4E8D-9ED2-DB7F211E8C78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19582",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430391/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17405",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430391/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB372559-61D8-4E8D-9ED2-DB7F211E8C78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430391/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430391/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "457F777C-8D4C-452D-99CA-0E4CFC138329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AA7EEB-1C4B-46AB-AD24-BE9792C25EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0683D6F-D6D9-4FC2-9998-75835360BC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A280D4-7FD9-4304-8C3C-2C0B2056D652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05C1EF5-92D1-4CA2-99F9-BF51B5435028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C954154-BADA-4C53-A957-A118747C503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E355F5-54EB-4C99-B1F6-CEE94F023155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4077B4B5-A47F-43A5-9A65-E05BA5C4F735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47CC514-2FE0-43CE-ADD6-3CC89EF4E8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B63F017-3F16-4222-9CE0-3640FC71FDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1B6FE4-FC63-4D85-9FC6-383B314B320A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D91CA95-0AED-49C1-ADED-8C9724498B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cherokee:cherokee_httpd:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB922B6A-81FF-4C7A-B42E-3EB986FF7159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19587",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430385/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202012-09",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430385/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202012-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talentsoft:web\\+_shop:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8291EF7-1469-4E9B-A697-6BB75ECB6986"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/web-shop-50-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/web-shop-50-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB809CC-9FED-4ADE-B1DA-F0F5FC3EA596"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430315/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote attackers to include arbitrary local files via (1) the lang parameter in news.php and (2) other unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecotwo:shopsystem:1.0_192:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5087429A-5FED-4C0E-8E1A-B4FCD9B0D915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/ecotwo-shopsystem-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/ecotwo-shopsystem-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the (1) group, (2) seite, and (3) id parameter, possibly involving the artikel functionality.  NOTE: this vulnerability also allows resultant path disclosure when the SQL queries are invalid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:3.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "D08DFD54-1CA6-4A51-8DBD-D1CB07CC0CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:3.0:*:light:*:*:*:*:*",
            "matchCriteriaId" : "1A98D807-B2E3-4FE5-930A-CA3E5BE53537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:4.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "45301A0A-6EA8-4D59-919C-90783A365CAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19592",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to access unspecified files via a modified warp parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:3.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "D08DFD54-1CA6-4A51-8DBD-D1CB07CC0CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:3.0:*:light:*:*:*:*:*",
            "matchCriteriaId" : "1A98D807-B2E3-4FE5-930A-CA3E5BE53537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:4.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "45301A0A-6EA8-4D59-919C-90783A365CAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary web script or HTML via the message parameter, probably involving the basket functionality."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:3.0:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "D08DFD54-1CA6-4A51-8DBD-D1CB07CC0CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:3.0:*:light:*:*:*:*:*",
            "matchCriteriaId" : "1A98D807-B2E3-4FE5-930A-CA3E5BE53537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apt:apt-webshop-system:4.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "45301A0A-6EA8-4D59-919C-90783A365CAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19592",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party (ALP), allow remote attackers to execute arbitrary PHP code via a URL in the libpath parameter to scripts in the lib directory including (1) ase.php, (2) devi.php, (3) doom3.php, (4) et.php, (5) flashpoint.php, (6) gameSpy.php, (7) gameSpy2.php, (8) gore.php, (9) gsvari.php, (10) halo.php, (11) hlife.php, (12) hlife2.php, (13) igi2.php, (14) main.lib.php, (15) netpanzer.php, (16) old_hlife.php, (17) pkill.php, (18) q2a.php, (19) q3a.php, (20) qworld.php, (21) rene.php, (22) rvbshld.php, (23) savage.php, (24) simracer.php, (25) sof1.php, (26) sof2.php, (27) unreal.php, (28) ut2004.php, and (29) vietcong.php. NOTE: the lib/armygame.php vector is already covered by CVE-2006-1610. The provenance of most of these additional vectors is unknown, although likely from post-disclosure analysis.  NOTE: this only occurs when register_globals is disabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squery:squery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "7FE10A14-FF1C-4FCB-BABE-B43253157E73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://liz0zim.no-ip.org/alp.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19588",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015884",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/431845/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/24401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24407",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430289/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439874/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441015/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17434",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1284",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://liz0zim.no-ip.org/alp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/431845/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/24401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430289/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439874/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441015/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain unspecified access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19560",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430411/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "HP-UX B.11.11:\r\nInstall PHCO_34545 or later."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1060",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xzgv:xzgv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8",
            "matchCriteriaId" : "201B39E8-8C4D-49D8-A976-AE7A09674B6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19571",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19731",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19757",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19779",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/756",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_08_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17409",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1288",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25718",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_08_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows remote attackers to inject arbitrary web script or HTML via the user_name parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manic_web:mwnewsletter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0b",
            "matchCriteriaId" : "95F5B9C6-EA72-4828-9542-602C91EEB442"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/123/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19568",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/123/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter to unsubscribe.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manic_web:mwnewsletter:1.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9C27AD-E60C-4705-830C-1AC338EF3845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/123/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19568",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://evuln.com/vulns/123/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a) unsubscribe.php or (b) subscribe.php; or the (2) user_name parameter to subscribe.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it is likely that this was discovered during post-disclosure analysis."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manic_web:mwnewsletter:1.0.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9C27AD-E60C-4705-830C-1AC338EF3845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19568",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in GlobalSCAPE Secure FTP Server before 3.1.4 Build 01.10.2006 allows attackers to cause a denial of service (application crash) via a \"custom command\" with a long argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:2.0_build2004-03-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8841A56E-BC67-44D8-A1EA-FAFDDCB4AEE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:2.0_build2004-03-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2E9623-3E4D-49BF-806B-704CFFC2D79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1DC5A5-1530-4192-A9F6-031367395B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.0.2_build2005-04-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2ED1B6-2276-499B-95E6-221F287D7E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.0.3_build2005-04-29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14815E5A-F112-4977-AF35-F03A0A1ABD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.0.4_build2005-06-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B70F8E-4597-4DF6-A487-110478A2F9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.1.1_build2005-08-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E22C40-2FEB-44B4-BA53-630AF7B0CEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.1.3_build2005-10-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C49EF0-81EA-4BCD-B1DE-1ED8EC396EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globalscape:secure_ftp_server:3.1_build2005-07-06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E133B0-C768-4B68-A915-FBA2014E695F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.globalscape.com/gsftps/history.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17398",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.globalscape.com/gsftps/history.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This issue is addressed in Secure FTP Server 3.1.4 Build 01.10.2006."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xbrite:xbrite_members:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "0D5E275C-5720-45F6-A45A-888277E2F615"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17424",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fbida:fbida:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24F4E24-57B4-46F9-B2A0-F6F0FF89F7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fbida:fbida:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63BB0571-34D3-465C-AFDF-1D284C25C721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fbida:fbida:2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4912F766-2EBB-4310-86FC-721EDDB95379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19559",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Gallery before 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0D3AAC-9BB0-49E9-BD67-27A635DA34CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B821AEB0-7C0C-407E-9CCB-EEB16E1A2719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F517D6BA-9793-4A4D-BDC6-2F5349F0B354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E876B0F6-8363-43E0-8E00-E55B04A05F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131E313-CB18-45D7-9F4C-096EB0337B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2D7CE2-1461-4D01-A4B1-9E6F7A68FB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA0436A-8294-44B4-B7D1-62A73BE4DFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9125286-5A7D-4A1B-B5C4-888581B9798C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54143C9E-0EB0-4137-A01A-3E8C8A7412F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89382A13-8E5D-44DC-8D6B-8FD8DCAFE525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C999044-00FE-4DE1-A235-F036FC9AE09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A59F6E-A44B-4949-8487-CB089BF1CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B3525-BD38-47CF-B60A-F392FABDA357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD453B4B-75B9-476D-B1A6-65AB8E09107E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFCAB08-BADA-4231-96E2-B73462A803D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B284BCC5-0CA6-44EA-AD68-06B83461A283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.2_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB27D28-BE95-4906-89D0-7BCDB4BB3FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.2_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DEAB40-1BF9-4324-9B32-B56BC71DE050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809BC19B-C814-4855-9E0B-387A4137369F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BAF08F4-02CE-4A16-8595-EE6C7CA482B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=408602&group_id=7130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=408602&group_id=7130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when posting a message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matt_wright:matt_wright_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1",
            "matchCriteriaId" : "C685C436-6F64-4EF5-ADEF-CE351A57E065"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://liz0zim.no-ip.org/mattguestbook.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19586",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430356/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://liz0zim.no-ip.org/mattguestbook.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430356/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) city, (3) state, or (4) country parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it is likely that they are the result of post-disclosure analysis."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matt_wright:matt_wright_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1",
            "matchCriteriaId" : "C685C436-6F64-4EF5-ADEF-CE351A57E065"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19586",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aweb:banner_generator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "79B38F99-7288-4CEF-822C-3C6B7AE5BBFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015877",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17416",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aweb:scripts_seller:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "159422BE-E09E-413E-9549-FE12E1114432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowed_portal:shadowed_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7d2",
            "matchCriteriaId" : "524ADA1A-CA8B-466A-A5E7-EABD8221F297"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://liz0zim.no-ip.org/shad0w.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19595",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430376/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://liz0zim.no-ip.org/shad0w.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430376/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2258E6D1-B11D-4902-98D2-FC8330BE175D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/430443/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430443/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lire.php in Sire 2.0 nws allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hubert_plisson:sire:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8108812-9A24-4D65-A233-44A727C7E11A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430301/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17428",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430301/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to upload.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hubert_plisson:sire:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8108812-9A24-4D65-A233-44A727C7E11A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430301/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430301/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with \"SELECT\" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E604B-6C0D-474F-A3A9-B07EF0A7D2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8667E51F-86A9-4181-8FCC-BECC6F50913B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA52C2C2-64C3-40BA-86A1-C4A14BEB8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:enterprise_10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A53BEE7A-7AB6-4B18-80C3-3B4DE8358E62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84E349-48A8-4800-A300-AACEC8659656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323353FE-7ECD-4668-BDB1-3E5CA8F3F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4237F0-BE51-4FCD-9CF1-83E54723390A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33627F4-3E7D-4181-8171-2B65F8C60E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:personal_10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22848A7-D0FD-46FD-897E-2658FA809DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8975840-9843-4034-BBED-B31A9BA16DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A39665-BB49-4135-9850-8CF9E69546FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2764001-8B54-47AD-A265-0C0B0F691A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B5ED54-BAF4-41B3-8B09-F9795AB7A18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EA2727-2F53-470F-AF58-1B33B7A5B7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAD20B6-258F-4093-BEE0-99F11D61A61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B900301-8AC5-43BD-BD2B-639419885820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle10g:standard_10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF7518D-DA17-4C63-B35F-6CAAA9F96EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFA2A5C-B289-4505-85F5-7F6F0222B552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E876825-D6E5-4958-B737-4CE43A32BEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E07567-754A-40C0-9428-D151880EE6F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6233345D-5100-404A-9B61-524D9679D9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9B1EAF-ED2D-4B3A-9EB7-5FEB9E6B684C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68286D06-9EBA-4FBD-AB0B-D80993895416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C059683-E0A1-4E97-B393-CB6B0EACF7C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5675664-7036-48D0-9524-0350F626D4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597EE9ED-6A95-46C7-BE83-ADEC6AA65341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50411FCF-8173-458D-B18A-4F7DE7E81A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB172848-A873-4137-A335-AD034806A5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78BD7D2-7B48-438C-8C24-01C4007C1A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61851FB-AC6F-4E56-8CA8-F8CE97D65364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397FC5F3-27E7-4BD7-9348-E671640327FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oracle9i:standard_9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99255D3E-41FF-4D2F-A11B-9563997F4110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044990.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19574",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/805737",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_modify_data_via_views.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044990.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/805737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_modify_data_via_views.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) album parameters to (c) index.php.  NOTE: this issue also produces resultant full path disclosure from invalid SQL queries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kansok_communications:shopweezle:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5C337-625B-4037-A437-8286B2A3E234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kansok_communications:shopweezle:2.0_personal:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64037B2C-7C77-4691-AB3C-3158B818C954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kansok_communications:shopweezle:2.0_professional:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE622D39-A571-4E38-A00F-F818E949BEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kansok_communications:shopweezle:2.0_professional_plus:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E7A9F5-3821-457A-9008-AFEB8D28D57B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19593",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17441",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Shopweezle 2.0 allows remote attackers to include arbitrary local files via the url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kansok_communications:shopweezle:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5C337-625B-4037-A437-8286B2A3E234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kansok_communications:shopweezle:2.0_personal:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64037B2C-7C77-4691-AB3C-3158B818C954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kansok_communications:shopweezle:2.0_professional:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE622D39-A571-4E38-A00F-F818E949BEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kansok_communications:shopweezle:2.0_professional_plus:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E7A9F5-3821-457A-9008-AFEB8D28D57B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansys:clansys:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F87471A-70FA-47E5-927E-D2F6CE2C94D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19609",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitrary web script or HTML via the (1) pn and (2) sbeg parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interaktiv:interaktiv.shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5",
            "matchCriteriaId" : "BE44E1CD-1F09-4A5B-B617-D3845720E7D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/interaktivshop-v5-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19622",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/interaktivshop-v5-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) email and (2) id parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:design_nation:dnguestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AC7264-5E78-4DC8-A59F-8089C6CC9CBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19601",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17435",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4EB7F-BC46-4F2E-B065-303961C47B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78755057-2613-4D5E-8F59-2C117EE282B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:2.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C577B46C-7692-4B6F-B487-A28F73D403F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.plone.org/plone/ticket/5432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://svn.plone.org/svn/plone/PloneHotfix20060410/trunk/README.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.plone.org/plone/ticket/5432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://svn.plone.org/svn/plone/PloneHotfix20060410/trunk/README.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA788EB3-E162-4752-984D-5601A8C6C770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=129136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-April/000084.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19558",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mail-archive.com/mailman-checkins%40python.org/msg06273.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17403",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=129136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-April/000084.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mail-archive.com/mailman-checkins%40python.org/msg06273.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0015",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:frontpage_server_extensions:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E274F0-F1B8-4C3D-961B-80B92830ABF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_team_services:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83ADDF33-AC0A-43F1-8250-EC84221F02D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19623",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/704",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015895",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015896",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.argeniss.com/research/ARGENISS-ADV-040602.txt",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430803/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17452",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1322",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25537",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1748",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.argeniss.com/research/ARGENISS-ADV-040602.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430803/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1185",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.01:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "B054A26A-7414-41B2-A46D-49E798D7A346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_xp_professional_64bit:*:*:*:*:*",
            "matchCriteriaId" : "8EF317BB-E63A-4A60-A2E1-6797A402D88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_xpsp1:*:*:*:*:*",
            "matchCriteriaId" : "FCFF1342-8AD8-4003-81AA-09DB4A12EEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEABB0B-61EF-44E1-8673-F4B5A99A4164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium_systems:*:*:*:*:*:*",
            "matchCriteriaId" : "3665D68D-8E1E-4FA9-97B9-9E099DDE84F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:canon:network_camera_server_vb101:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EBD1BF-DEE2-4047-A8B4-3A816FC80003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/503124",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17450",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25542",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1677",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1711",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A787",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/503124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1186",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "9F9AE3DB-EB7C-4B17-AF7A-CD8FC3C77070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "151FE30E-9320-495C-84AD-60893FAED223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "5805FB74-2AD6-4919-BAAE-D995CA2650A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*",
            "matchCriteriaId" : "0D328337-A2FE-4E2E-8A8D-C170DC0A88E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.01:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "B054A26A-7414-41B2-A46D-49E798D7A346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFFB565-F656-43E3-89E1-E412DC4C9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4336F0E-75FE-4592-9D98-4F689804956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17453",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25545",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1446",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1589",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1651",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1704",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A791",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1188",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.1:*:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "4CF91C2F-EE6D-4C9E-8F39-1F632399EC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.2.3:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "EB51F2D6-3CCA-4695-8A92-39999749B3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_xp_professional_64bit:*:*:*:*:*",
            "matchCriteriaId" : "8EF317BB-E63A-4A60-A2E1-6797A402D88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_xpsp1:*:*:*:*:*",
            "matchCriteriaId" : "FCFF1342-8AD8-4003-81AA-09DB4A12EEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEABB0B-61EF-44E1-8673-F4B5A99A4164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium_systems:*:*:*:*:*:*",
            "matchCriteriaId" : "3665D68D-8E1E-4FA9-97B9-9E099DDE84F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:*:windows_server_2003:*:*:*:*:*",
            "matchCriteriaId" : "9B0F6E35-652C-4948-9FF4-DBF199B4FA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68656E52-AD8A-474E-9160-CD5F8857254B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F47C82-E767-47A8-88DE-417B004ED7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBF9B51-5AF4-4317-9768-21D866AC7990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:canon:network_camera_server_vb101:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EBD1BF-DEE2-4047-A8B4-3A816FC80003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/824324",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435096/30/4710/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1144",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1290",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1296",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1773",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/824324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435096/30/4710/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1189",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS), aka the \"Double Byte Character Parsing Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0227.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/341028",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17454",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25551",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1020",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1484",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A792",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0227.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/341028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Customers should apply the update immediately."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1190",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959649",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17455",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25552",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1541",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1735",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1783",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A965",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1191",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CFF390-FF33-45CA-BC96-C6766491C616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015892",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17457",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25555",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1251",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1710",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1192",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow \"window content to persist\" after the user has navigated to another site, aka the \"Address Bar Spoofing Vulnerability.\"  NOTE: this is a different vulnerability than CVE-2006-1626."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.01:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "B054A26A-7414-41B2-A46D-49E798D7A346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_xp_professional_64bit:*:*:*:*:*",
            "matchCriteriaId" : "8EF317BB-E63A-4A60-A2E1-6797A402D88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_xpsp1:*:*:*:*:*",
            "matchCriteriaId" : "FCFF1342-8AD8-4003-81AA-09DB4A12EEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEABB0B-61EF-44E1-8673-F4B5A99A4164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium_systems:*:*:*:*:*:*",
            "matchCriteriaId" : "3665D68D-8E1E-4FA9-97B9-9E099DDE84F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:canon:network_camera_server_vb101:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EBD1BF-DEE2-4047-A8B4-3A816FC80003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/670",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015899",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17460",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25557",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1336",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1498",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1645",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1725",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1740",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyforum:phpmyforum:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B8AE96-42FA-4DBA-992A-9BC54EE58D7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/430480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432455/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17420",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432455/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyforum:phpmyforum:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B8AE96-42FA-4DBA-992A-9BC54EE58D7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/430480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432455/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17420",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432455/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Christian Kindahl TUGZip 3.4.0.0, 3.3.0.0, and 3.1.0.2 allow user-assisted attackers to create files in arbitrary directories via a .. (dot dot) in an archive pack with a crafted (1) .gz, (2) .jar, (3) .rar, or (4) .zip file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tugzip:tugzip:3.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5ABEB7-4A9B-43FC-B103-750E1202BF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tugzip:tugzip:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DCD3FA-5A69-47D1-B35B-BFB096D5F14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tugzip:tugzip:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77E6413-F942-4B90-81A4-BD9F37730920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hamid.ir/security/tugzip.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430433/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17432",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hamid.ir/security/tugzip.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430433/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.  NOTE: the email vector is already covered by CVE-2006-1625, although it might stem from the same core issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en inc/functions_post.php en MyBB (también conocido como MyBulletinBoard) 1.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un evento JavaScript en una etiqueta BBCode img. NOTA: el vector de correo electrónico ya esta cubierto par la CVE-2006-1625, aunque podría provenir del mismo caso central."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-305.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://myimei.com/security/2006-03-12/mybb-110functions_postphpxss-attack.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430344/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-305.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://myimei.com/security/2006-03-12/mybb-110functions_postphpxss-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430344/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that unauthenticated users are allowed to post new threads (not the default setting)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in newthread.php in MyBB (aka MyBulletinBoard) 1.10, when configured to permit new threads by unregistered users, allows remote attackers to inject arbitrary web script or HTML via the username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19516",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430464/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that unauthenticated users are allowed to post new threads (not the default setting)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "96B850B6-8F15-40D8-9887-11121A8D926A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6ADDC15-B5BE-4443-A4DC-1718041E42F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB805CA-1609-4707-86A3-B7AE9E993742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EF032F-EE7C-4CAA-9A5C-35FFD9B2944B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F04E72-E443-4932-9DC6-31041366AE50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5DD585-BF9F-4AE5-B112-A6D9AB1ACDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:2.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4679FE-E971-435C-AED0-6E1DB3E561E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clever_copy:clever_copy:23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1D3337-9CF7-4AB2-AAE1-01641C1F867A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv28-K-159-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19579",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430369/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv28-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430369/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) via any scrollbar Cascading Style Sheets (CSS) property."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/430408/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430431/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430408/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via the Word parameter.  NOTE: it is possible that this issue is resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabless:saphplesson:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC6C9F0-BB82-4B2D-9690-01C975299A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabless:saphplesson:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B183641-76C5-4DAC-9C62-16FFD74D82B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798B1672-529E-4D61-9CE6-A3C362AA3FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.18_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD156C94-966C-4EF7-A386-DA5516B77DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.18_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0796A70B-0DA4-4E85-8E34-1A063B382CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCB8D42-FA2B-4566-8884-5C5523B19392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:sasl:2.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B11541-A371-4B2C-9CBF-FA57553D4ACF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200604-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044992.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19618",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19753",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19809",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19825",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20014",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26708",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26857",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27237",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30535",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_05.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0795.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0878.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/493080/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17446",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1306",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/272-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200604-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044992.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0795.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0878.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/493080/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/272-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-11T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in suche.htm in ShopXS 4.0 allows remote attackers to inject arbitrary web script or HTML via the Suchstring1 (aka search) parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suche:shopxs:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB29F167-82A1-401F-8690-06E4BC76A2BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/shopxs-v40-xss-vuln_10.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/shopxs-v40-xss-vuln_10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0003",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B901D0A6-2F68-4CAC-B985-6A2BA0A1705B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307B13E2-EB93-420B-B47E-0681864DC429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.7:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "819DDAAF-D9A3-4540-B467-2A7233D36038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F233914-2763-42E8-BCB9-E0D1186783E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "036C836C-6387-4DAC-96B2-94C979D236E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.8:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "6182A820-5DF9-4ABF-9E5A-DC9EE8F98E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19583",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20719",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015894",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/234812",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24517",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/475104/100/100/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/475108/100/100/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/475118/100/100/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/475490/100/100/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/487216/100/200/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/487219/100/200/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17462",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20797",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1319",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2452",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-014",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25006",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29915",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1204",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1323",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1742",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1778",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2052",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2164",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/234812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/475104/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/475108/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/475118/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/475490/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/487216/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/487219/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0012",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and \"crafted files and directories,\" aka the \"Windows Shell Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19606",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015897",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/641460",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24516",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17464",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1320",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25554",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1191",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1448",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1679",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1743",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1764",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/641460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-101A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0014",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-04-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing \"certain Unicode strings\" and modified length values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8562F455-C285-4B72-BC4B-51E6C334EDFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "589E5F7F-5429-4050-8C0D-F7F8D18DEB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FD3557-956D-4A96-8AA5-5FD9DB87FD11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D45F2775-A10B-4834-A2EF-7498EEAB155D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045003.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/19617",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/691",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1015898",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430645/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17459",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1321",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-007.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-016",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25535",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1611",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1682",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1769",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1771",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1780",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1791",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A812",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430645/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) nom or (2) mail parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jbook:jbook:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E6CAA-056A-4508-9CEA-B582AFAD5AB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19613",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in pl_main.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joey_hess:bsdgames:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85CFB2F-907D-41CF-884A-68DFB4CF64AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joey_hess:bsdgames:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40BCC95-187A-470E-86AD-E51951F7C3C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joey_hess:bsdgames:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD4F758-F52F-453B-AB90-CA45D87498D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joey_hess:bsdgames:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7303AB2-E0A8-41DD-B7FF-C4456327BC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joey_hess:bsdgames:2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DD53D6-7422-4FD5-8CFB-2CD3E429393B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19687",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1036",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24634",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pulltheplug.org/fu/?q=node/56",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pulltheplug.org/fu/?q=node/56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5657A816-9C53-4D97-90C4-357FCCA7057D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17406",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to include arbitrary local files via the (1) GLOBALS[database_module] or (2) GLOBALS[language_module] parameters, which overwrite the underlying $GLOBALS variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en PHPList 2.10.2 y versiones anteriores permite a atacantes remotos inlcuir archivos locales arbitrarios a través de los parámetros (1) GLOBALS[database_module] o (2) GLOBALS[language_module], lo que sobrescribe la variable $GLOBALS subyacente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.2",
            "matchCriteriaId" : "757EFD41-2C9F-4554-9F91-48D0038D2A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE10CFB-A604-4C6E-ACE6-FD441C47D296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784C97D4-740E-4C65-98ED-FA03EC3EFAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94101A7-419E-4ACF-AB75-F0B0DA6E7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F52B3C-7925-4970-AA84-732B34DD2FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140DBAC-6AF0-41D0-972C-4F97BA06F488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A6FB5-0CE1-4952-9763-7AA0E605A7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665AC8D2-D3E6-470C-800B-0FD5AACE77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2FFBB2-E4C0-4F16-90D6-9D3FB2105C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C06CBF-3F4B-4D10-9FF4-21985354ED3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018BA2DC-D1F7-4995-9D72-C38A2B087F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516EB08E-F724-4638-8174-1FB527CE8E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFF48D-67A7-40DA-9762-DB416E1442C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PHPList-lfi.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tincan.co.uk/?lid=851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430475/30/30/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430597",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17429",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PHPList-lfi.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1015889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tincan.co.uk/?lid=851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430475/30/30/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter to (1) admin/admin.php, (2) war.php, (3) stats.php, (4) news.php, (5) joinus.php, (6) challenge.php, (7) calendar.php, (8) member.php, (9) popup.php, and other unspecified scripts in the admin folder.  NOTE: these are different attack vectors than CVE-2006-1636 and CVE-2006-1503."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo remoto PHP en Virtual War (VWar) 1.5.0 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro vwar_root para (1) admin/admin.php, (2) war.php, (3) stats.php, (4) news.php, (5) joinus.php, (6) challenge.php, (7) calendar.php, (8) member.php, (9) popup.php y otras secuencias de comandos no especificados en la carpeta admin. NOTA: estos son vectores de ataque diferentes que CVE-2006-1636 y CVE-2006-1503."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EB68E8-9E4D-4571-8A2F-B5FDE38F66C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://liz0zim.no-ip.org/vwar.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115497619330609&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/431925/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430389/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://liz0zim.no-ip.org/vwar.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115497619330609&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blogcu.com/Liz0ziM/431925/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430389/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash (.SWF) video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_software:xmb_forum:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116575A4-0DDA-498B-8334-79723ABD6589"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/430432/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430432/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "As noted in https://docs.xmbforum2.com/index.php?title=Security_Issue_History XMB version 1.9.10 or later must be installed to prevent attacks described by this CVE. All earlier versions of XMB are vulnerable until upgraded. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2020-09-09T13:00:52.007"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath parameter.  NOTE: this issue was later reported to affect 2.01 as well."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartisoft:phplistpro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "3E3856B1-35E8-44D3-AE9E-6C177ADB2F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartisoft:phplistpro:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CB831B-4A55-4100-9676-1CAC5FDB2B03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19625",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24540",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433562/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17448",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433562/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Autogallery 0.41 allow remote attackers to inject arbitrary web script or HTML via the (1) pic or (2) show parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jmb_software:autogallery:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680613BE-1E7B-458B-9092-E8A9F4B97209"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0220.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19629",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.elitemexico.org/12.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0220.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.elitemexico.org/12.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1779872-B004-41BF-96D3-2312DBF1582D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BAB565-5916-4615-9FE3-268EFE6A038C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BC9AF7-6D5B-4143-9F1E-AE12B34BF3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82CAC05D-6E27-4336-AA25-AE9E6CACEC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43ACF92D-46BF-4727-AA0E-CC3CD8654D74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.mvblog.org/cgi-bin/trac.cgi/ticket/54",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19634",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17481",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mvblog.org/cgi-bin/trac.cgi/ticket/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) body fields in a comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1779872-B004-41BF-96D3-2312DBF1582D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BAB565-5916-4615-9FE3-268EFE6A038C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BC9AF7-6D5B-4143-9F1E-AE12B34BF3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82CAC05D-6E27-4336-AA25-AE9E6CACEC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michiel_van_baak:mvblog:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43ACF92D-46BF-4727-AA0E-CC3CD8654D74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.mvblog.org/cgi-bin/trac.cgi/ticket/55",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19634",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mvblog.org/cgi-bin/trac.cgi/ticket/55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1523",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-12T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __group_complete_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUG_ON."
      }, {
        "lang" : "es",
        "value" : "La función __group_complete_signal en el manejo de señales RCU (signal.c) en el kernel de Linux 2.6.16 y posiblemente otras versiones, tienen vectores de impacto y ataque desconocidos relacionados con el uso incorrecto de BUG_ON."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=114476543426600&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188604",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=114476543426600&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF785E3-20AB-4480-9DE1-51AB0F9F71CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837FA32B-DDF5-4168-96A4-8F6A696D754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56CF909-3AE9-4A3A-A701-F40769F4CB17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download1.swsoft.com/Confixx/security_hotfix/release_notes.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19611",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430671/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430890/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17476",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download1.swsoft.com/Confixx/security_hotfix/release_notes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430671/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430890/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthew_dingley:md_news:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F341AF-17D0-4068-9165-91804BB447D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/120/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19530",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431429/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/120/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431429/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matthew_dingley:md_news:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F341AF-17D0-4068-9165-91804BB447D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/120/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19530",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431429/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/120/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431429/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bill_shupp:vegadns:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C391ECE7-6690-4CDA-9653-9EF736F06624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/430474/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430474/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bill_shupp:vegadns:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C391ECE7-6690-4CDA-9653-9EF736F06624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19614",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430474/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430474/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56CF909-3AE9-4A3A-A701-F40769F4CB17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19611",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015890",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430596/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17466",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430596/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) Classic.view/thumbnail.php, (2) Classic.view/gallery.php, (3) Classic.view/detail.php, or (4) Orange.view/detail.php; or (5) the name parameter in Orange.view/slideshow.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en JetPhoto permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro de página en (1) Classic.view/thumbnail.php, (2) Classic.view/gallery.php, (3) Classic.view/detail.php o (4) Orange.view/detail.php o (5) el parámetro de nombre en Orange.view/slideshow.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetphotosoft.com:jetphoto:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4488A6-7B16-4096-B282-6B9C536F2B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetphotosoft.com:jetphoto:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27035F7C-FD14-4DC0-B933-C5136991FB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetphotosoft.com:jetphoto:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F75FEC4-8422-4351-A3C6-6F9CF8F5A188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114472089719033&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24491",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114472089719033&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter, which is not sanitized in the error message. NOTE: the vector in the shard parameter is not XSS and has been assigned a separate name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blursoft:blur6ex:0.3.462:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51672C5-2998-455C-829E-D3F103569188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2006-April/000691.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430885/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17465",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-April/000691.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430885/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter.  NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blursoft:blur6ex:0.3.462:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51672C5-2998-455C-829E-D3F103569188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2006-April/000691.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430885/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/491565/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17465",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-April/000691.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430885/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/491565/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a (1) g_reply or (2) g_permaPost action to the blog shard (engine/shards/blog.php), or a (3) g_viewContent action to the content shard (engine/shards/content.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blursoft:blur6ex:0.3.462:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51672C5-2998-455C-829E-D3F103569188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17465",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1_hotfix_2.9",
            "matchCriteriaId" : "14A2E468-433F-4F99-ADB6-F68DEE030ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94170D21-1196-4BA2-AEB9-C28A4F08B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3364FE23-345B-428B-BF18-A0AE4D23B03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDE2038-F5C8-49A9-86D6-E94DA2A93016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9E17B-92A3-434F-B238-8B403BE4F539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1220294A-27FC-4D1C-BFA8-2B7189E04469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD6BB80-8513-4294-8A81-FE8B11FA8BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDFC8A-C341-4137-AF44-F93E814E218B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDE7F42-4372-440E-9E8A-D4B123EB9045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E517F5-FA8C-4099-9D2C-6818A3082881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC9B48D-8D14-40D1-A444-2EC2661E40A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52010E43-81DA-4E60-8CE9-7E60DC017DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAEE0D-CDCE-46F2-8FCD-E9C9CD7BB159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0B0DB0-92F4-4F62-8962-0723633540BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F80268-2491-4900-ABEB-9DDBC9E54DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:2002_rc_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BABF84D-F609-429E-9C77-7C251F23AB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19569",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jbook:jbook:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5C6781-B127-441D-BAAF-9E00E9C4A1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430479/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17419",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430479/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) getlang and (2) reporeid parameter in (a) index.php, (3) menuid parameter in (b) plugin.php and (c) forumthread.php, and (4) msgid parameter in forumthread.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3_beta1",
            "matchCriteriaId" : "B41966A7-1E6D-4036-86F2-D3608D40393B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2F7F2A-D3A1-4A58-BFC1-3B89E1337C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF31C99-E038-472B-B6C2-FC421264DA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C91682-C8D9-47B1-A203-36B3334C2F66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/papoo-multiple-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/papoo-multiple-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the theme_path parameter in (1) index.php, (2) become_editor.php, (3) add.php, (4) bad_link.php, (5) browse.php, (6) detail.php, (7) fav.php, (8) get_rated.php, (9) login.php, (10) mailing_list.php, (11) new.php, (12) modify.php, (13) pick.php, (14) power_search.php, (15) rating.php, (16) register.php, (17) review.php, (18) rss.php, (19) search.php, (20) send_pwd.php, (21) sendmail.php, (22) tell_friend.php, (23) top_rated.php, (24) user_detail.php, and (25) user_search.php; and the (26) base_path parameter in invoice.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicecoder:indexu:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5FEBA1-7703-424A-99B4-B2CDA4893624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicecoder:indexu:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4142AEA-F131-46DE-B373-1F0CB3531D91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.kep.online.fr/Indexu_5.0.1_File_Inclusion_Exploit-by_King-Hacker_and-Khamaileon.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015891",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430599/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17470",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://ftp.kep.online.fr/Indexu_5.0.1_File_Inclusion_Exploit-by_King-Hacker_and-Khamaileon.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430599/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) newuser_name, (2) newuser_email, and (3) newuser_hp parameters in the faction=register mode in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tritanium_scripts:tritanium_bulletin_board:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCE8AE0-2C1D-4151-8377-1CECCF642FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430669/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17473",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430669/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Succesful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the mode parameter in msgReader$1 and (2) the end of the URI in viewDepartment$."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:userland:manila:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.5",
            "matchCriteriaId" : "6B200DD4-27AC-49ED-84EA-6D21B1D37451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:userland:manila:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86112432-4906-4C6B-AE22-658641080155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430668/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17475",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430668/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote attackers to execute arbitrary PHP code via a URL in the int_path parameter in (1) vote.php, (2) view.php, (3) admin.php, and (4) admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azerbaijan_development_group:azdgvote:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8C829F-9347-48D7-ADE5-7D73098B9164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430691/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430691/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly execute arbitrary programs via a .. (dot dot) in the url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saxotech:saxopress:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A60B622-2C81-4F73-B0A2-38DC7D72724A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430707/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431037/30/5580/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430707/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431037/30/5580/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid parameter, possibly involving content/news.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "6770D817-F1BA-4286-A9CB-3F855CE6E5EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hamid.ir/security/phpkit.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17467",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hamid.ir/security/phpkit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when \"Trust by Certificates\" is not enabled, allows remote attackers to bypass authentication via a crafted URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:compaqhttpserver:9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A8479E-5249-4919-AB12-CDDDDA365AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85F0390-B076-4B54-9E4E-67472FF3759E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://src.telindus.com/articles/hpsm_vulnerability.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430688/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://src.telindus.com/articles/hpsm_vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430688/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The only way to prevent this is to set the Trust level to \"Trust by Certificates\""
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the (1) Site Description field in (a) admin_board.php, the (2) Group name and (3) Group description fields in (b) admin_groups.php and (c) groupcp.php, the (4) Theme Name field in (d) admin_styles.php, and the (5) Rank Title field in (e) admin_ranks.php.  NOTE: the profile.php/Current password vector is already covered by CVE-2006-1603."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24353-phpbb.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24353-phpbb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the s parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.2",
            "matchCriteriaId" : "768E3141-0A67-4C59-9275-107C08CC90DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the s parameter, as demonstrated by injecting PHP sequences into an Apache error_log file, which is then included by doc/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.2",
            "matchCriteriaId" : "768E3141-0A67-4C59-9275-107C08CC90DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m and (3) y parameters in archive.php, and the (4) sql parameter in (c) server.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.2",
            "matchCriteriaId" : "768E3141-0A67-4C59-9275-107C08CC90DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.2",
            "matchCriteriaId" : "768E3141-0A67-4C59-9275-107C08CC90DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/simplog_092_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bourne shell (sh) in Solaris 8, 9, and 10 allows local users to cause a denial of service (sh crash) via an unspecified attack vector that causes sh processes to crash during creation of temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102282-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-122.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102282-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-122.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply patches."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.  NOTE: It was later reported that 1.4.2 and earlier are affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:circle_r:monster_top_list:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "9143A0A5-A99D-45BF-BD59-4E77E4F217F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/monstertoplist.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19688",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/23074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1350",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/monstertoplist.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/23074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name (rootDN) password when a privileged user (1) runs idsconfig; or \"insecurely\" runs LDAP2 commands with the -w option, including (2) ldapadd, (3) ldapdelete, (4) ldapmodify, (5) ldapmodrdn, and (6) ldapsearch."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19638",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102113-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-122.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102113-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-122.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PatroNet CMS allows remote attackers to inject arbitrary web script or HTML via the URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patronet:cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC07A6BF-8B86-4D21-BFC2-FBE3BF773791"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/430868/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17495",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430868/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the (1) actionID and (2) pageID parameters.  NOTE: due to an error during reservation, this identifier was inadvertently associated with multiple issues.  Other CVE identifiers have been assigned to handle other problems that are covered by the same disclosure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:reader_extensions:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "AF3D78AA-2446-4652-92EA-2DCB65B84A87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/322699.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/322699.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their account is marked \"OBSOLETE\" but the account is also active, within the authentication system."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:livecycle_form_manager:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B663460F-45F2-4CF0-A13C-385D09D6EED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19620",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/333036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/333036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:georges_auberger:pajax:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47C8A98-44F2-4758-8A1F-EAE1D926CABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:georges_auberger:pajax:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6230E2-C4C9-4489-B4B4-DFB79DC05404"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0270.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431029/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0270.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431029/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings_dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sphider:sphider:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD95DB9E-B966-4020-8479-BB02302E4956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sphider:sphider:1.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42919F4-2ADC-4671-8809-03B09BE9DE65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sphider:sphider:1.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614BA825-F5DA-4A12-A120-EDA396B746E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19642",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Document Server for Reader Extensions 6.0 allows remote authenticated users to inject arbitrary web script via a leading (1) ftp or (2) http URI in the ReaderURL variable in the \"Update Download Site\" section of ads-readerext.  NOTE: it is not clear whether the vendor advisory addresses this issue.  In addition, since the issue requires administrative privileges to exploit, it is not clear whether this crosses security boundaries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:document_server:6.0:*:reader_extensions:*:*:*:*:*",
            "matchCriteriaId" : "3A18104E-CEF4-4212-8FB3-5F18A67905D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/322699.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/322699.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via (1) the actionID parameter in ads-readerext and (2) the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses this issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en Adobe Document Server para Reader Extensions 6.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro (1) actionID en ads-readerext y (2) op en AlterCast. NOTA: no está claro si la recomendación del proveedor soluciona este problema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:document_server:6.0:*:reader_extensions:*:*:*:*:*",
            "matchCriteriaId" : "3A18104E-CEF4-4212-8FB3-5F18A67905D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/322699.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/322699.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Document Server for Reader Extensions 6.0 includes a user's session (jsession) ID in the HTTP Referer header, which allows remote attackers to gain access to PDF files that are being processed within that session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:document_server:6.0:*:reader_extensions:*:*:*:*:*",
            "matchCriteriaId" : "3A18104E-CEF4-4212-8FB3-5F18A67905D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/322699.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331915.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/322699.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331915.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether the user ID is valid or invalid, which allows remote attackers to more easily identify valid user IDs via brute force attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:document_server:6.0:*:reader_extensions:*:*:*:*:*",
            "matchCriteriaId" : "3A18104E-CEF4-4212-8FB3-5F18A67905D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331917.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2005-68/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/techdocs/331917.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to read arbitrary files via the $className variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:georges_auberger:pajax:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.1",
            "matchCriteriaId" : "DAD70EBA-E5CB-488D-8C64-7C152D465531"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0270.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431029/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0270.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431029/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Users of PAJAX should upgrade to the latest version pajax-0.5.2 [1]."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0748",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via \"an invalid and non-sensical ordering of table-related tags\" that results in a negative array index."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-27.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432103/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-011/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11164",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1189",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432103/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability also affects Mozilla Suite before 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0749",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T21:08:36.487",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a \"particular sequence of HTML tags\" that leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "D997C05B-05C0-4D01-B0E2-C06934174AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.13",
            "matchCriteriaId" : "F7DD4CED-138F-415C-9F00-583D92BB3C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0",
            "matchCriteriaId" : "CB8DE1B0-ACE1-4720-91AE-3C85EF754387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "3A088F32-0EA7-465D-A648-9802F9B6164C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/736934",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-18.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431126/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25819",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/736934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431126/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon.  NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092.  This is the correct identifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_messenger:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74668F2-8DFE-4E24-9BB7-91D1F8452C07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cirt.dk/advisories/cirt-42-advisory.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://metasploit.blogspot.com/2006/04/exploit-development-groupwise_14.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100861.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430911/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17503",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cirt.dk/advisories/cirt-42-advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://metasploit.blogspot.com/2006/04/exploit-development-groupwise_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100861.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430911/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to GroupWise Messenger, 2.0 Public Beta 2 to fix this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1529",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML.  NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=315254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=315254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nMozilla, Firefox, 1.5.0.2\r\nMozilla, Thunderbird, 1.5.0.2\r\nMozilla, SeaMonkey, 1.0.1\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1530",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML.  NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "21BEF1C8-FA11-452D-9A6F-6EF2B270ED8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "976B9AFA-0129-480B-B226-892CECD59287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "FBAFC758-D2D4-46BB-BFA5-FEC1201B1ADB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=326615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1903",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=326615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addresses in the following product releases: \r\nMozilla, Firefox, 1.5.0.2\r\nMozilla, Thunderbird, 1.5.0.2\r\nMozilla, SeaMonkey, 1.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1531",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML.  NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "21BEF1C8-FA11-452D-9A6F-6EF2B270ED8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "976B9AFA-0129-480B-B226-892CECD59287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "FBAFC758-D2D4-46BB-BFA5-FEC1201B1ADB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=326834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2023",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=326834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1723",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML.  NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1574",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nMozilla, Firefox, 1.5.0.2\r\nMozilla, Thunderbird, 1.5.0.2\r\nMozilla, SeaMonkey, 1.0.1\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1724",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "8F71241D-928E-43B4-82ED-5C27FEE1CDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "04455349-5186-4BF4-8EE1-F4852B806F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.13",
            "matchCriteriaId" : "F7DD4CED-138F-415C-9F00-583D92BB3C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "976B9AFA-0129-480B-B226-892CECD59287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "3A088F32-0EA7-465D-A648-9802F9B6164C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "430C1B3A-9CE4-485A-B8DA-F7230E58F137"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=282105",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1901",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/350262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=282105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "Fixed in: \r\n  Firefox 1.5.0.2\r\n  Thunderbird 1.5.0.2\r\n  SeaMonkey 1.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1725",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "04455349-5186-4BF4-8EE1-F4852B806F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "976B9AFA-0129-480B-B226-892CECD59287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-29.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=327014",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25827",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=327014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "Fixed in: \r\n  Firefox 1.5.0.2\r\n  SeaMonkey 1.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1726",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Firefox and Thunderbird 1.5 before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to bypass the js_ValueToFunctionObject check and execute arbitrary code via unknown vectors involving setTimeout and Firefox' ForEach method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015933",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/968814",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-28.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25825",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1968",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/968814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nMozilla, Firefox, 1.5.0.2\r\nMozilla, Thunderbird, 1.5.0.2\r\nMozilla, SeaMonkey, 1.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1727",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with \"Print Preview\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "8F71241D-928E-43B4-82ED-5C27FEE1CDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "04455349-5186-4BF4-8EE1-F4852B806F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.13",
            "matchCriteriaId" : "F7DD4CED-138F-415C-9F00-583D92BB3C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "976B9AFA-0129-480B-B226-892CECD59287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "3A088F32-0EA7-465D-A648-9802F9B6164C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "430C1B3A-9CE4-485A-B8DA-F7230E58F137"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015926",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015928",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-25.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25824",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10364",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.2\r\n  Firefox 1.0.8\r\n  Thunderbird 1.5.0.2\r\n  Thunderbird 1.0.8\r\n  SeaMonkey 1.0.1\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1728",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to the crypto.generateCRMFRequest method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "8F71241D-928E-43B4-82ED-5C27FEE1CDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "04455349-5186-4BF4-8EE1-F4852B806F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.13",
            "matchCriteriaId" : "F7DD4CED-138F-415C-9F00-583D92BB3C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "976B9AFA-0129-480B-B226-892CECD59287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "3A088F32-0EA7-465D-A648-9802F9B6164C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "430C1B3A-9CE4-485A-B8DA-F7230E58F137"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015922",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015923",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015924",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/932734",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-24.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25812",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10508",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1698",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1015925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/932734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.2\r\n  Firefox 1.0.8\r\n  Thunderbird 1.5.0.2\r\n  Thunderbird 1.0.8\r\n  SeaMonkey 1.0.1\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1729",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "8F71241D-928E-43B4-82ED-5C27FEE1CDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "1.5.0.2",
            "matchCriteriaId" : "04455349-5186-4BF4-8EE1-F4852B806F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.13",
            "matchCriteriaId" : "F7DD4CED-138F-415C-9F00-583D92BB3C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "976B9AFA-0129-480B-B226-892CECD59287"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-23.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10922",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.2\r\n  Firefox 1.0.8\r\n  SeaMonkey 1.0.1\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1730",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3E5FB-C9AF-4908-A178-71294E8ACAF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/720",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015915",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015916",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015918",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/179014",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-22.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431060/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-010.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25826",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1614",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/179014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431060/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.2\r\n  Firefox 1.0.8\r\n  Thunderbird 1.5.0.2\r\n  Thunderbird 1.0.8\r\n  SeaMonkey 1.0.1\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1731",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "4461B287-CF95-44A0-8517-4423636CABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "EF9D2443-9389-42B0-BF93-3ADC1B7325EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5832619D-0D24-45AB-90ED-74FC96CF8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "A18B07F4-E46B-4BA9-BFBF-16754CD71C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-19.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1955",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9604",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5\r\n  Firefox 1.0.8\r\n  Thunderbird 1.5\r\n  Thunderbird 1.0.8\r\n  SeaMonkey 1.0\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1732",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS) attacks via unspecified vectors involving the window.controllers array."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-17.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=313373",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25818",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10232",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1887",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=313373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability also affects Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 \r\nThis vulnerability is addressed in the following product releases:\r\nMozilla, Firefox, 1.5\r\nMozilla, Firefox, 1.0.8\r\nMozilla, Thunderbird, 1.5\r\nMozilla, Thunderbird, 1.0.8\r\nMozilla, SeaMonkey, 1.0\r\nMozilla, Suite, 1.7.13\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1733",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) \"by inserting an XBL method into the DOM's document.body prototype chain.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "4461B287-CF95-44A0-8517-4423636CABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "EF9D2443-9389-42B0-BF93-3ADC1B7325EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5832619D-0D24-45AB-90ED-74FC96CF8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "A18B07F4-E46B-4BA9-BFBF-16754CD71C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/488774",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-16.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25817",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10815",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/488774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability also affects Mozilla, SeaMonkey, 1.0 and Mozilla, Suite, 1.7.13\r\n\r\nThis vulnerabiloity is addressed in the following product releases:\r\nMozilla, Firefox, 1.5\r\nMozilla, Firefox, 1.0.8\r\nMozilla, Thunderbird, 1.5\r\nMozilla, Thunderbird, 1.0.8\r\nMozilla, SeaMonkey, 1.0\r\nMozilla, Suite, 1.7.13\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1734",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using the Object.watch method to access the \"clone parent\" internal function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "4461B287-CF95-44A0-8517-4423636CABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "EF9D2443-9389-42B0-BF93-3ADC1B7325EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5832619D-0D24-45AB-90ED-74FC96CF8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "A18B07F4-E46B-4BA9-BFBF-16754CD71C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/842094",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-15.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10755",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/842094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5\r\n  Firefox 1.0.8\r\n  Thunderbird 1.5\r\n  Thunderbird 1.0.8\r\n  SeaMonkey 1.0\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1735",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "4461B287-CF95-44A0-8517-4423636CABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "EF9D2443-9389-42B0-BF93-3ADC1B7325EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5832619D-0D24-45AB-90ED-74FC96CF8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "A18B07F4-E46B-4BA9-BFBF-16754CD71C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/813230",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-14.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25815",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/813230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5\r\n  Firefox 1.0.8\r\n  Thunderbird 1.5\r\n  Thunderbird 1.0.8\r\n  SeaMonkey 1.0\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1736",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the \"Save image as...\" option.  NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "4461B287-CF95-44A0-8517-4423636CABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "EF9D2443-9389-42B0-BF93-3ADC1B7325EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5832619D-0D24-45AB-90ED-74FC96CF8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "A18B07F4-E46B-4BA9-BFBF-16754CD71C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-13.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25814",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1548",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=293527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5\r\n  Firefox 1.0.8\r\n  SeaMonkey 1.0\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1739",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that causes an out-of-bounds array write and buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3E5FB-C9AF-4908-A178-71294E8ACAF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/935556",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-11.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265736",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25810",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1667",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9817",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/935556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=265736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5\r\n  Firefox 1.0.8\r\n  Thunderbird 1.5\r\n  Thunderbird 1.0.8\r\n  SeaMonkey 1.0\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1740",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "4461B287-CF95-44A0-8517-4423636CABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "EF9D2443-9389-42B0-BF93-3ADC1B7325EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5832619D-0D24-45AB-90ED-74FC96CF8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "A18B07F4-E46B-4BA9-BFBF-16754CD71C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-12.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=271194",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10424",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=271194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5\r\n  Firefox 1.0.8\r\n  SeaMonkey 1.0\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1741",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) \"using a modal alert to suspend an event handler while a new page is being loaded\", (2) using eval(), and using certain variants involving (3) \"new Script;\" and (4) using window.__proto__ to extend eval, aka \"cross-site JavaScript injection\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "8F71241D-928E-43B4-82ED-5C27FEE1CDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.13",
            "matchCriteriaId" : "F7DD4CED-138F-415C-9F00-583D92BB3C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0",
            "matchCriteriaId" : "CB8DE1B0-ACE1-4720-91AE-3C85EF754387"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778A6957-455B-420A-BAAF-E7F88FF4FB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-09.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25806",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1855",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9167",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5\r\n  Firefox 1.0.8\r\n  Mozilla Suite 1.7.13\r\n  SeaMonkey 1.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1742",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "4461B287-CF95-44A0-8517-4423636CABBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.12",
            "matchCriteriaId" : "EF9D2443-9389-42B0-BF93-3ADC1B7325EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5832619D-0D24-45AB-90ED-74FC96CF8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "A18B07F4-E46B-4BA9-BFBF-16754CD71C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/492382",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-10.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25807",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11808",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/492382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5\r\n  Firefox 1.0.8\r\n  Thunderbird 1.5\r\n  Thunderbird 1.0.8\r\n  SeaMonkey 1.0\r\n  Mozilla Suite 1.7.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1737",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary bytecode via JavaScript with a large regular expression."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3E5FB-C9AF-4908-A178-71294E8ACAF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/329500",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-11.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25808",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10817",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/329500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1738",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-14T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) by changing the (1) -moz-grid and (2) -moz-grid-group display styles."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B220F04-0B11-4171-8E1E-1F01668661C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4751BA65-0CEF-46B8-A15F-A86F411890B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95047540-D109-494F-930A-D6593EDE00C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0846804-2FA2-4D78-B3DD-67E5363B13C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B1DF5-FC67-428E-B4C7-9AC232F59FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D3E5FB-C9AF-4908-A178-71294E8ACAF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/252324",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-11.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1687",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9405",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/252324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-107A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-14T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0330.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436338/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/271-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/275-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/276-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0558",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2006-04-14T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by interrupting a task while another process is accessing the mm_struct, which triggers a BUG_ON action in the put_page_testzero function."
      }, {
        "lang" : "es",
        "value" : "perfmon (perfmon.c) en kernel de Linux en arquitecturas IA64 permiten a usuarios locales provocar una denegación de servicio (caída) mediante la interrupción de una tarea mientras otro proceso está accediendo al mm_struct, lo que desencadena una acción BUG_ON en la función put_page_testzero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-ia64&m=113882384921688",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/19737",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/26709",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0774.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/bid/17482",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1444",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185082",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10177",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://marc.info/?l=linux-ia64&m=113882384921688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0774.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in acc.php in QuickBlogger 1.4 allows remote attackers to read or include arbitrary local files via the request parameter.  NOTE: this issue can also produce resultant XSS when the associated include statement fails."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jl_webworks:quickblogger:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06539CE7-9E8E-4195-8FF0-3F7FC30FD82C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/15942",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430878/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431059/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/15942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430878/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431059/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to \"authentication exploits\".  NOTE: this is a different set of affected versions, and probably a different vulnerability than CVE-2006-1337."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCAA0B95-5875-41CF-90BA-EF07D240FF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45540A37-2CBF-453F-8EFF-696B9318499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724E8638-CF5A-480B-89D7-0E029A0C5965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B664B5-EEF9-4C5F-B23C-E4D54DBF2EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39F83EAD-9296-4A24-BF7F-905CC93FEADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27EEFD5-19B1-4F0C-BD52-257594C37310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BB6A16-65D3-43CF-BFB4-E0616476A979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BAC3EA-3267-4AE2-A172-3B8D63B09B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFAF9C8-DB67-446E-B63C-530CB0C170B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F30383-D23F-4CA5-BC02-7716398BC042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE40F5BA-6174-4959-BFD1-CCECAB138009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6DCAFE-CAC2-4B36-B3E1-FA2B490424EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32956E6-A13B-4663-BBC9-FEB08A1DCC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AABE2F0-FEC1-4BDE-B1C0-92FF2CEA48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652F54CA-1CCA-4BC9-8728-A0F6FABF8817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A9222A-6F22-40BD-8411-69A90E8E46AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AADE9-F3FB-4272-8026-58FC677D3F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD53801-B8F7-4AE8-BA2B-AC6297340CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E00689-F421-4B3B-96D7-14DC66DB42B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B4AA11-F7A1-4297-B6B7-68A815FCE189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1FBE144-CB33-4726-B8E6-52CA42BE7C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A6721E-E25B-4502-892A-46054D920C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1517796-B826-40A3-9654-3BA1DA4E4CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735523E7-25D9-4541-B389-D1098052F841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67F8892-2A24-4EF4-ABFA-E7651DF4C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A4FCCB-D0CC-4B53-AAF0-F338950B05F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB172967-4C1A-4E5E-9B10-606CD185E495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E2BEE2-6FBE-43B4-90AA-590D7CAEDA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:1.704:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A071CC-3210-4D98-A5D3-82FBCB29C657"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mailenable.com/enterprisehistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/standardhistory.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/enterprisehistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/professionalhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/standardhistory.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-15T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Website, and (5) Public Remarks fields to (a) eventpublisher_admin.htm and (b) eventpublisher_usersubmit.htm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upoint:at1_event_publisher:2003-12-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F382E0-46D6-4AB0-9765-7DF2F70E171E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24236-upoint.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24236-upoint.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-15T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upoint:at1_event_publisher:2003-12-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F382E0-46D6-4AB0-9765-7DF2F70E171E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/24/24236-upoint.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/24/24236-upoint.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-17T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "FE1DF541-6581-4C0C-9B25-DA84983D89FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA5EE4F-F255-456D-9C23-EA00F77838B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52D52A0-BA4A-424F-8A13-566E55F637B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/runcms_13a_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/runcms_13a_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/424708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Succesful exploitation requires that register_globals = On & allow_url_fopen = On"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-17T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:h:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3h",
            "matchCriteriaId" : "B98DF901-844B-4073-948C-04B4ED32BE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDF610B9-1105-4C37-B93E-4677311747F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1_1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE201B-A40F-4387-B855-5176A828BA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B95AF0-CDD3-41FB-B343-46A69E909F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1a:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AED1C3-740C-4EDE-A674-D753496A406A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1a:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7E78E2-1712-4B84-9EDD-58AF95AE6815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EE93EF-D273-4DEC-A85C-76290FEE40A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC21C1E-131A-4366-8741-7BE7594B6F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993587DE-DA24-4D52-B190-AB236327D687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16ED2979-BB01-44E7-A0A3-D1B7F550F538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4E3399-C743-4664-A55A-77BF543CBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49269426-5FA7-4CF1-AF64-BEC97A09E7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863BE900-E43A-4E0E-BB25-A7403305F4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE971092-FF34-4F5C-A088-82914D46CE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953A9204-E94E-4756-A687-FBE781ACE158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.3_beta:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE8D25B-73E4-464F-8076-FC491B9F2861"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00104-02242006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16775",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00104-02242006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/23402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-17T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in tablepublisher.cgi in UPDI Network Enterprise @1 Table Publisher 2006-03-23 allows remote attackers to inject arbitrary web script or HTML via the Title of Table field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:updi_network_enterprise:at1_event_publisher:2006-03-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5B03A4-DB8B-4196-B567-CBFDBA683CD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-17T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER['REQUEST_URI'])."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "3A77B148-B3ED-4B75-9077-0F974365DA64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C33D37-2FFF-4DE5-B260-E090F4E6377B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4139FE-7C43-44AC-856F-226E1194D936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0395AD1D-3470-49EE-9F2A-349EF8782B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7BEFBD-4326-44A5-A160-9406D94AB307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85A88D7-07A1-4A8C-88B5-057AD9C675E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614956CB-0582-4EAD-86F4-5AB0BB781CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E4894-3F39-471F-9A56-052718813BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38085E5A-7B41-4E43-8A22-5FD44970F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0BF1F6-A54A-48E8-A872-015FE10E5D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B6EAC-E43D-4D1B-856F-7C23250A2355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328909",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://trac.wordpress.org/ticket/1686",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://trac.wordpress.org/ticket/1686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "The vulnerability manifests itself only when viewed by IE.\r\nThis vulnerability is addressed in the following product release:\r\nWordpress 2.0.1-1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0744",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports an exception in the SYSRET instead of the next instruction, which causes the kernel exception handler to run on the user stack with the wrong GS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19639",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24639",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17541",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1390",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9732",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service (system crash) by using the SIOCGIFALIAS ioctl to gather information on a non-existent alias of a network interface, which causes a NULL pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/netbsd/2006-q2/0014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19615",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/netbsd/2006-q2/0014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in rateit.php in RateIt 2.2 allows remote attackers to execute arbitrary SQL commands via the rateit_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rateit:rateit:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC8AD8B-136E-4414-8F0E-28C73C216F25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/124/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19637",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431859/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/124/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431859/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adcentrix:censtore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.3.002",
            "matchCriteriaId" : "A45BC3D3-D0C3-42F0-8177-5A1E5EE40BF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19666",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17515",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via \"..\" sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemedia:simplebbs:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C22A112-E9E0-4480-9406-9F685D577F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemedia:simplebbs:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4ED99C-AFBA-485A-BDCC-A43C781F1DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemedia:simplebbs:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04CFC80A-2F70-4B73-AFDA-C1A524274381"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/SimpleBBS-RCE-posts.php.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430872",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17501",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.worlddefacers.de/Public/WD-SMPL.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/SimpleBBS-RCE-posts.php.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.worlddefacers.de/Public/WD-SMPL.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbitrary web script or HTML via the search_exp parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planet_concept:planetsearch\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2005-10-26",
            "matchCriteriaId" : "BDBB1D0F-7E61-4D7C-9DC7-217D788DD74C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/04/planetsearch-xss-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431033/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/04/planetsearch-xss-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431033/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the twg_album parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE1A1DE-DD29-4A96-B483-1CA2B5AA59F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8C28C-3AE4-4031-949A-B120097B93EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19660",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431069/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436451/30/4560/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431069/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436451/30/4560/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sql_query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.0.3",
            "matchCriteriaId" : "23E30EDB-889A-4A35-A636-B12BC9079C47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430902/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431013/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17487",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430902/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431013/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to execute arbitrary SQL commands via the sql_query parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25A359B-8FFD-4941-9419-4E99373D9588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12375469-DD81-42BE-8BC0-FCAB0D2D6253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431013/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431013/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerbability may affect earlier versions of phpMyAdmin as well."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerscripts:powerclan:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A285974-540D-4220-9F46-A27E068258CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/04/powerclan-114-sql-injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19689",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431005/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/04/powerclan-114-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431005/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.3",
            "matchCriteriaId" : "2E74B026-E25D-485A-A94C-F66A3FEEE641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/musicbox-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19672",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/musicbox-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start parameter in a search action or (2) type parameter in a top action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.3",
            "matchCriteriaId" : "2E74B026-E25D-485A-A94C-F66A3FEEE641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/musicbox-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19672",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/musicbox-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the show parameter in a Template operation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lifetype:lifetype:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BB71F3-1B32-4CDF-84FB-F97F925D8D79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19646",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015941",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431008/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431008/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lifetype:lifetype:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BB71F3-1B32-4CDF-84FB-F97F925D8D79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015941",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431008/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431008/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2) AIM, (3) MSN, (4) Google Talk, (5) Website Name, (6) Website Address, (7) Email Address, (8) Location, (9) Signature, and (10) Sub-Titles fields in the user profile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexbb:flexbb:0.5.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBCDB6A6-A291-4F1A-BC60-3A67AE7314B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/431121/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431121/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) forumid, or (3) threadid parameter to index.php; the (4) ICQ, (5) AIM, (6) MSN, (7) Google Talk, (8) Website Name, (9) Website Address, (10) Email Address, (11) Location, (12) Signature, and (13) Sub-Titles fields in the user profile; or (14) flexbb_password field in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexbb:flexbb:0.5.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBCDB6A6-A291-4F1A-BC60-3A67AE7314B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/431121/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431121/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebftp:phpwebftp:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D902A04F-71ED-4626-BA27-5FB59670BB0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431115/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431115/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebftp:phpwebftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "E0758D23-1037-4E8A-AE14-37B64F399F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431115/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431115/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service (memory exhaustion) by using the sysctl system call to lock a large buffer into physical memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-013.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19616",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-013.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) newuser_realname and (2) newuser_icq parameters, a different vector than CVE-2006-1768.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tritanium_scripts:tritanium_bulletin_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "BD18DEE9-7132-4BA1-9613-3351B05CAC02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19635",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php, (2) ImpExController.php, and (3) ImpExDisplay.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A869E6C9-6CA7-4FB8-88E2-142C6294D028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4070579C-00AD-4DB1-8B07-4CB88D4EDBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DB2651-4DD5-4007-B0B4-9E2CD9D06D00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430881/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/467666/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430881/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/467666/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in authcheck.php in warforge.NEWS 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) authusername and possibly the (2) authpassword cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_war_forge:warforge.news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ADB3C8-DD45-4417-98B8-6C418CFAB01E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/125/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432104/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/125/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432104/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) first_name and (2) last_name parameter in myaccounts.php.  NOTE: portions of these details were obtained from third party sources instead of the original disclosure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_war_forge:warforge.news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ADB3C8-DD45-4417-98B8-6C418CFAB01E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/125/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432104/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/125/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432104/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arbitrary PHP code via the hub_dir parameter, as demonstrated by including access_log.  NOTE: in some cases, arbitrary remote file inclusion could be performed under PHP 5 using an SMB share argument such as \"\\\\systemname\\sharename\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.2",
            "matchCriteriaId" : "BB01BA8C-E6A9-447B-80B6-1030810ECF6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PHPWebSite_fi_poc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PHPWebSite_fi_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: this might be resultant from the directory traversal vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02443C7-BCFC-44B8-B7F0-490B01DD4220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17533",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02443C7-BCFC-44B8-B7F0-490B01DD4220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "To address this issue, the vendor has released a patch available at the following location:\r\n\r\nhttp://modxcms.com/forums/index.php/topic,3982.0.html"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inject arbitrary web script or HTML via the selected_search_arch parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB2CEC8-7EFF-410F-A4E2-CDC515F9E38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F6F8CFD-D03F-494E-96E0-A8C9CCDC6355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3F0B6F-F519-4717-B1A4-5CE599DB611F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1005EB-A6C0-4601-8193-ABB130B30E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/advisory/farsinews/farsinews042006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431011/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17534",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/advisory/farsinews/farsinews042006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431011/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via \"..\" sequences in the archive parameter to index.php, which leaks the full pathname in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB2CEC8-7EFF-410F-A4E2-CDC515F9E38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F6F8CFD-D03F-494E-96E0-A8C9CCDC6355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3F0B6F-F519-4717-B1A4-5CE599DB611F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1005EB-A6C0-4601-8193-ABB130B30E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431011/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431011/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Comment parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpguestbook:phpguestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BD400E-126E-4038-B94B-D4C1A9D0ED54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/phpguestbook-v10-script-insertion.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431070/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/phpguestbook-v10-script-insertion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431070/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplinks:phplinks:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.3.1",
            "matchCriteriaId" : "5D67F118-E590-4EDB-9AC7-890FFF282EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/phplinks-2131-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/phplinks-2131-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in view.php, (2) keyword parameter in search.php, and (3) image_id parameter in image.php.  NOTE: it is possible that vectors 1 and 3 are resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snipegallery:snipe_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.4",
            "matchCriteriaId" : "2EB78111-8DBD-4366-9E97-CDA8E181E350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431074/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431123/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431074/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431123/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cron job in fcheck before 2.7.59 allows local users to overwrite arbitrary files via a symlink attack on a temporary file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
            "matchCriteriaId" : "5EACF214-FA27-44FF-A431-927AB79377A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
            "matchCriteriaId" : "E2B58895-0E2A-4466-9CB2-0083349A83B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
            "matchCriteriaId" : "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
            "matchCriteriaId" : "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
            "matchCriteriaId" : "19876495-4C1A-487C-955A-C5AA46362A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
            "matchCriteriaId" : "D75286DD-50BC-4B72-8AC8-E20730124DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
            "matchCriteriaId" : "1998C972-497E-4916-B50E-FB32303EEA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
            "matchCriteriaId" : "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
            "matchCriteriaId" : "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "08E90AFA-C262-46D0-B60E-26B67C9602D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3047C7D-E114-4CF2-A42E-A660C8DB22AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1035",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nFcheck, 2.7.59-7sarge1\r\nFcheck, 2.7.59-8\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-18T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.6",
            "matchCriteriaId" : "D52340CE-D832-43A6-9552-5A5E014D1AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864D95C2-9B1B-4EB4-82CD-3BA5E063FEED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FB4B52-69CA-45DA-AE22-E6667E8B98FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FF789-3B09-4974-B62F-CCD7F5AA2BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FA92F7-46BB-444C-ADAB-4B550CD0B69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A003A2C3-1C4F-4A76-BABE-C55A761E3321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A063E6CD-16F8-42E0-A9A2-4D33C10F7EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBC7FE3-D810-487C-8FD3-27B8729DCA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08E661-23D9-437F-844F-6BE8183CF3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D030C12-C2C6-4714-B776-2EF7ECF1A591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5A8210-2E7C-465C-9751-CB362AADC224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82621C2B-B5F0-4E70-A619-0213005DADB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DBCFB5-65BF-46FE-AC19-2557B6C0BD01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C185C9-9592-43A1-9811-80E16032F396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD696CD-3B63-4C8B-966E-EE00F44CA44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9750B74B-F766-4869-880B-4E5E41D90533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE096C63-221B-4746-B8B6-9314C4CD6FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DCA1D9-0D47-4F0A-A78F-F85FADE0C9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CE1C95-D4C7-4662-AD0D-5219335BAF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC453F5-C46A-45E9-B7DE-3C5BF752F305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9149505F-D47B-40C3-93EB-A3C647A1AC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FC8F82-D648-4127-9914-27414358AC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCCA63B-AB59-4827-BD6F-4AF0155151F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC9C13-ADDD-4F09-B977-EE0DEF598B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C20296F-F70A-4D3C-A062-B6054617841C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A92B4D-16A7-4D99-8F3A-2E5D3B12C86B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16783925-8EC5-431F-90B5-93B16DCC10B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C59AF9E-FEC7-44AB-B392-49DB11BAEB0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325C4452-6541-46F6-A86C-6D6987583FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5424B5B4-99B3-4695-8E0D-7E8DC8B88C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BDF9F0-1AFD-47E6-9054-A9FC6D422DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8D2125-019A-4B73-9E1A-98E745148803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C60C04-EF59-4F5C-96E5-A6E693EA9A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3636BB44-DF4D-40AB-8EBB-1EC5D911E4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B3C254-29D9-4911-89A9-AC0CD9EB13F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49F2D76-DC82-4289-8891-4982795D896A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203237E0-BB44-42D0-B65B-CBDAAA68A1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4042CC21-F3CB-4C77-9E60-AF8AA9A191C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.7-patch.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cipher.org.uk/index.php?p=advisories/Asterisk_Codec_Integer_Overflow_07-04-2006.advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.7-patch.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cipher.org.uk/index.php?p=advisories/Asterisk_Codec_Integer_Overflow_07-04-2006.advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E38D56-80BA-460C-A296-ED7F506E4364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B380F93D-5B13-49D0-B130-D45C2849A135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C8004D-639C-47BC-BE3E-CF5F06C1679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD01F19-4B30-4147-AC48-7F5C64EE80CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104E5C14-6D87-494B-8D60-0443ADDCD31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA27DC0D-CA9E-432F-85EC-74BCCC2B3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE79D7E9-DF50-42FD-A255-FF2A29131946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435340B0-AD02-4174-BC7F-6A7C222A7F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3_ml03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEF9658-0479-43E5-99A2-620ED3E018E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19656",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY82357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0603.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431846/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431848/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17576",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1389",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY82357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0603.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431846/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431848/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php.  NOTE: the code execution occurs because the SQL query results are used in an include statement."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php121:php121_instant_messenger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "AE55D4ED-758F-40DF-B975-953C80E7BB7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/php121im_14_sql_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19643",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/php121im_14_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches, (2) open password prompts, and (3) stored custom connection profiles."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9C6A53-8D65-4B4D-88A4-2F43D0823B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7920CE9-8B9D-46BB-AEBC-7C129CB3C8BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19605",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sybase.com/detail?id=1040117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sybase.com/detail?id=1040117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_studio_enterprise:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4178C339-A3F0-4CBF-B634-2643C4212886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19632",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102292-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17517",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102292-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows remote attackers to execute arbitrary commands via a leading ; (semicolon) in the name parameter in a systemdoc action, which is injected into phpinfo.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coder-world:sysinfo:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9D1068-B322-44E8-8B5D-894CC9509272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19690",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coder-world:sysinfo:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9D1068-B322-44E8-8B5D-894CC9509272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows remote attackers to more easily crack encryption keys generated from the interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-009.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19585",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-009.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check.  NOTE: a sign extension problem makes the attack easier with shorter strings."
      }, {
        "lang" : "es",
        "value" : "Error de entero sin signo en Opera en versiones anteriores a 8.54 permite a atacantes remotos ejecutar código arbitrario a través de valores largos en un atributo de la hoja de estilos, lo que pasa una verificación de longitud. NOTA: un problema de extensión de signo hace el ataque más fácil con cadenas cortas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.53",
            "matchCriteriaId" : "0EE3BE7D-2D71-4D43-9E0B-E91E8A4E5D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F892EEF-54EC-4EC0-84B3-BD5C216AED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089BEFE3-24B2-4C73-BA25-7C905ED68A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "76AECDD0-C14D-4A68-AF2E-1C41A51089EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D888C22C-41F9-427D-9249-F010891DA48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FAD06C-830A-4CB6-B9AF-7E093B64B69B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5366D587-7E77-4288-AB31-48108D04E0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EFFC44-A329-4FA5-B57C-FA8892F8226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9241CFD0-9E61-487F-B076-2D7B8ACEA381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB49750B-DAA1-4417-8384-1F4D47F2227D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1099D38B-82EC-43C9-9DF5-D5EDC19834DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D64030-1877-4F29-8340-93DB6E0F1F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "85184E8A-C42D-4CBD-ACB4-B58752C305D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "DA682571-536B-4CD9-A820-47E897B01480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "298457B8-051B-46D0-81B4-C5B63B69EB98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D4BC07-C37E-4F99-8DEA-54A45250050A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFBC71-7814-4A24-A918-C593673727B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "57824075-E3F7-4B23-B4D6-8417C3147085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE078F27-6FC1-466C-8331-A89F8B6FE0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "5839EB88-DF5E-4AB0-899B-DF9F72F5F442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1865A4-E038-4A1C-877D-5A3CFA9576BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "93966A66-4332-4E76-9B1A-2BBF10AF0ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA91E77-301C-48F6-9A57-D5FDCEF743BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C49DDEF-681C-4A34-9FF8-17249C42842D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF365891-F3FA-4740-94B2-01F85254A2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42B4261-C511-4F3A-8596-6BD4E343DC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2F38FE-7E98-48B2-B0B2-35312368B21F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63687D75-860D-4A36-B6BB-45BD4268B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BD500741-CF39-4F0C-9F96-6CBDFF8973D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*",
            "matchCriteriaId" : "359941FD-A5CE-43C1-AA76-C1B79BCB08C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9AC78A-CA47-476D-935E-67932BAB98A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E9662C-441F-4AB2-AC4C-30F31C32949A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D681B3-73E6-4257-84B4-DE83F6D659B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E5F2A5-F50F-4085-AB7D-8C91121A429A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E90912E-0CF8-404B-9E86-461497C65A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19DD71-9447-4946-931F-4866537C8BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54075890-6E0C-4AB7-8BD5-2023419CC251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABC3435-77CD-4591-8282-7ADA60225CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C35850-B79C-4EE4-A6F2-CC5D2304724B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "50B797C8-3290-4278-9D4B-A15A14FB8D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEC078C-A8F4-471B-A367-59A86B78590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E10F658D-D2E4-4789-8172-F8842C3EEA05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81687D99-7444-4205-A7BE-992CC758675F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D75C4301-68E9-4A10-B9C5-711252BF629B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC690371-3326-421E-8BAC-14F48840671B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E20418A7-1FA7-45EF-99B5-12D283EA6CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE50982-8026-466C-9F51-867425C9986F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD889EC7-E5D2-4137-B85C-86D7DB5CED27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "97452A26-7231-43BE-B70E-B8D05365CAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DBA733-467C-4505-8199-DD25A5FFBF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B332FF1C-731D-454C-AA9E-3534040F09E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7965089-8592-47F2-958B-7DBE669BCAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1750B2D-7AC8-45CF-9879-1D0476EEE86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBAA39D-01A0-4B6B-926B-C36C238E5258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECEE4473-88C0-4E28-A5B5-F7383B0E5558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76410AD4-78CA-48EA-83F0-099D0A49626F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9754B270-E01D-415E-9A91-09ECB9B82B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "D4682E92-E5E7-4351-959E-25A79CA4271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2B21F-7E97-416B-AF5C-35338A254552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC41D6-73D4-44E9-87E4-E1E955B9580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FCCB1C-165C-49FF-B70B-475B37BDF02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5A5E5-3703-44AC-9963-A20A55002B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3E5BEF-3F29-4929-A37C-C49322B19047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114493114031891&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015912",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/854/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sec-consult.com/259.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430876/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17513",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114493114031891&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.opera.com/docs/changelogs/windows/854/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sec-consult.com/259.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430876/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_hor:calendarix:0.6.2005-08-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E0313E-09A7-4D87-89EA-852B355264DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_hor:calendarix_advanced:1.5.2005-05-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6F6A956-DEDB-43AE-A206-66B50A18414D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431122/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431122/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:liveupdate:3.0:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "05EE17B2-8E91-4413-A35A-183C3000B6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:liveupdate:3.0.1:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "FB2DE1ED-01B8-42A1-BA70-BA15328B2E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:liveupdate:3.0.2:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "B3F2C272-73E6-4D07-A72D-145A6BF1818C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:liveupdate:3.0.3:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "50D20D8E-A7D7-4DD6-9918-2E609A7D7620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:liveupdate:3.5:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "749C0B32-9669-4CD6-8615-BCD76C768532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.0:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "E72D8D65-340C-4505-AA80-F9E7870513EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "242D33E8-1B6B-4562-9F2A-1B34E3B7BC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.2:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "252ACD1B-323F-4139-880D-89D600F29986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.3:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "B2D0922A-3EA3-4BC9-9311-9DCA57338CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "7225A578-8F62-42BD-99AC-D3385478613A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.0:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "FF0903BD-3E78-4024-A773-16100F519B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.1:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "1B390577-F1F1-4821-90FB-967E749F7CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.9.1:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "44073E2A-A8AB-4D1A-BCFC-8439E40E97E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:3.0:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "D2259605-B720-42B0-8476-6CAE07C7B143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_personal_firewall:3.0:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "9CC3459D-1F86-48A4-9DC2-0E542AEAC97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_personal_firewall:3.1:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "608F8ECE-F8A9-4659-9ED7-79ADD61E5099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:3.0:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "F648A08A-24EF-45A5-B7FD-00CAD5892061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_utilities:8.0:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "DCB3EF92-1CEA-4E57-94E7-0C596998F4CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19682",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431318/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1015953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clanscripte.net:fuju_news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4037EA-91AA-4C9D-9DED-105E43412A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clanscripte.net:fuju_news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4037EA-91AA-4C9D-9DED-105E43412A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parameter, which satisfies the file_exists function call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_album:php_album:0.3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AE97A8-7678-4914-9A9C-A41BA6E760BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phpalbum_0323_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19661",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431067/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpalbum_0323_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431067/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service (crash) via the (1) load, (2) spy and (3) bomb functions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "F11616DC-955E-486A-98CF-729418CBB3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C4498A-81B5-405B-831A-AC85F47A8B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB374BFF-3E33-47CD-88A0-8F512397316E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DFEC4A-F779-4465-B5BE-0CEF8A9C1AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7146C53E-C190-4FB9-95D9-D8525346CF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A5B0F2-D726-4849-9F08-FBC137E2E201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A026C-063E-4C83-A741-33AF9DFA9879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5DDFD5-4A10-42FF-B729-9C1A25B9DC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE657661-98D5-499B-8DF7-6C96C27AB332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9983B0-D36E-4F8D-BA8C-B7B1B12CE6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E2CD-6375-4C90-8D66-5B4815899168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FF677B-8DD6-462A-9D0A-2336941C17C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93CA553-5644-4040-B406-281224E177D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C9A2B1-FFDA-4300-BFA1-CCE83CECF418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F23D9-2FED-4DAD-A4E0-FC0C3D3691E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19674",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=410001&group_id=24031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=410001&group_id=24031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19759CD-3F3D-4A96-8DD0-828BA628427D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD75997-6BFC-4161-A12A-8AB03FBDB562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC1D5AE-1D9C-416A-8A34-61931C810478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3FA6A-5221-4607-961F-075A78EC6BEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19711",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431120/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431120/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) NAME and (2) COMMENTS parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cynical_games:shoutbook:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4520AD94-F672-4E66-9CA5-959DC1740511"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19704",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431130/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431130/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) LOCATION and (2) URL parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cynical_games:shoutbook:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4520AD94-F672-4E66-9CA5-959DC1740511"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19704",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:base-config:2.53.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1EFB75-D056-4E8F-A44E-FF113FB78D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E287A87-80CC-46CF-8042-7447AFBDD463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356939",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19170",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23922",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2023-11-07T01:58:42.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0537.  Reason: This candidate is a duplicate of CVE-2006-0537.  Notes: All CVE users should reference CVE-2006-0537 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via the ublock parameter, which is saved in the user's personal menu.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, it is unclear whether this issue is a vulnerability, since it is related to the user's personal menu, which presumably is not modifiable by others."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_id parameter in the Your_Home functionality.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, and (3) date parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16B7211-B340-4E4E-A016-74F7596A7B2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/04/linpha-xss-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19679",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431242/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17581",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/04/linpha-xss-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431242/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) position and (2) id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skymarx_solutions:xflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.46.11",
            "matchCriteriaId" : "A5C479B8-B549-41DB-8FD9-FCB9371A1BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19707",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) level, (2) position, (3) id, and (4) action parameters to members_only/index.cgi, and the (5) page parameter to customer_area/index.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skymarx_solutions:xflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.46.11",
            "matchCriteriaId" : "A5C479B8-B549-41DB-8FD9-FCB9371A1BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19707",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) action parameter to members_only/index.cgi and (2) page parameter customer_area/index.cgi, probably due to invalid values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skymarx_solutions:xflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.46.11",
            "matchCriteriaId" : "A5C479B8-B549-41DB-8FD9-FCB9371A1BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptsfrenzy:article_publisher_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "B38883A0-4496-4347-A7AF-8B56F721847B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/article-publisher-pro-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/article-publisher-pro-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via the (1) id parameter in (a) user.php, or (2) where and (3) order parameters to (b) admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moderngigabyte:modernbill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.2",
            "matchCriteriaId" : "A3C184BD-9FC2-494B-917F-6877C05E716E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-19T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a login action via the (1) Account Name and (2) Username field.  NOTE: the vendor has disputed this vulnerability, saying that \"it does not exist currently in the Bluepay 2.0 product,\" and older versions might not have been affected either.  As of 20060512, CVE has not formally investigated this dispute"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluepay:bluepay_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "87CD5AC8-8304-4EFF-A3B6-77AD558AF6F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1524",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-19T18:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability.  NOTE: this description was originally written in a way that combined two separate issues.  The mprotect issue now has a separate name, CVE-2006-2071."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19657",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19664",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24714",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17587",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1391",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25870",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1525",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-19T18:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a multicast IP address, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.8",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19709",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24715",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17593",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1399",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189346",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25872",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1056",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux en versiones anteriores a 2.6.16.9 y el kernel de FreeBSD, cuando se ejecuta en AMD64 y otros procesadores AuthenticAMD de 7ª y 8ª generación, solo guarda/restablece los registros FOP, FIP y FDP x87 en FXSAVE/FXRSTOR cuando una excepción está pendiente, lo que permite un proceso para determinar las porciones del estado de instrucciones de punto flotante de otros procesos, lo que puede ser aprovechado para obtener información sensible como claves criptográficas. NOTA: este es un comportamiento documentado de procesadores AMD64, pero es inconsistente con procesadores Intel en una forma relevante para la seguridad que no fue abordada por los kernels."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EC02F3-3905-460D-8949-3B26394215CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.16.8",
            "matchCriteriaId" : "218D0663-CA3D-4E01-BB30-D57405576E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kb.vmware.com/kb/2533126",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=114548768214478&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19715",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22876",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015966",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24807",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431341",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451421/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17600",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1426",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4353",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25871",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9995",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kb.vmware.com/kb/2533126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/180820/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=114548768214478&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to Linux Kernel version 2.6.16.9 :\r\nhttp://www.kernel.org/"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and other versions have unknown impact and attack vectors in the (1) Advanced Replication component, as identified by Vuln# DB01, and (2) Oracle Spatial component, as identified by Vuln# DB10.  NOTE: details are unavailable from Oracle, but as of 20060421, they have not publicly disputed a claim by a reliable independent researcher that states that DB01 is an unknown issue in the DBMS_REPUTIL package, and DB10 is SQL injection in the INSERT_CATALOG, UPDATE_CATALOG, and DELETE_CATALOG functions of the SDO_CATALOG package."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, y otras versiones tienen impacto y vectores de ataque desconocidos en el (1) componente de Replicación Avanzada, identificado por Vuln#DB01, y (2) el componente Espacial Oracle, identificado por Vuln# DB10.\r\nNOTA: los detalles son inaccesibles desde Oracle, pero en fecha 21/04/2006, no han discutido publicamente una raclamanción por un investigador independiente confiable que indique que DB01 es un asunto desconocido en el paquete de DBMS_REPUTIL, y DB10 es inyección del SQL en las funciones de INSERT_CATALOG, de UPDATE_CATALOG, y de DELETE_CATALOG del paquete SDO_CATALOG."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:C/A:C",
            "baseScore" : 9.7,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/139049",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/139049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 9.2.0.6 has unknown impact and attack vectors in the Advanced Replication component, aka Vuln# DB02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Database Server 9.2.0.6 con impacto y vectores de ataque desconocidos en el componente Advanced Replication (Replicación Avanzada), tcc Vuln# DB02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el componente Advanced Replication en Oracle Database Server 10.1.0.4 permite a usuarios de la base de datos ejecutar código de su elección a través del procedimiento VERIFY_LOG del paquete DBMS_SNAPSHOT_UTL, también conocido como Vuln# DB03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.argeniss.com/research/ARGENISS-ADV-040603.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/797465",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431588/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.argeniss.com/research/ARGENISS-ADV-040603.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/797465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431588/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 8.1.7.4 and 9.0.1.5 has unknown impact and attack vectors in the Dictionary component, aka Vuln# DB04."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Database Server 8.1.7.4 y 9.0.1.5 con impacto y vectores de ataque desconocidos en el componente Dictionary (Diccionario), tcc Vuln# DB04."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/241481",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/241481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors in the Export component, aka Vuln# DB05.  NOTE: details are unavailable from Oracle, but as of 20060427, they have not publicly commented on whether DB05 is the same issue as CVE-2006-2081."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, y 10.2.0.2 con impacto y vectores de ataque desconocidos en el componente Export (Exportación), también conocido como Vuln# DB05. NOTA: \t\r\nlos detalles son inasequibles desde Oracle, pero en fecha 27/04/2006, no han hecho ninguna observación ni comentario al respecto al público sobre si DB05 es la misma edición que CVE-2006-2081."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/452681",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/452681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log Miner) package, aka Vuln# DB06."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de Oracle Database Server 9.2.0.7 y 10.1.0.5 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante la función DELETE_FROM_TALBE en el paquete DBMS_LOGMNGR_SESSION (Log Miner), tcc Vuln# DB06."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045280.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_logmnr_session.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431345/30/5490/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045280.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_logmnr_session.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431345/30/5490/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors in the Oracle Enterprise Manager Intelligent Agent component, aka Vuln# DB07."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Database Server 9.0.1.5 y 9.2.0.7 con impacto y vectores de ataque desconocidos en el componente Oracle Enterprise Manager Intelligent Agent, tcc Vuln# DB07."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply patches :\r\nhttp://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 9.2.0.7, 10.1.0.4, and 10.2.0.1 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB08."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Database Server 9.2.0.7, 10.1.0.4, y 10.2.0.1 con impacto y vectores de ataque desconocidos en el componente Oracle Spatial, tcc Vuln# DB08.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C8910-D7E7-4B50-A506-58B425B2BE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply patches :\r\nhttp://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB09.  NOTE: Oracle has not disputed reliable claims that this issue is SQL injection in MDSYS.PRVT_IDX using the (1) EXECUTE_INSERT, (2) EXECUTE_DELETE, (3) EXECUTE_UPDATE, (4) EXECUTE UPDATE, and (5) CRT_DUMMY functions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Database Server 8.1.7.4, 9.0.1.5, y 9.2.0.6 con impacto y vectores de ataque desconocidos en el componente Oracle Spatial, tcc Vuln# DB09."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply patches."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB11.  NOTE: Oracle has not disputed reliable researcher claims that this issue is SQL injection in MDSYS.SDO_LRS_TRIG_INS."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificad en Oracle Database Server 9.0.1.5, 9.2.0.7, y 10.1.0.5 con impacto y vectores de ataque desconocidos en el componente Oracle Spatial, tcc Vuln# DB11."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "The most severe of these vulnerabilities could possibly expose affected computers to complete compromise."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB12.  NOTE: details are unavailable from Oracle, but as of 20060421, they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the (1) GEN_RID_RANGE_BY_AREA and (2) GEN_RID_RANGE functions in the MDSYS.SDO_PRIDX package."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Database Server 9.2.0.7 and 10.1.0.4 tiene impacto y vectores de ataque desconocidos en el componente Oracle Spatial, tcc Vuln# DB12. NOTA: no hay detalles disponibles de Oracle, pero desde 20060521, no han disputado públicamente una queja de un investigador independiente fiable que afirma que el problema es inyección de SQL en las funciones (1) GEN_RID_RANGE_BY_AREA y (2) GEN_RID_RANGE en el paquete MDSYS.SDO_PRIDX.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/240249",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/240249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.7 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB13."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Database Server 8.1.7.4, 9.0.1.5 y 9.2.0.7 con impacto y vectores de ataque desconocidos en el componente Oracle Spatial, tcc Vuln# DB13."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de guiones en sitios cruzados (XSS) en index.php en phpFaber TopSites permite a atacantes remotos inyectar guiones web o HTML   de su elección mediante el parámetro \"page\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfaber:topsites:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BA2E6D-20F2-40F5-9657-A0A6A15D3FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431073/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17542",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431073/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 have unknown impact and attack vectors, aka Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente Email Server de Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0 y 10.1.2.1 con impacto y vectores de ataque desconocidos, tcc Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC74B72-F906-4E4A-BDDD-AC04AF819E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E4CD35-3C6D-4C72-8C11-7E58AC3160AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3044FB3C-3FF3-4084-9F65-6F37A16FF052"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/549146",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/879041",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/549146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/879041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln# (1) APPS01 in the (a) Application Install component; (2) APPS09 in the (b) Oracle Diagnostics Interfaces component; (3) APPS10 in the (c) Oracle General Ledger component; (4) APPS12 and (5) APPS13 in the (d) Oracle Receivables component."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite y Aplications 11.5.10CU2 con impacto y vectores de ataque desconocidos identificados por Vuln# (1) APPS01 en el componente (a) Application Install; (2) APPS09 en el componente  (b) Oracle Diagnostics Interfaces; (3) APPS10 en el componente (c) Oracle General Ledger; (4) APPS12 y (5) APPS13 en el componente d) Oracle Receivables.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/940729",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/940729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors.  component, aka Vuln# APPS02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Financials for Asia/Pacific en Oracle E-Bussiness Suite and Applications 11.5.9 con impacto y vectores de ataque desconocidos, tcc Vuln# APPS02.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln# (1) APPS03 in (a) iProcurement; (2) APPS04 in (b) Oracle Application Object Library; (3) APPS06, (4) APPS07, and (5) APPS08 in (c) Oracle Applications Technology Stack; and (6) APPS11 in (d) Oracle Order Capture."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle E-Bussiness Suite and Applications 11.5.10 con impacto y vectores de ataque desconocidos, identificados como Vuln# (1) APPS03 en (a) iProcurement; (2) APPS04 en (b) Oracle Application Object Library; (3) APPS06, (4) APPS07, y (5) APPS08 en (c) Oracle Applications Technology Stack; y (6) APPS11 en (d) Oracle Order Capture."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/619194",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/824833",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/619194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/824833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications 11.5.10CU1 has unknown impact and attack vectors, aka Vuln# APPS05."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jdedwards:enterpriseone_tools:8.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEE70DF-4231-497D-82A0-2F7D391246A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jdedwards:enterpriseone_tools:8.95.j1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9524343A-F16C-4253-8542-45B3C049E42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworld:oneworld_tools:8.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89B551A-3930-42DE-9AE9-00087CD40D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneworld:oneworld_tools:8.95.j1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E53352-8AC7-4675-B3B5-DF6C1D675E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2328BA88-C390-46EA-8C30-9F0A001C10EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite_10g_release_1:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50BB925-4684-4B02-B9F9-E1D736068D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite_10g_release_1:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68E67DD-C2F2-4F3C-982B-FE218A4F65C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite_10g_release_1:10.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CC363E-6566-417A-91D9-00EF7B0A196A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACC77BE-277F-47F9-B50A-2E9CF5D4A965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2109201B-89F7-4FF2-BFD1-2B220E3146FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "389C8910-D7E7-4B50-A506-58B425B2BE70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC251D-9313-4A54-9623-51DC0AEC46FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABAB4394-F145-4149-87F7-880A4AE42F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACC1D6F-2EDD-4DAA-B9CE-CF516C2B35C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:developer_suite:6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63268845-251F-41C3-9C97-4D5D2438985D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:developer_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85E0292-DF98-4EA4-8DCE-3C94E94A12EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120ED075-8649-44F1-A79C-99C040C2E365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7966363-0928-4583-8E3F-AB539F5D3E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D435F3-ED1D-495C-BDAE-6A53C704191B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AECDEE-6F47-4F0E-A10F-2F902DC384A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_tools:8.46:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "244F79F9-E56B-4F23-ADA8-7D1C257678D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_tools:8.46.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D3B269D-0C49-4E65-876E-401DC10FD503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_tools:8.47:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "59B6FEA0-918D-47F3-9123-8C90E69D97F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_tools:8.47.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115717B5-A28C-4E8C-B5E1-88A06A3E3AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:pharmaceutical:4.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56712247-60FC-4E9F-9A51-F2FA736B6F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:pharmaceutical:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8617A752-52DF-491B-B142-E0C43370EC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:pharmaceutical:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB1D951-4D04-4B88-B237-5A07FE4240EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:workflow:11.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD884F9-1511-4221-A1C7-3B18076222A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:workflow:11.5.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C6DF37-B648-445C-B17A-D232B35DD639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has addressed this issue through the release of product updates: \r\nhttp://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html \r\n\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack vectors, aka Vuln# (1) EM01 and (2) EM02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3725B860-D9BD-441C-BE6C-DCB162798F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4B8B94-D717-4BBF-80E3-5B3C1B8CD568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/443265",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/443265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln# PSE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.46.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EFA729-460D-44AF-BB11-CF5106122330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.47.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C85347-2FF5-44EC-9982-4940E5042E5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has unknown impact and attack vectors, aka Vuln# JDE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:8.95.j1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB953F3F-AA41-4EFA-BFB5-E215B96B1C8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-109A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpGraphy 0.9.11 and earlier allows remote attackers to bypass authentication and gain administrator privileges via a direct request to index.php with the editwelcome parameter set to 1, which can then be used to modify the main page to inject arbitrary HTML and web script.  NOTE: XSS attacks are resultant from this issue, since normal functionality allows the admin to modify pages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgraphy:phpgraphy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.11",
            "matchCriteriaId" : "93CB15FA-0081-4273-B158-FB1B6AFDB9DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgraphy:phpgraphy:0.9.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83775BB-7D82-4E5F-9501-EF405F246BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgraphy:phpgraphy:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F46B5E-2D7A-46FB-87FE-CB866341C9B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phpgraphy_0911_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19705",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431128/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431268/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17567",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1379",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpgraphy_0911_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431128/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the search action handler in index.php in Nils Asmussen (aka SCRIPTSOLUTION) Boardsolution 1.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the \"Search for\" item (keyword parameter)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:script-solution.de:boardsolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12",
            "matchCriteriaId" : "79CAEA93-070F-4369-859B-8AB5C865DB8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431072/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431072/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter in (1) event.php and (2) initialize.php.  NOTE: vector 2 was later reported to affect 1.4 as well."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:myevent:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25D884C-9F21-4E64-B567-E4C1C9B56D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:myevent:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6507A4B8-A1FE-4368-B424-CCE0731FACBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431125/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17575",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431125/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormVal_profile parameter.  NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability.  If it is site-specific, then it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:betaboard:betaboard:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49D4FE8-4171-40B5-A324-4C5569DFD6ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045194.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19700",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431116/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431116/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/_avast4_ temporary directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:1.0.5:*:home:*:*:*:*:*",
            "matchCriteriaId" : "844F15EB-C540-4FD4-83BB-E8D58B8D490E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431019/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17535",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ar-blog:ar-blog:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05417521-7DFF-4A40-B218-313FE2FF3121"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431030/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431030/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation.  NOTE: it is not clear whether this is a site-specific issue; however, the claimed codebase relationship with PunBB might be relevant."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revoboard:revoboard:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54E69BB8-849C-479B-80D5-7B7CC8577CD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430886/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430886/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in includes/template.php in phpBB allows remote authenticated users with write access to execute arbitrary PHP code by modifying a template in a way that (1) bypasses a loose \".*\" regular expression to match BEGIN and END statements in overall_header.tpl, or (2) is used in an eval statement by includes/bbcode.php for bbcode.tpl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431017/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431017/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via crafted Font Colour 3 ($theme[fontcolor3] variable) and/or signature values, possibly involving the highlight functionality.  NOTE: the original report does not clarify whether this issue is static code injection, eval injection, or another type of vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101667DF-0B3E-49A1-A0C9-BDBEEC9F89CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20197",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1066",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431015/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431387/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431015/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431387/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for \"Script Not Found\" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a \"Script Not Found\" error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talentsoft:web\\+_shop:5.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA15C269-0CE2-4F0F-8653-F4D2D6DAA137"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19662",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24621",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430880/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430880/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name.  NOTE: the \"Access to hash password\" issue is already covered by CVE-2006-0103."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ralph_capper:tinyphpforum:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA0A46C-B2D0-4A80-A895-10EC307E8874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in dev Neuron Blog 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) website parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev:neuron_blog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08ADB12A-B76A-4E1E-8C4B-2CEAD96A8D30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431131/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431131/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of \"dozens of possible snippets.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w3c:amaya:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6C2F61-1CD9-4FD8-81B1-1F096D4AA249"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://morph3us.org/advisories/20060412-amaya-94-2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://morph3us.org/advisories/20060412-amaya-94.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19670",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24623",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24624",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430877/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430879/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morph3us.org/advisories/20060412-amaya-94-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://morph3us.org/advisories/20060412-amaya-94.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430877/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/430879/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Camino 1.0 and earlier allow remote attackers to cause a denial of service (null dereference and application crash or hang) via HTML with certain improperly nested elements.  NOTE: this might be the same issue as CVE-2006-1724."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671092C9-F79B-4C01-B8F8-730435FE6ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB241D47-606C-4F1A-99F0-D80EC7D275DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726AB50A-62BA-4A0D-BC4D-E158E3E287E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DE9471-29E5-479B-9E58-2ADAF6C7CC64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676DDE7E-37EC-42D6-AA9F-A8AD6D5A13C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05DE747-2D7D-4B97-B068-3098F47C1745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70065D0-4FB1-40AF-AEC4-8333A79E9F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73793808-E359-49D4-A39B-2E1469A64797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "E705BDE3-C38F-4F54-89EA-90775FF7FDB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F432CC-CB34-454E-ACA5-932737141DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCEADBD-3D86-466B-AD9C-B5D1BEFD0786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DB2F11-1691-42C3-B792-F34F53FFB457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C05BFA-D947-47B7-8EA2-5C0F171F0A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:0.9:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "6759360C-6872-4B59-9C21-72CDD5C098DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D36959E8-B699-4376-80C3-116FDA82584A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:1.0:apha1:*:*:*:*:*:*",
            "matchCriteriaId" : "76996B11-D260-4CFE-8A14-1C55DDB18700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:1.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B91B4F-65A9-4A8B-B7DD-58AF59DC09E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:1.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7628F02-0546-4A16-8C73-0CE84C5DA658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:camino:1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD5FC17-3F95-4747-93A2-A78DC691F5F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431004/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431004/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQ_EXPR and NE_EXPR, which might introduce buffer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.NOTE: the vendor states that the essence of the issue is \"not correctly interpreting an offset to a pointer as a signed value.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gcc:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2441A8-8FEE-4F96-BB88-3965C747A78B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gcc.gnu.org/ml/gcc-bugs/2006-04/msg01297.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gcc.gnu.org/ml/gcc-bugs/2006-04/msg01298.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gcc.gnu.org/viewcvs/branches/gcc-4_1-branch/gcc/fold-const.c?r1=110549&r2=112698&pathrev=112698&diff_format=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431184/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431245/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431297/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431319/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gcc.gnu.org/ml/gcc-bugs/2006-04/msg01297.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gcc.gnu.org/ml/gcc-bugs/2006-04/msg01298.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gcc.gnu.org/viewcvs/branches/gcc-4_1-branch/gcc/fold-const.c?r1=110549&r2=112698&pathrev=112698&diff_format=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431184/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431245/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431297/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML (1) via the referer parameter in sendMail, and via attributes of (2) the A element and certain other HTML elements in web pages edited with the editInBrowser module.  NOTE: the msgReader$1 mode attack vector is already covered by CVE-2006-1769."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:userland:manila:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12DE847-D7AC-47AF-B9A6-235CB131EFAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/431058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in AnimeGenesis Gallery allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:animegenesis:gallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99469283-136D-4247-A0D4-533E3163E7FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/431135/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431135/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5DCF4D-41B4-45D3-8F7C-6985A8B15888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DE52C9-2381-483F-956D-C83503EBA664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:0.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61348912-55CB-4789-A1ED-9CA7BF77ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234EF75C-C5AA-4FAA-85C7-77EFBB35AF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB02215-E511-4974-8AE3-834CAE630D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367A04A4-10DE-4CDA-BF81-349C65213169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC260B04-C616-4A6A-9773-D535EA8A45AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DEB448-0F57-40FD-889E-6C8AC6920C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE750368-54FD-4CCD-AFF7-B26B3A4BA539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58476B06-9E48-4649-8761-B32FE01BA7C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CE8EF1-0578-4E12-A87D-832978ED484D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DF434D-3BE2-4BCF-A6FC-397475830FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA95FC2-2082-4367-AD3D-0F876972E5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EA1B5-7717-4CBD-9D21-249A5A497D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A33FCB-47FE-4F2E-9043-1F13805F0F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A9A53-860B-41CF-8BFD-4792775765E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5246E535-1B8F-4BC1-AD1D-9BFA7BF28D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_beta12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C247EF56-6E67-41DA-8C49-C9310C42B8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9790E7B0-E2D3-4DA5-915A-D236446E1B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E5CCDF-3472-4994-A47A-5A94D10F1C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFC4559-D7E3-4C75-8B79-85A79067E261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3544B231-8C98-42D1-A2B2-E62109BDD796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C69FEB8-DFE6-4241-9341-D8A4929F0FF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99D8D224-15C4-4D15-9A04-4A1F3E1F63B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F469DA5D-6020-4490-B671-2CEFB151C736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283D1C9D-00E5-456E-8E82-52963B9A07F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D5CAA8-B9CF-4036-9BB1-B6096A0B7A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65FB6DA-EDA1-4727-9896-6A27FAB555BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45DC5988-4C25-49CA-BB7C-5933EDD8F460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7B24F7-BDE5-4EE7-8141-70777B7BAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:1_rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65ABAD66-13A3-495C-920E-5E39D1EBDB2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open-security.org/advisories/16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=15429845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_05.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431251/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17579",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://open-security.org/advisories/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/message.php?msg_id=15429845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431251/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jjgan852:phplister:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A485717-4183-4259-A296-7FE3F14B8DF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisory.patriotichackers.com/index.php?itemid=3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431308/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisory.patriotichackers.com/index.php?itemid=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431308/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the event_id parameter to (1) addevent.php or (2) del.php or (3) event_desc parameter to addevent.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:myevent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "2CDA0BC9-A176-47DE-83D6-5FE1E36C982A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the event_desc parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:myevent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "2CDA0BC9-A176-47DE-83D6-5FE1E36C982A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot dot slash) in the file parameter, which causes a regular expression to collapse the sequences into standard \"../\" sequences."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3BB681-16F8-441F-912C-9488791A6420"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-04-14/copperminephotogallery144-plugininclusionsystemindexphp-remotefileinclusion-attack.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431118/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-04-14/copperminephotogallery144-plugininclusionsystemindexphp-remotefileinclusion-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431118/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "config.php in S9Y Serendipity 1.0 beta 2 allows remote attackers to inject arbitrary PHP code by editing values that are stored in config.php and later executed.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF5283A-C29F-47FC-BC9B-6F521A2A12C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0282.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17566",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0282.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MyBB (MyBulletinBoard) 1.1 allows remote attackers to inject arbitrary web script or HTML via the attachment content disposition in an HTML attachment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=8232",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19668",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=8232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMyBB, MyBB, 1.1.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php, which allows remote attackers to initialize arbitrary variables that are processed by an @extract command, which could then be leveraged to conduct cross-site scripting (XSS) or SQL injection attacks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=8232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-04-14/mybb110globalphpparameterextracting.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19668",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431061/30/5580/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=8232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myimei.com/security/2006-04-14/mybb110globalphpparameterextracting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431061/30/5580/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to MyBB 1.1.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jax_scripts:jax_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.50",
            "matchCriteriaId" : "203F6E35-BDF1-4546-9B3C-5E92F016AF71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kiki91.altervista.org/exploit/jax.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kiki91.altervista.org/exploit/jax.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DbbS 2.0-alpha and earlier allows remote attackers to obtain sensitive information via an invalid (1) fcategoryid parameter to topics.php or (2) unavariabile, (3) GLOBALS, or (4) _SERVER[] parameters to script.php.  NOTE: this information leak might be resultant from a global variable overwrite issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dbbs:dbbs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0-alpha",
            "matchCriteriaId" : "2E3D02C8-C108-4E25-B8BF-D89E38EC39B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topics.php in DbbS 2.0-alpha and earlier allows remote attackers to execute arbitrary SQL commands via the fcategoryid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dbbs:dbbs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0-alpha",
            "matchCriteriaId" : "2E3D02C8-C108-4E25-B8BF-D89E38EC39B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431117",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ulocation or (2) uhobbies parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dbbs:dbbs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0-alpha",
            "matchCriteriaId" : "2E3D02C8-C108-4E25-B8BF-D89E38EC39B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dbbs:dbbs:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF38595C-A8DD-4AA0-BD4D-DB5D3B94C786"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431117",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbitrary SQL commands via the userID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackorpheus:clanmemberskript:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EEB8B57-7459-47EE-9EFC-24A3D55EB0A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/Blackorpheus_poc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17558",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/Blackorpheus_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to (1) index.php or (2) forum.php, or the (3) reporeid_print parameter to print.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C91682-C8D9-47B1-A203-36B3334C2F66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_voecking:internet_photoshow:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188D38F7-E527-4936-BC5B-6A429004AA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19726",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute arbitrary SQL commands via the order parameter in the include files (1) user.inc.php, (2) customer.inc.php, and (3) project.inc.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmtool:pmtool:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F6500F-C22D-4A19-8F66-09E3AD6CA031"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_net_tools:php_net_tools:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "247F1372-39C0-47F5-B6BA-31A592DACCFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19694",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000839.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000839.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sweetphp:totalcalendar:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99BD2DC-FA27-4317-8AB2-116777005CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sweetphp:totalcalendar:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A48885-528A-4631-B3D9-719F0313336D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sweetphp:totalcalendar:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE1CAC8-F474-49B9-B577-EAB3D8461E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/totalcalendar-remote-code-execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19730",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sweetphp.com/files/downloads/patches/TotalCalendar/Security_Patch.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/totalcalendar-remote-code-execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sweetphp.com/files/downloads/patches/TotalCalendar/Security_Patch.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) RSS/RSS.php and (2) possibly other vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F46907-9618-4F1C-8C68-E33EBC8E32B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16B7211-B340-4E4E-A016-74F7596A7B2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000709.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19719",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000709.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in functions/db_api.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F46907-9618-4F1C-8C68-E33EBC8E32B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linpha:linpha:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16B7211-B340-4E4E-A016-74F7596A7B2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000709.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19719",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000709.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in CuteNews 1.4.1 allows remote attackers to read or modify files via the source parameter in the (1) editnews or (2) doeditnews action.  NOTE: this can also produce resultant XSS when the target file does not exist."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED757216-0908-4BB5-B770-A03A47993DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431340/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431528/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431340/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431528/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the pagenum parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thwboard:thwboard:2.8_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5F0D7A-D830-47EA-80FF-4E0AB8D69598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thwboard:thwboard:2.81_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2D98EA-971A-4D5A-9695-560CD56EEA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thwboard:thwboard:2.82_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89DBB93-A766-4F79-85AE-A284CC2A5123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thwboard:thwboard:2.83_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CE5FB5-D044-4512-81AD-E8C007CB0072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thwboard:thwboard:2.84_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C07FD1-2CF9-4D8D-B13C-F71EEBA806E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/431354/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436813/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436919/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431354/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436813/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436919/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service (Line card crash) via certain MPLS packets, as identified by Cisco bug ID CSCsc77475."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778F5573-0741-442F-AFFA-937053F8280C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF0D7F5-7A9C-4E58-A9DB-33BF13CE135D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D69F8FA-D58A-4F53-86D8-A20C73E9B299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46BE68F-FFA9-4DF0-B407-1F5576047B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88B45F0-B1D1-4680-A29E-2C8A167573D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.3:*:crs-1:*:*:*:*:*",
            "matchCriteriaId" : "FBBD93B6-100E-481D-AE0A-FE65971A2280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.3:*:prp:*:*:*:*:*",
            "matchCriteriaId" : "E20FBF42-CC47-40E8-94A4-F6323886151C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265062D1-20BB-4B51-9407-AAA8F83A4D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDF9D75-6713-427F-A65F-1D59911A410B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Only systems that are running Cisco IOS XR and configured for MPLS are affected by this vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or \"MPLS packet handling problems\") via certain MPLS packets, as identified by Cisco bug IDs (1) CSCsd15970 and (2) CSCsd55531."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778F5573-0741-442F-AFFA-937053F8280C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF0D7F5-7A9C-4E58-A9DB-33BF13CE135D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D69F8FA-D58A-4F53-86D8-A20C73E9B299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46BE68F-FFA9-4DF0-B407-1F5576047B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88B45F0-B1D1-4680-A29E-2C8A167573D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.3:*:crs-1:*:*:*:*:*",
            "matchCriteriaId" : "FBBD93B6-100E-481D-AE0A-FE65971A2280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.3:*:prp:*:*:*:*:*",
            "matchCriteriaId" : "E20FBF42-CC47-40E8-94A4-F6323886151C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265062D1-20BB-4B51-9407-AAA8F83A4D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:3.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDF9D75-6713-427F-A65F-1D59911A410B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060419-xr.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/common.php in I-Rater Platinum allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-rater:i-rater_platinum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D46662F-4415-4448-BB35-7734005A9451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/i-rater-platinum-remote-file-inclusion.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19684",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/i-rater-platinum-remote-file-inclusion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) huserid, (2) pituus, or (3) date parameters. NOTE: this issue has been disputed by the vendor, saying \"those parameters mentioned ARE checked (preg_match) before they are used in SQL-query...  If someone decided to add SQL-injection stuff to certain parameter, they would see an error text, but only because _nothing_ was passed inside that parameter (to MySQL-database).\"  As allowed by the vendor, CVE investigated this report on 20060525 and found that the demo site demonstrated a non-sensitive SQL error when given standard SQL injection manipulations"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoito:green_minute:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3474B1-BDB0-49A5-B00F-1ABF66CA7587"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hoito.org/en/products/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/25/25207-dispute.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/green-minute-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hoito.org/en/products/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/ref/25/25207-dispute.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/green-minute-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1931",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-20T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EE9BA9-DE82-4461-8D05-8B4DA2BAFE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA0B06-65B5-43F5-949A-82E7D92DD90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A236FC9B-F3CF-43A7-BB19-4255A2CC33D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FF7BFC-8107-44F6-946A-D358152E53D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609CC668-6AE0-4047-BDE4-1A6CFD17901B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A035112-8F5B-455D-9085-993C9B66627C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C1DE25-8BD7-4729-800D-0B5D712838A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9313467-150B-4231-80E5-35EFD6B64978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4185F-1CE1-48D1-B967-01A96527417B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551CCA30-00E2-46CF-A05B-FA8F9827CDF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16904",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19772",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19804",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21657",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015978",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1157",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/24972",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0427.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17645",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/273-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/16904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/273-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a crafted Clock Synchronisation packet that triggers an access violation."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neon_software:neon_responder:5.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "C7B89CFC-D69C-4F29-9BFE-C2C9B10B7FF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431157/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431157/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an IMG element containing a SRC attribute with a non-image file:// URL, then tricking the user into selecting View Image for the broken image, as demonstrated using a .wma file to launch Windows Media Player, or by referencing an \"alternate web page.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F05337-F4CB-4829-A086-1164CAC34BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842CBD30-B4BA-4FCF-9152-9DBEBE59857C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:8.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4877D2D7-139E-4582-B023-53E1E1E1D124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D673003C-0491-4C94-8907-5E36BB5EB9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19698",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19988",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20063",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gavinsharp.com/tmp/ImageVuln.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-39.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-view-image.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433138/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433539/30/5070/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=334341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gavinsharp.com/tmp/ImageVuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-39.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.networksecurity.fi/advisories/netscape-view-image.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433138/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433539/30/5070/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=334341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter in addlink_lwp.cgi and the (2) id, (3) forgotid, and (4) forgotpass parameters in edit.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarter_scripts:intellilink_pro:5.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66928FC-43B7-48A8-822B-566BA07CAFA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/intellilink-pro-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19701",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17605",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/intellilink-pro-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the list_id parameter in mailadmin.cgi and (2) the form_id parameter in templates.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sibsoft:communimail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "8EC665CD-4BFE-496A-A6D3-D17666F114B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/communimail-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19667",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17602",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/communimail-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter.  NOTE: this might be the same core issue as CVE-2005-2732."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5_1.857",
            "matchCriteriaId" : "EAE4E972-EFD0-4226-8917-8C71CCC551AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C5DFFC3-A628-4569-9AB7-3C60C3F5DDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1B44AB-45F0-4E0A-8529-610C6B8934BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312C3DA6-D34A-4566-923E-F2ECD613EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24439BBC-DEDA-4309-B8B5-78289476052B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25550AA8-8C79-48EA-A904-896B5B00077B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37231F4-DEC9-46A7-8686-9B3C710CA396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/awstats-65-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/awstats-65-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the keyval parameter in pbpgst.cgi, (2) the catsubno parameter in pblscg.cgi, and (3) the listno parameter in pblsmb.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visale:visale:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5BA3325B-E52F-4DD9-A834-89CD3A63CBE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/visale-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24716",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24717",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24718",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17598",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/visale-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) pagesize, (2) maxrec, and (3) startpos parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicplex:plexum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "x5",
            "matchCriteriaId" : "4A067679-AA79-4012-993C-D2829E45FD80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/plexum-x5-sql-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19720",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17617",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/plexum-x5-sql-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Add Sender to Address Book\" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted remote attackers to trick a user into sending e-mail to an unauthorized recipient."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E234AD1-7202-421E-82C8-880E84876021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21232945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21232945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicplex:plexcart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "x3",
            "matchCriteriaId" : "9E36A65A-9732-42E2-B7F5-1FF8E8B6DBCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/plexcart-x3-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/plexcart-x3-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-20T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) aff and (2) cat parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlcoders_group:bannerfarm:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE20B438-8721-4034-A63B-D51173B22C65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/bannerfarm-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17613",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/bannerfarm-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfec.de:rechnungszentrale:v2_1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DF8010-7E61-4CC8-8C5F-789047366C8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-0.org/code/rz2-adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/24752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17588",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-0.org/code/rz2-adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/24752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nfec.de:rechnungszentrale:v2_1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DF8010-7E61-4CC8-8C5F-789047366C8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.g-0.org/code/rz2-adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/24753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17589",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.g-0.org/code/rz2-adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/24753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.3h:h:*:*:*:*:*:*",
            "matchCriteriaId" : "F009FC3C-4830-4D35-8D4A-4C84DBE8AF78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://irannetjob.com/content/view/209/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-313.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431317/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/209/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-313.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431317/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibly web-server outage) via multiple requests with different values of the feed parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo-foundation:mambo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43DB427-675D-4581-83E3-0BED7159F89A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0380.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://irannetjob.com/content/view/209/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-313.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431317/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0380.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://irannetjob.com/content/view/209/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-313.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431317/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wired_community_software:wwwthreads:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773253B4-17E1-435E-9744-076AF5CCF031"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431400/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431400/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actualscripts:actualanalyzer:*:*:server:*:*:*:*:*",
            "versionEndIncluding" : "8.23",
            "matchCriteriaId" : "B0B388E5-7602-47CD-94EB-3A01E8A79877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actualscripts:actualanalyzer:2.72:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "417E9D6A-AA8F-43A0-B735-2E2CCCB817FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actualscripts:actualanalyzer:7.63:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "89B88BAD-8877-4BFB-95EB-DA4EFFF01816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431351/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434562/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431351/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434562/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E89560E-5A06-44F5-82AB-AEB9AD7B97DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBF2B953-773A-4E47-9EEA-4826354650EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54C89F2-D5F5-412D-85C6-1CD76E03BE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "2AA97244-E7A9-49A2-9414-E5860AF3611D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E013901C-1B1E-4839-867B-D647A996BF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:express:*:*:*:*:*",
            "matchCriteriaId" : "055B35BB-602A-4C26-A0D4-6614D1B09A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B228B395-6964-449D-9B09-D7BFE31E9851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:express:*:*:*:*:*",
            "matchCriteriaId" : "D5344233-E08D-4066-86CD-D9D9B84B039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B36A82-33BE-4BA4-9B4A-36D685607A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:express:*:*:*:*:*",
            "matchCriteriaId" : "337C5C2C-2A2C-4C94-9DBF-2BB795BEEF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D72DCA-130D-4507-BDAC-A6183D08BC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:express:*:*:*:*:*",
            "matchCriteriaId" : "6AAF32A3-4D70-4E1A-9FBE-A465F3910B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C22C0D-2E74-44B8-BAF1-FACBE7B7A497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.6:*:express:*:*:*:*:*",
            "matchCriteriaId" : "5BD43E20-9E43-46FB-952A-EE181D87F116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB965A0-7FB2-4DF7-82C8-D0AB4E8AE4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.7:*:express:*:*:*:*:*",
            "matchCriteriaId" : "0A5BDD7D-7321-4061-9E43-3DB613768945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C66F51-37FC-4CEF-A532-17522EE32BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.8:*:express:*:*:*:*:*",
            "matchCriteriaId" : "F6EA38AC-8E50-45FF-8F17-C679E165269D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F560405-DD99-4D09-9D9B-19F88A63C689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.9:*:express:*:*:*:*:*",
            "matchCriteriaId" : "27C389A3-27DC-4EAB-A08C-60BF1774351B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBAC34E-4572-48D2-B7B5-5AB623A35A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.10:*:express:*:*:*:*:*",
            "matchCriteriaId" : "35CFCBC7-68A8-407D-9983-FBA414318880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA72C62-7004-4A5C-BEA5-5ACA55279366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.11:*:express:*:*:*:*:*",
            "matchCriteriaId" : "0C6865FB-479A-41F0-89ED-BF02E80D9FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADEEA82-4371-4D25-8CEB-F6F8B32ED9F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.12:*:express:*:*:*:*:*",
            "matchCriteriaId" : "BF202456-0666-4DBB-8918-B30B83850201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9515C2-5549-4EBC-8FF1-8C75E92794D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.13:*:express:*:*:*:*:*",
            "matchCriteriaId" : "3D994D17-087E-450B-A5DE-F56949717C6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19736",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015965",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.assurance.com.au/advisories/200604-cisco.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431367/30/5490/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431371/30/5490/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.assurance.com.au/advisories/200604-cisco.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431367/30/5490/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431371/30/5490/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the \"show\" command in the application's command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE).  NOTE: other issues might be addressed by the Cisco advisory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:user_registration_tool:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441C9430-C57D-48F5-8C6F-B64759ED5777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E89560E-5A06-44F5-82AB-AEB9AD7B97DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBF2B953-773A-4E47-9EEA-4826354650EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D54C89F2-D5F5-412D-85C6-1CD76E03BE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "2AA97244-E7A9-49A2-9414-E5860AF3611D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E013901C-1B1E-4839-867B-D647A996BF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:express:*:*:*:*:*",
            "matchCriteriaId" : "055B35BB-602A-4C26-A0D4-6614D1B09A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B228B395-6964-449D-9B09-D7BFE31E9851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:express:*:*:*:*:*",
            "matchCriteriaId" : "D5344233-E08D-4066-86CD-D9D9B84B039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B36A82-33BE-4BA4-9B4A-36D685607A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:express:*:*:*:*:*",
            "matchCriteriaId" : "337C5C2C-2A2C-4C94-9DBF-2BB795BEEF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D72DCA-130D-4507-BDAC-A6183D08BC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:express:*:*:*:*:*",
            "matchCriteriaId" : "6AAF32A3-4D70-4E1A-9FBE-A465F3910B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C22C0D-2E74-44B8-BAF1-FACBE7B7A497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.6:*:express:*:*:*:*:*",
            "matchCriteriaId" : "5BD43E20-9E43-46FB-952A-EE181D87F116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB965A0-7FB2-4DF7-82C8-D0AB4E8AE4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.7:*:express:*:*:*:*:*",
            "matchCriteriaId" : "0A5BDD7D-7321-4061-9E43-3DB613768945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C66F51-37FC-4CEF-A532-17522EE32BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.8:*:express:*:*:*:*:*",
            "matchCriteriaId" : "F6EA38AC-8E50-45FF-8F17-C679E165269D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F560405-DD99-4D09-9D9B-19F88A63C689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.9:*:express:*:*:*:*:*",
            "matchCriteriaId" : "27C389A3-27DC-4EAB-A08C-60BF1774351B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBBAC34E-4572-48D2-B7B5-5AB623A35A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.10:*:express:*:*:*:*:*",
            "matchCriteriaId" : "35CFCBC7-68A8-407D-9983-FBA414318880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA72C62-7004-4A5C-BEA5-5ACA55279366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.11:*:express:*:*:*:*:*",
            "matchCriteriaId" : "0C6865FB-479A-41F0-89ED-BF02E80D9FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADEEA82-4371-4D25-8CEB-F6F8B32ED9F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.12:*:express:*:*:*:*:*",
            "matchCriteriaId" : "BF202456-0666-4DBB-8918-B30B83850201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9515C2-5549-4EBC-8FF1-8C75E92794D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.13:*:express:*:*:*:*:*",
            "matchCriteriaId" : "3D994D17-087E-450B-A5DE-F56949717C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ciscoworks_2000_service_management_solution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CAB6F5-563C-4E8A-B769-45B1981BADF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:hosting_solution_engine:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9405E712-6682-4DCE-AA18-311A2D6AA958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:hosting_solution_engine:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA1DA2E-FD49-46B1-96E0-1129B16A8DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:hosting_solution_engine:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D44C3E02-A17C-48A2-8173-358570C2ACAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:hosting_solution_engine:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA04953-EBE5-482D-83F9-30F10F739C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:hosting_solution_engine:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE85A5A-2CF3-49FB-A15C-49EA56338FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ethernet_subscriber_solution_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6290FDDC-8965-4045-900E-933D85511F67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19736",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015965",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.assurance.com.au/advisories/200604-cisco.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431367/30/5490/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431371/30/5490/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.assurance.com.au/advisories/200604-cisco.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431367/30/5490/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431371/30/5490/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB20FD0E-63AD-4189-9C6F-33C958B563CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3E6024-F524-46BB-9D4C-C0654AD191C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.1.7r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5637DFA-7225-4A56-AD05-B06FEFA2F837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D94BF05-C203-4D50-A9BC-75603814F88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA645BB-5352-43EA-AC9E-91F347926C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E27B8DD-0918-4031-A462-0D9775F5228C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277CAA73-B3B6-42A5-A97F-B597966440D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D032ED2E-51BB-40C0-AC95-6854BC92E0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD3B7A3-E806-4241-A72E-594922B90383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722623EF-72CC-43EF-838F-4E4085AABBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF8F71B-1DAF-4F3F-AAAB-86CDA0D7C888"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pcpin_504_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19708",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431390/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436029/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17632",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1441",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/pcpin_504_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431390/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436029/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a \"..\" (dot dot) in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB20FD0E-63AD-4189-9C6F-33C958B563CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3E6024-F524-46BB-9D4C-C0654AD191C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.1.7r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5637DFA-7225-4A56-AD05-B06FEFA2F837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D94BF05-C203-4D50-A9BC-75603814F88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA645BB-5352-43EA-AC9E-91F347926C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E27B8DD-0918-4031-A462-0D9775F5228C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "277CAA73-B3B6-42A5-A97F-B597966440D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D032ED2E-51BB-40C0-AC95-6854BC92E0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD3B7A3-E806-4241-A72E-594922B90383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722623EF-72CC-43EF-838F-4E4085AABBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pcpin:pcpin_chat:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF8F71B-1DAF-4F3F-AAAB-86CDA0D7C888"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pcpin_504_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19708",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431390/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436029/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17632",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/pcpin_504_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431390/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436029/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspsitem:aspsitem:1.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38751E3-7A64-4AB5-BFF7-9D84D5254B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19693",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431469/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17616",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431469/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aasi_media:net_clubs_pro:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD09C0F3-5042-40A6-A52E-268C1E115E2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial of service via a \"small synflood\" to the SMTP port (TCP port 25), as demonstrated by a 10-microsecond wait between sending packets.  NOTE: this issue has been disputed in followup posts that suggest that a protection feature is triggering a RST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fortinet:fortinet28:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A171BC-8DB3-4A1D-A117-2A89DEE37013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0449.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0472.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431404/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0449.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0472.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kcscripts:kcscripts_calendar:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3464634A-8590-449B-8E98-37593BD35B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kcscripts:portal_pack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11CD8C4-6C12-4BB3-BB2D-706D201E8BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kcscripts:kcscripts_news_publisher:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9345B1-EB18-428C-939D-79BDA744A6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kcscripts:portal_pack:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11CD8C4-6C12-4BB3-BB2D-706D201E8BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engine or Site Search, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kcscripts:portal_pack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "E0FA22F5-DE12-4C31-BBAB-C1A15FB40E1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kcscripts:portal_pack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "E0FA22F5-DE12-4C31-BBAB-C1A15FB40E1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitrary web script or HTML via the action parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krankikom:contentboxx:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27A4E0-1FED-42DC-AA04-923B8F2570BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431386/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17612",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431386/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote attackers to inject arbitrary web script or HTML via the ordner parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wingnut:easygallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70106F8E-0E66-470C-A456-FE823E75AEC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisory.patriotichackers.com/index.php?itemid=5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431430/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisory.patriotichackers.com/index.php?itemid=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431430/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol (SIP) messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:rt31p2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5585B360-CCF5-410C-ACB0-6B9690068CE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/621566",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6GMMW4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/621566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6GMMW4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/16443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16443/exploit",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16443/exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestbook_newentry.php in PHP-Gastebuch 1.61 allows remote attackers to inject arbitrary web script or HTML via the Kommentar field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stadtaus.com:php-gastebuch:1.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD58D96B-0D4C-4444-A1E2-E8E4CE932FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/23/23962-gastebuch.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/23/23962-gastebuch.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in addRequest.php in Prayer Request Board (PRB) Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geekforgod.net:prayer_request_board:beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A060702-FFB5-42F7-9ED0-A02DF0BBCAED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/23/23958-prb.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://osvdb.org/ref/23/23958-prb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de guiones en sitios cruzados (XSS) en FlexBB 0.5.7 BETA y anteriores permite a atacantes remotos inyectar guiones web o HTML de su elección mediante los parámetros (1) name y (2) message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexbb:flexbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.7_beta",
            "matchCriteriaId" : "B0762175-E5A1-40A6-B291-694207590780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431071/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431071/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en inc/start.php en FlexBB 0.5.5 y anteriores permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro 'cookie' flexbb_username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexbb:flexbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.5",
            "matchCriteriaId" : "62C200A3-E39F-4786-B64F-2DBA888D88B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015949",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431156/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431156/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de guiones en sitios cruzados (XSS) en mwguest.php en Manic Web MWGuest 2.1.0 permite a atacantes remotos inyectar guiones web o HTML de su elección mediante el parámetro \"homepage\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manic_web:mwguest:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E417EA97-38CA-43D6-BB28-A53672FE1E7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/122/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431507/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17630",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/122/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431507/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de guiones en sitios cruzados en W2B Online Banking permite a atacantes remotos inyectar guiones web o HTML de su elección mediante (1) la cadena de consulta, (2) el parámetro SID, o (3) el parámetro ilang."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w2b:online_banking:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35775085-7B5F-4E5C-8730-65795A34D347"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19717",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17626",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong text field, which might reveal the password to others who can view the screen."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Java InputMethods en Mac OS X 10.4.5 puede causar que InputMethdos envíe eventos de entrada para   campos seguros a un campo de texto equivocado, lo que podría revelar la contraseña a otros que pudieran ver la pantalla.\r\nº"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images."
      }, {
        "lang" : "es",
        "value" : "Desbodamiento de búfer basado en el montón en la función LZWDecodeVector en Mac OS X anteriores a 10.4.6, como se usa en aplicaciones que utilizan 'ImageIO' o 'AppKit', permite a atacantes remotos ejecutar código de su elección mediante imágenes TIFF artesanales. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303411",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/31837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/sp-x24-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/31837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/sp-x24-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit.  NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/sp-x28-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-protocols.com/sp-x30-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/sp-x28-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-protocols.com/sp-x30-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the _cg_TIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKit, allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.5",
            "matchCriteriaId" : "47A51B07-2077-4821-BC72-759F9D53CC95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.5",
            "matchCriteriaId" : "336FA629-E1AA-49FD-947C-A82926444D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/sp-x29-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/sp-x29-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/sp-x25-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/sp-x25-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an error in KWQListIteratorImpl::KWQListIteratorImpl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security-protocols.com/poc/sp-x26-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/sp-x26-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security-protocols.com/poc/sp-x26-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/sp-x26-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no value.  NOTE: due to lack of diagnosis by the researcher, it is unclear which vector is responsible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security-protocols.com/poc/sp-x26-4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/sp-x26-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security-protocols.com/poc/sp-x26-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/sp-x26-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list item number), which triggers a null dereference in QPainter::drawText, probably due to a failed memory allocation that uses the VALUE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3889ED-9329-4C84-A173-2553BEAE3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06494FA8-F12A-435A-97A4-F38C58DF43F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security-protocols.com/poc/sp-x26-2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/sp-x26-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security-protocols.com/poc/sp-x26-2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-protocols.com/sp-x26-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-21T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beagle_project:beagle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.5",
            "matchCriteriaId" : "59E20E6C-89FC-4082-A8EC-C9B08C8E6A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.seifried.org/pipermail/security/2006-April/013163.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2006-002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19778",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19781",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24938",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17611",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189282",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26104",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.seifried.org/pipermail/security/2006-April/013163.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2006-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/24938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including \"....//\" sequences, which are collapsed into \"../\" sequences by filtering."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:tftp_server:5.0.55_standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DDD024-7D45-407F-AEBF-4835B00BD105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:tftp_server:5.0.60standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C952D4-020C-4D97-AB11-3EE99FDC116F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:tftp_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B81E06B-C2C5-435A-8801-2FAA7A9F6115"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via \"...\" (triple dot) sequences in a GET request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winagents:tftp_server:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "41692182-3DD3-4D01-AA1B-3487EFDCDDA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.winagents.com/en/news/410.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.winagents.com/en/news/410.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "According to the vendor, WinAgents TFTP server version 3.2 fixes this directory traversal vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1990",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function call, a different vulnerability than CVE-2002-1396."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función wordwrap en string.c en PHP 4.4.2 y 5.1.2 podría permitir a atacantes dependientes del contexto ejecutar código arbitrario a través de ciertos argumentos largos que provoca la asignación de un búfer pequeño, lo que desencadena un desbordamiento de búfer basado en memoria dinámica en una llamada a la función memcpy, una vulnerabilidad diferente a CVE-2002-1396."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19803",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20052",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20222",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21031",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21564",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21723",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200605-08.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015979",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:091",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_31_php.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0501.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0568.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1500",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200605-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_31_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0501.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0568.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1991",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument."
      }, {
        "lang" : "es",
        "value" : "La función substr_compare en string.c en PHP 5.1.2 permite a atacantes dependientes del contexto provocar una denegación de servicio (violación de acceso a memoria) a través de un argumento de desplazamiento fuera de los límites."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20052",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20269",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20676",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200605-08.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015979",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:091",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_31_php.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1500",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26003",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200605-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_31_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1512",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-04-25T00:06:00.000",
      "lastModified" : "2023-11-07T01:58:38.397",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-1712.  Reason: This candidate is a reservation duplicate of CVE-2006-1712.  Notes: All CVE users should reference CVE-2006-1712 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:5.0.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF68B64-10AA-49B6-944B-B89B13DD3F2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/118388",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431724/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431734/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.04.21.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/118388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431724/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.04.21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:5.0.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF68B64-10AA-49B6-944B-B89B13DD3F2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0011.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431725/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431734/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.04.21.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431725/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.04.21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:antivirus_scan_engine:5.0.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF68B64-10AA-49B6-944B-B89B13DD3F2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431728/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431734/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.04.21.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431728/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.04.21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1057",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70640B9F-4EAA-4513-80E4-9DD4A862F27D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0286.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17635",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188303",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/278-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-announce-list/2006-April/msg00160.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0286.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/278-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-announce-list/2006-April/msg00160.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188302\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 and 3.",
        "lastModified" : "2006-09-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences.  NOTE: the possibility of code execution was originally theorized, but Microsoft has stated that this issue is non-exploitable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0616.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045422.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19762",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016001",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431796/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1507",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0616.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045422.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431796/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1513",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in abc2ps before 1.3.3 allow user-assisted attackers to execute arbitrary code via crafted ABC music files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abc2ps:abc2ps:1.2.2e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7727B9-3F6C-4096-9779-9C0C931A7645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abc2ps:abc2ps:1.2.2e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D153D1D5-29CF-4CA2-B0E8-65C5D072C024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abc2ps:abc2ps:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E60ED35-95AC-49BA-910C-B400EFEB1795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abc2ps:abc2ps:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A56A3F1-E87F-4A05-B055-22019610BAFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19787",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19807",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1041",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17689",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1511",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26043",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1932",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F1374-B044-472F-ACE4-34FF26F36DCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1933",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (large or infinite loops) viarafted packets to the (1) UMA and (2) BER dissectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1934",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) ALCAP dissector, (2) Network Instruments file code, or (3) NetXray/Windows Sniffer file code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26014",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10445",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1935",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the COPS dissector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26013",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1936",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the telnet dissector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26029",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10341",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1937",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) multiple vectors in H.248, and the (2) X.509if, (3) SRVLOC, (4) H.245, (5) AIM, and (6) general packet dissectors; and (7) the statistics counter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26007",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26009",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26010",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26015",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26019",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26031",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10323",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1938",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via the (1) Sniffer capture or (2) SMB PIPE dissector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBD4993-950D-4AF7-980D-18164E2AA46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE62DEB3-8DF4-424C-AE9C-0573432692B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1890B0A-82D7-4445-A90B-971A084425BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E093F4-E2C3-438B-AB53-9A49200B816A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F39D2C-1B39-4A33-87BF-DCF26DBCFD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34C4BCB-5EFA-4CE5-A549-5923D93AEEA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6652AA3B-7450-4214-968C-FC8FDA090DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEC68D1-E523-4CEC-AD74-B4DA66BE1BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766567CB-C8A5-4CD3-8C14-7D59FE974498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3240376B-44CB-4BF3-9EA6-05841FE70AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E737F77-ABE6-4E3E-9156-4FAF841E8314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B5EB4E-D9D6-4324-BEB6-85C2845AC102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.17a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C25FB130-5D15-47EB-97B6-F368EFF958BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934E636C-5EC3-436C-990F-D9434776CEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508E58C5-E917-41F4-A4A0-C02ED4E0E240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26016",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26023",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9850",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1939",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) an invalid display filter, or the (2) GSM SMS, (3) ASN.1-based, (4) DCERPC NT, (5) PER, (6) RPC, (7) DCERPC, and (8) ASN.1 dissectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9_.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508E58C5-E917-41F4-A4A0-C02ED4E0E240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26021",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26022",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26030",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26032",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11030",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1940",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service (abort) via the SNDCP dissector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9781",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ethereal.com/appnotes/enpa-sa-00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1993",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller context object.  NOTE: this was originally claimed to be a buffer overflow in (1) js320.dll and (2) xpcom_core.dll, but the vendor disputes this claim."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19802",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20015",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20019",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20070",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/780",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1015981",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1053",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/866300",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-30.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securident.com/vuln/ff.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431878/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1614",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1922",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25994",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1790",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/866300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securident.com/vuln/ff.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431878/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dforum:dforum:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF7800C-0567-44A1-99C8-192FAD8D0281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045369.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=27",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17650",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045369.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via \"..\" sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scry_gallery:scry_gallery:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03965B36-DF12-406A-9EA2-4E9FEB7389C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000716.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/17649-directory-traversal.exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17649",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000716.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/17649-directory-traversal.exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scry_gallery:scry_gallery:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03965B36-DF12-406A-9EA2-4E9FEB7389C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000716.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000716.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:pylon_anywhere:5.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1FB7614-BC41-49B0-8A1F-9C5417260053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:pylon_anywhere:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "792F0A15-CCAD-42D7-9250-88868E8B5EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:pylon_anywhere:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5135DC58-E927-4367-A87E-F531A85FB96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:pylon_anywhere:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B738990A-1A1D-4FE2-AB55-69DC6A4B1941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:pylon_anywhere:6.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E01B9C-FF71-4828-A2BE-093A7656FEEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:pylon_anywhere:6.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A932944-2391-4633-BA59-59A60FC99C32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19784",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sybase.com/detail?id=1040213",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sybase.com/detail?id=1040213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via a large invalid error number, which triggers an error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499EFCAE-9309-4C26-A846-10396CBC628D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6908E44D-3553-430D-B870-266971DC0D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEBDEF33-48E4-42F4-A725-838DA9191334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422B0D3E-503C-4CA6-83B9-4FC58BA898C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46557BD6-66A0-4892-9468-687A4B63F5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A186C5E-ACAA-47C8-9FA0-133E9D7F2900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24094775-BAF9-4C2E-8C38-86916E22B5A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CF73FA-09F6-4CE5-932E-BA6B43D66F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E87583-5769-4114-94F7-043897DA0FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718E8C39-A59C-4576-B00D-31A8F0C1762C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327B826F-0F4E-420D-8C93-4551A4B9F190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE12C455-5CA0-4581-A3F3-CC8867CCEEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC5E23E-3A14-49B4-A676-AAA96F25D01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8520357A-27AF-4F48-9095-773F75AAC408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65EA852-3C46-47D6-8D6B-DC3546165CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4441B6D-1A48-4DD4-AAAB-FC3B5F00DE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985D96E7-0BAE-46DF-A1E2-BD4585C6CABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73062670-5CB9-4AB8-B45D-21E0D557FD49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876A0BCB-F792-4A21-85AB-5D7D63C3E987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/openttdx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431871/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/openttdx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431871/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876A0BCB-F792-4A21-85AB-5D7D63C3E987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/openttdx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431871/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/openttdx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431871/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logmethods:logmethods:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DF2AF6-05C0-4B58-96DC-345DB72708BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/logmethods-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19793",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/logmethods-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the p parameter.  NOTE: this is a different vulnerability than the directory traversal vector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scry_gallery:scry_gallery:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03965B36-DF12-406A-9EA2-4E9FEB7389C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000716.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431853/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000716.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431853/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir[base] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mygamingladder:mygamingladder:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBDEDE2-992C-4B62-BEE6-B1B979DF0780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19773",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=28",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431902/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17657",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431902/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cgi-bin/guest in Community Architect Guestbook allows remote attackers to inject arbitrary web script or HTML by signing the guestbook, which is displayed by fsguestbook.html.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:community_architect:community_architect_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2622DD95-2F7B-41F4-969F-11C82604B687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michael_romedahl:ri_blog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEBFCB7-5F09-462E-AE37-3E36951B3AE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/riblog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431868/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/riblog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431868/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an \"include\" statement that is injected into the eval statement.  NOTE: this issue has been described as file inclusion by some sources, but that is just one attack; the primary vulnerability is eval injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansys:clansys:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F87471A-70FA-47E5-927E-D2F6CE2C94D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015988",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431873/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431873/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers to write arbitrary files via a ..\\ (dot dot backslash) in a (1) .rar, (2) .tar, (3) .zip, (4) .jar, or (5) .gz archive.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivan_zahariev:izarc:3.5_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626867FC-BB72-4983-9D51-7CBD1EA53F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19791",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winny:winny:2.0b5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158D3E3C-CA4E-465F-9C00-902D4B363D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winny:winny:2.0b7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACCA0971-8E0E-41F3-967B-258746EDDCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2374294680/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19795",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060421.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/167033",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2374294680/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060421.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/167033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/24883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:built2go:movie_review:1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3541355D-EBE6-4182-8FFB-852AB50D543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:built2go:movie_review:2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9BDCDC-6A19-4662-BBE8-924BE038D91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:built2go:movie_review:2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167D077B-3523-4281-BD64-94F0D8506BA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19749",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyagenda:phpmyagenda:3.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55312CD-0E00-4398-AFAC-E583A4F1F03D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/phpMyAgenda_fi.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/29/2914x-phpmyagenda.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431862/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433995/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17670",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/phpMyAgenda_fi.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/ref/29/2914x-phpmyagenda.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431862/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433995/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in check_login.asp in Bloggage allow remote attackers to execute arbitrary SQL commands via the (1) acc_name and (2) password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paras_chopra:bloggage:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B6993-7316-420A-948D-0C0C9C366094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/bloggage.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19751",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431673/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/bloggage.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431673/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the user_name parameter in register.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB41A1A3-69D5-4175-BF6C-285C0C9990E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19745",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431599/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17625",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431599/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the version string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skulltag_team:skulltag:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.96f",
            "matchCriteriaId" : "29AC4FAF-D1BE-4227-9E89-013F14DABBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skulltag_team:skulltag:0.96d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE120A44-3949-4115-8B0B-02E002D00525"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/skulltagfs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19767",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431872/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/skulltagfs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431872/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in page.php in SL_site 1.0 allows remote attackers to execute arbitrary SQL commands via the id_page parameter. NOTE: this issue could be used to produce resultant XSS from an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-provence:sl_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D41B01-98E6-48DC-80E1-51104F394254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015972",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in gallerie.php in SL_site 1.0 allows remote attackers to list images in arbitrary directories via \"..\" sequences in the rep parameter, which is used to construct a directory name in admin/config.inc.php.  NOTE: this issue could be used to produce resultant XSS from an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-provence:sl_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D41B01-98E6-48DC-80E1-51104F394254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015972",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject arbitrary web script or HTML via the recherche parameter in recherche.php.  NOTE: other XSS vectors, as reported in the original disclosure, are resultant from other primary vulnerabilities that have separate CVE names."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-provence:sl_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D41B01-98E6-48DC-80E1-51104F394254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015972",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dn parameter in (a) compare_form.php, (b) copy_form.php, (c) rename_form.php, (d) template_engine.php, and (e) delete_form.php; (2) scope parameter in (f) search.php; and (3) Container DN, (4) Machine Name, and (5) UID Number fields in (g) template_engine.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpldapadmin_project:phpldapadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.8",
            "matchCriteriaId" : "6538805C-3311-4077-8D90-DAAB07F7CEB8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/phpldapadmin-multiple-vuln.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19747",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20124",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1057",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24788",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24789",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24790",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24792",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24793",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24794",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1450",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25958",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25959",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/phpldapadmin-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/24794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dnsmasq 2.29 allows remote attackers to cause a denial of service (application crash) via a DHCP client broadcast reply request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnsmasq:dnsmasq:2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5162BCCD-E946-4BF9-A136-73DC7142A743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19760",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17662",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nversion 2.30"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T12:50:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter.  NOTE: the affected version has been disputed by the vendor.  It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CAB0A-2A0A-47EF-A328-C341CCC1BA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFED411-1291-4E03-A160-CC9F1AD03D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_can4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9FE483-4367-47E7-9D09-043955998C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC85ED9-7491-43D3-B34D-1CB07836888F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36356B31-5EC5-4689-92CD-883088587936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/431901",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431951/30/5370/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431951/30/5370/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability has been disputed by the vendor.  The affected version has been disputed by the vendor via e-mail to CVE.  It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9315ADD-5B97-4639-9B59-806EFD7BC247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB047B-D45E-4695-AAEB-D0830DB1663E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045472.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19763",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015982",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431874/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431944/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045472.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431874/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431944/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asteriskathome:asteriskathome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "3D758652-AACD-40A3-A46C-AB9C995052E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19744",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24805",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431655/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nLittlejohn Consulting, Asterisk Recording Interface, 0.10.00 and higher"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface (ARI) web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter.  NOTE: this issue can also be used to determine existence of files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asteriskathome:asteriskathome:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "3D758652-AACD-40A3-A46C-AB9C995052E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19744",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431655/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nAsterisk@Home, Asterisk@Home, 2.8\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote attackers to execute arbitrary code via a long URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ls3:fenice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10",
            "matchCriteriaId" : "6C3E8B18-4529-4BF1-A53C-05ABE113AF6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/fenicex-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19770",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432002/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436256/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17678",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/fenicex-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432002/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436256/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the RTSP_msg_len function in rtsp/RTSP_msg_len.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a large HTTP Content-Length value, which leads to an invalid memory access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ls3:fenice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10",
            "matchCriteriaId" : "6C3E8B18-4529-4BF1-A53C-05ABE113AF6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/fenicex-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19770",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436256/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17678",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/fenicex-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436256/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1863",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-25T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via \"..\\\\\" sequences, a similar vulnerability to CVE-2006-1864."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.17",
            "matchCriteriaId" : "A1F146DA-2787-4409-BE72-092CD275F3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHBA-2007-0304.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19868",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=296034f7de8bdf111984ce1630ac598a9c94a253",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.11",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25068",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1542",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189434",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10383",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHBA-2007-0304.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=296034f7de8bdf111984ce1630ac598a9c94a253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain \"codec cleanup methods\" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.0",
            "matchCriteriaId" : "8D44E5F5-3351-47E6-81D5-859DA1A90E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261FAE51-5207-4136-9FFE-2330A281266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32C83B9-F7DA-450A-A687-9A73734CD712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9485283A-B73E-4567-914A-42A86F5FFCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95892168-0FB6-4E3F-9303-2F9B3CF60D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5021564-5E0A-4DDC-BC68-200B6050043E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C50750-FE1D-42BA-9125-7D8E872AA2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEBA7B-81D5-4148-912B-9AD448BBE741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448555FE-8E91-4EA7-BA05-6915F5508319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0425.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/277-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0425.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/277-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nlibTIFF, libTIFF, 3.8.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.0",
            "matchCriteriaId" : "8D44E5F5-3351-47E6-81D5-859DA1A90E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261FAE51-5207-4136-9FFE-2330A281266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32C83B9-F7DA-450A-A687-9A73734CD712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9485283A-B73E-4567-914A-42A86F5FFCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95892168-0FB6-4E3F-9303-2F9B3CF60D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5021564-5E0A-4DDC-BC68-200B6050043E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C50750-FE1D-42BA-9125-7D8E872AA2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEBA7B-81D5-4148-912B-9AD448BBE741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448555FE-8E91-4EA7-BA05-6915F5508319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0425.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/277-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0425.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/277-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nlibTIFF, libTIFF, 3.8.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-25T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to \"setfield/getfield methods in cleanup functions.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.0",
            "matchCriteriaId" : "8D44E5F5-3351-47E6-81D5-859DA1A90E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261FAE51-5207-4136-9FFE-2330A281266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32C83B9-F7DA-450A-A687-9A73734CD712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9485283A-B73E-4567-914A-42A86F5FFCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95892168-0FB6-4E3F-9303-2F9B3CF60D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5021564-5E0A-4DDC-BC68-200B6050043E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C50750-FE1D-42BA-9125-7D8E872AA2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEBA7B-81D5-4148-912B-9AD448BBE741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448555FE-8E91-4EA7-BA05-6915F5508319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19838",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19936",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19949",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20021",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20345",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20667",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0425.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/277-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_04_28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0425.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/277-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nlibTIFF, libTIFF, 3.8.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0048",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length.  NOTE: this issue might be a buffer overflow or overread."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francesco_stablum:tcpick:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAFDED0-644C-4158-8966-55ED6A0CD79D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=9989610&forum_id=37151",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17665",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1466",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26090",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=9989610&forum_id=37151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when an admin selects the Logging section in the FTP server main window.  NOTE: the original researcher claims that the vendor disputes this issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablo_software_solutions:quick_n_easy_ftp_server:3.0:*:lite:*:*:*:*:*",
            "matchCriteriaId" : "1FBAE0C8-BCDB-456D-9EFE-BEA63D1BE028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablo_software_solutions:quick_n_easy_ftp_server:3.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "0E51A6C1-B842-4566-AEDF-634EC2976F20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431920/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431920/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the imagedir parameter.  NOTE: this issue might be resultant from directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.3",
            "matchCriteriaId" : "64C117A4-B998-4278-8F89-8F69F895F853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0649.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431760/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431760/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter in (a) preview.php; the (2) cid, (3) pid, and (4) eid parameters in (b) archive.php; and the (5) pid parameter in (c) comments.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.3",
            "matchCriteriaId" : "64C117A4-B998-4278-8F89-8F69F895F853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0649.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431760/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.simplog.org/archive.php?blogid=1&pid=57",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431760/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.simplog.org/archive.php?blogid=1&pid=57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Allied Telesyn AT-9724TS switch allows remote attackers to cause a denial of service via a large amount of UDP data to the switch, which leads to unstable operation and possibly failure of the management interface or routing."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:alliedtelesyn:at-9724ts:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA17BF54-3B72-4ACF-B771-1DC007607A5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/431586/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431586/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC64B22B-E415-4510-A0DF-CE4763A423D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12375469-DD81-42BE-8BC0-FCAB0D2D6253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E384B8D4-C72C-4D3D-A25F-26FB5F1D4B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0534C39C-A421-4C97-8A96-A74ABFA78B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/phpmyadmin-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/phpmyadmin-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) icon_id and (2) userid parameters in preview.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:corenews:corenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "C453A4AA-A5FB-4A78-B29D-571C8D4C5DD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045372.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=24",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045372.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter.  NOTE: this is a different vector than CVE-2006-1212, although it might be the same primary issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:corenews:corenews:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354DCB34-2B75-420C-A713-FE7A4C83C565"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045372.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=24",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045372.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands, and view all usernames and passwords, via the id parameter to the showprofile page in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexbb:flexbb:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4263D291-3AE5-49F4-A94F-D084B7A43281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/24867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431793/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431793/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a \"/?\" sequence to a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:websense:websense:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "606EB1C0-0E97-440D-B2ED-EF52FF99EF81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/25211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431600/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431685/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431600/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431685/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iopus:secure_email_attachments:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1CF6F7-31BC-4265-A5D4-DB4B011CAC72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431904/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431904/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1864",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-26T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via \"..\\\\\" sequences, a similar vulnerability to CVE-2006-1863."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25067",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17735",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189435",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Thwboard 3.0 Beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the navpath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thwboard:thwboard:3.0_beta_2.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1619F8C-ADB6-47D6-808B-FDCA518F3D87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/431509/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17627",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431509/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) RecordID parameter in (a) Customeraddresses_RecordAction.cfm and (b) youraccount.cfm; (2) solus parameter in (c) detail.cfm; and (3) cat parameter in (d) category.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amplecom:ampleshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "5B046147-04C9-4CB6-B6E3-822E85B30B23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/ampleshop-ecommerce-software-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19806",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/ampleshop-ecommerce-software-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5634AEF9-0DE2-4D6B-9003-E603B5BC9206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02BC707-527B-4566-95CC-9262C2AAC440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3BB2BA-B6F5-451C-863F-A4028E040C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3B5013-CA5E-419C-A1E6-3C99436B483F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D86C037-3188-40C3-A40B-B988223F34E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B77619-8831-4380-ADB1-F295E456A9F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891E7564-7B8B-4A4B-B956-A24CA1D7A536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5E5F8E-BC1B-4737-ADF3-4A0FA00F5AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0976DD0-6D62-4109-B692-81E9D401E9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C9347A-1639-434B-A1D7-E280186E717F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubertec:help_center_live:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A746A2A4-98C2-41B6-B76C-8887628B48C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19776",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=411859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=411859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL commands via the (1) cat, (2) pic and (3) page parameter in index.php; (4) id parameter in postcard.php; and (5) cat parameter in print.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photokorn:photokorn:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84255FC0-C3BC-456D-B589-B4F03CCD8514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photokorn:photokorn:1.542:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C269970-5F18-43E4-BA4C-31F3C9DDD296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431982/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431982/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T18:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PhpWebGallery before 1.6.0RC1 allows remote attackers to obtain arbitrary pictures via a request to picture.php without specifying the cat parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0EE492-82CC-4B8D-A4C2-C03D90E3512C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A25DD-835C-43FF-A040-90B59B5C8D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029740C0-CC4B-412A-AD11-8B1D7ED66996"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via \"`\" (backtick) characters in the appliance's command line interface (CLI)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ip3_networks:ip3_netaccess_75:4.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9D889A-FA6B-488E-9571-11930887728A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has a default username of admin and a default password of admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ip3_networks:ip3_netaccess_75:4.0.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9D889A-FA6B-488E-9571-11930887728A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, which allows local users to view encrypted passwords; and the (2) NetAccess database file has world readable and writable permissions, which allows local users to view sensitive information and modify data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ip3_networks:ip3_netaccess_75:4.0.34_firmware:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A8EA25-2C7F-4378-A280-CFF5F734FD64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) keywords parameters in (a) Results.cfm, and the (3) ProdID parameter in (b) Details.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:application_dynamics:cartweaver_coldfusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16.11",
            "matchCriteriaId" : "38FCE38F-809E-411A-848E-5D562B2DE8E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.techfeed.net/blog/index.cfm/2006/4/26/cartweaver-holes",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.techfeed.net/blog/index.cfm/2006/4/26/cartweaver-holes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allows remote attackers to obtain sensitive information via an invalid (1) secondary, (2) PageNum_Results, (3) category, or (4) keywords parameter in (a) Results.cfm; or an invalid (5) ProdID parameter in (b) Details.cfm; which reveal the path in various error messages. NOTE: the behavior for the category, keywords, and ProdID parameters might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:application_dynamics:cartweaver_coldfusion:2.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A64B69B-BE9A-4287-B386-895686947D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) port, (2) server, and (3) user parameters.  NOTE: it is possible that the affected version is actually 3.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebftp:phpwebftp:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2727215-6592-440C-8D57-1AA0BE2F8FEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.subjectzero.net/research/phpwebftpxss.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.subjectzero.net/research/phpwebftpxss.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforumlite:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722D6D62-32E1-4B1F-AEB4-A5EC038FA1ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17697",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcscripts:dcforumlite:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722D6D62-32E1-4B1F-AEB4-A5EC038FA1ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17697",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this to be a security issue. The FastCGI server is local trusted code and not under the control of an attacker, no trust boundary is crossed.\n\nFor more information please see:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2050",
        "lastModified" : "2008-05-08T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextage:nextage_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D9A7CC-B151-45CC-874A-80699A87FA71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431983/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431983/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the \"viewpro\" string does not appear in the source code for version 1.0.2 of the product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verosky_media:instant_photo_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A11163-2DFD-4767-960A-297F953F1718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432022/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432241/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17696",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432022/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the OrderID parameter in (a) shipping.cfm and (b) checkout.cfm, (2) ItemID parameter in (c) proddetail.cfm, (3) SubCatID parameter in (d) index.cfm, the (4) CategoryID parameter in (e) prodpage.cfm, and (5) ProdID parameter in (f) Details.cfm.  NOTE: these issues can also be exploited for path disclosure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickestore:quickestore:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4C7331-7A12-40A0-AD47-4422CAC7BE45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/quickestore-79-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/quickestore-79-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service (unstable operation) via long DHCP packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:3c16486:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "7745C164-DF82-490D-A109-D2C5DB792132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.3com.com/infodeli/tools/switches/baseline/3C16486_V1_0_2_0_readme.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.3com.com/infodeli/tools/switches/baseline/3C16486_V1_0_2_0_readme.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to firmware version 1.0.2.0.\r\nhttp://www.3com.com/products/en_...e&order=desc&prodcat=all"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via \" (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment.  NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9089C1-3450-4C89-A9CE-AE2670FB598C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19819",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/25003",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432009/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1538",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26118",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/19819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/25003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via \" (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment.  NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432009/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1538",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26118",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via \" (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment.  NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432009/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1538",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26118",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via \" (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment.  NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avantbrowser:avant_browser:10.1:build_17:*:*:*:*:*:*",
            "matchCriteriaId" : "B638BBC3-49CC-4B9E-99DA-0CD44C6983F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/785",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432009/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1538",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26118",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a \"#e\" (execute) modifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5_2006-03-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5116FA-C532-42DF-ABBD-193AD7B799A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=213374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432226/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432451/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=213374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432226/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432451/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. (dot dot) in the name parameter, preceded by enough backspace (%08) characters to erase the initial static portion of a filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE478AB9-7ED4-4FDD-8990-CC4442CFA416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEA02AE-B0C9-4C37-8A0A-23351EBE58FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=213374",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432226/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=213374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432226/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "If you've downloaded IPB 2.1.5 since the time of this post, there is no need to update your installation as the main download has been updated."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABB6806-5DC0-4146-89FC-05D079F0CFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C77C15A2-9A9D-4C3F-8A62-18C54941B79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C79F9F-FE3C-4CC6-88A9-6EFB27724CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F427913-7FEB-49CA-AD9F-5E5EC77CA9ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993BCE2D-C03F-4F2F-A973-68CEC6B34EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8C2DB4-06C3-4400-B0F3-2025FD829788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053B554A-AC3D-496F-9E3D-D357D14B87E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B7742A-2BD1-4119-8850-5BCB35E9F7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.0_pf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4CBB17-B8EB-4A60-B8F5-34A2816373FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05FA7E1F-D9D2-419F-A9DE-7BE4253F897E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F88FD5-0335-4404-AD20-63737A76B051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B47FAD-8DCA-4B31-A5CF-884286F49E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5_2006-03-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5116FA-C532-42DF-ABBD-193AD7B799A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=213374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432226/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17690",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=213374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432226/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has released an update to address this and other versions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version \"Full Version\", allow remote attackers to execute arbitrary SQL commands via the (1) banner parameter in agent_links.pl; the offset parameter in (2) agent_links.pl, (3) agent_transactions.pl, (4) agent_subaffiliates.pl, and (5) agent_summary.pl; the camp_id parameter in (6) agent_transactions_csv.pl, (7) agent_subaffiliates.pl, and (8) agent_camp_det.pl; the (9) login parameter in agent_commission_statement.pl; the logged parameter in (10) agent_commission_statement.pl and (11) agent_camp_det.pl; the (12) agent_id parameter in agent_commission_statement.pl; and the (13) sub parameter in unspecified files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leadhound_network:leadhound_full:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C83F713-2891-4701-8399-AF3579A4B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leadhound_network:leadhound_full:2.1_network_version:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3967028-7FE5-4788-AC23-D5460FA00109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leadhound_network:leadhound_lite:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB97A3C6-635A-4577-8845-79A2459DFB60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19867",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25025",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25026",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25027",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25028",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25029",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-26T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version \"Full Version\", allow remote attackers to inject arbitrary web script or HTML via the login parameter in (1) agent_affil.pl, (2) agent_help.pl, (3) agent_faq.pl, (4) agent_help_insert.pl, (5) sign_out.pl, (6) members.pl, (7) modify_agent_1.pl, (8) modify_agent_2.pl, (9) modify_agent.pl, (10) agent_links.pl, (11) agent_stats_pending_leads.pl, (12) agent_logoff.pl, (13) agent_rev_det.pl, (14) agent_subaffiliates.pl, (15) agent_stats_pending_leads.pl, (16) agent_transactions.pl, (17) agent_payment_history.pl, (18) agent_summary.pl, (19) agent_camp_all.pl, (20) agent_camp_new.pl, (21) agent_camp_notsub.pl, (22) agent_campaign.pl, (23) agent_camp_expired.pl, (24) agent_stats_det.pl, (25) agent_stats.pl, (26) agent_camp_det.pl, (27) agent_camp_sub.pl, (28) agent_affil_list.pl, and (29) agent_affil_code.pl; the logged parameter in (30) agent_faq.pl, (31) agent_help_insert.pl, (32) members.pl, (33) modify_agent_1.pl, (34) modify_agent_2.pl, (35) modify_agent.pl, (36) agent_links.pl, (37) agent_subaffiliates.pl, (38) agent_stats_pending_leads.pl, (39) agent_transactions.pl, (40) agent_summary.pl, (41) agent_camp_all.pl, (42) agent_camp_new.pl, (43) agent_camp_notsub.pl, (44) agent_campaign.pl, (45) agent_camp_expired.pl, (46) agent_stats.pl, (47) agent_camp_det.pl, (48) agent_camp_sub.pl, (49) agent_affil_list.pl, and (50) agent_affil_code.pl; the camp_id parameter in (51) agent_links.pl, (52) agent_subaffiliates.pl, and (53) agent_camp_det.pl; the (54) banner parameter in agent_links.pl; the offset parameter in (55) agent_links.pl, (56) agent_subaffiliates.pl, (57) agent_transactions.pl, and (58) agent_summary.pl; the date parameter in (59) agent_subaffiliates.pl, (60) agent_transactions.pl, and (61) agent_summary.pl; the dates parameter in (62) agent_rev_det.pl and (63) agent_stats_det.pl; the (64) page parameter in agent_camp_det.pl; the (65) agent_id parameter in agent_commission_statement.pl; and the (66) lost password field in lost_pwd.pl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leadhound_network:leadhound_full:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C83F713-2891-4701-8399-AF3579A4B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leadhound_network:leadhound_full:2.1_network_version:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3967028-7FE5-4788-AC23-D5460FA00109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leadhound_network:leadhound_lite:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB97A3C6-635A-4577-8845-79A2459DFB60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25030",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25031",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25032",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25033",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25035",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25036",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25037",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25038",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25039",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25041",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25042",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25043",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25044",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25045",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25046",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25047",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25048",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25049",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25050",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25051",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25052",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25053",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25054",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25055",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25056",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25057",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25059",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25060",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1514",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-04-27T13:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the abcmidi-yaps translator in abcmidi 20050101, and other versions, allow remote attackers to execute arbitrary code via crafted ABC music files that trigger the overflows during translation into PostScript."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el traductor abcmid-yaps en abcmidi 20050101, y otras versiones, permite a atacantes remotos ejecutar código de su elección mediante ficheros música ABC artesanales que disparan el desbordamiento durante la traducción a PostScript.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abcmidi:abcmidi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2006-04-22",
            "matchCriteriaId" : "3333FD63-F5D7-4B0F-95E4-7D01FB868464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abcmidi:abcmidi:2004-12-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5E851E-E6DC-4F0F-B969-CC67383D7672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abcmidi:abcmidi:2005-01-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6C046D-9EE0-4ACD-AE07-7F7169CD557A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19826",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19829",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1043",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24974",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17704",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1531",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/24974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T13:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the libpkcs11 library in Sun Solaris 10 might allow local users to gain privileges or cause a denial of service (application failure) via unknown attack vectors that involve the getpwnam family of non-reentrant functions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la librería libpkcsll en Sun Solaris 10 podría permitir a usuarios locales ganar privilegios o causar una denegación de servicio (fallo de aplicación) mediante vectores de ataque desconocidos que implican la familia de funciones no reentrantes getpwnam."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19789",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015987",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102316-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17687",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102316-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T13:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie.  NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey['language'] variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en save.php en PHPSurveyor 0.995 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de la cookie surveyid. NOTA: este caso podría ser aprovechado para ejecutar código PHP arbitrario, como se demuestra mediante la inserción secuencias de salto de directorio dentro de la base de dato, que luego son procesado por la variable thissurvey['language']."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.96_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F82FE01-FC91-4259-A53D-4D03FCB0DCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.97_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086A5B9A-B3A2-42FC-B76C-D61225217762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.98_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAD67BC-BA23-4692-B333-D5F412DB7B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.98_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9467C7F-8283-4717-AA0F-AB1E745C5CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA0CC28-1114-4CFC-B445-2FDF5D972AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.991:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCB1FA7-3DA0-42C1-B426-B07A15C86F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.992:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAC784E-B1D7-486E-940C-09BC34855BBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.993:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D7CDFC-5911-431E-ABD9-E864A71F8146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsurveyor:phpsurveyor:0.995:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0EF001-46CB-4D68-B451-5206E8F6DD3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19761",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431508/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431508/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T13:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mkportal:mkportal:1.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D48A2C-A60A-4200-B091-3E90F0AECC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015977",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=26",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431759/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447195/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447303/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431759/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447195/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447303/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T13:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary SQL commands via the userid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mkportal:mkportal:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5C77DD-2D78-4B11-81BF-0537D7270538"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015977",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=26",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431759/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431759/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T13:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Hitachi JP1 products allow remote attackers to cause a denial of service (application stop or fail) via unexpected requests or data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1-cm2-network_node_manager:*:*:enterprise:*:*:*:*:*",
            "versionEndIncluding" : "05_20",
            "matchCriteriaId" : "49236EFC-6FBE-48A1-9AC9-90DB0E2F94A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1-cm2-network_node_manager_250:05_20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D104967C-D81D-4C43-93B3-AC9A0CCC0191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jp1-cm2-network_node_manager_250:06_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B340E4D-21CC-4241-867D-A3407758EFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_automatic_job_management_system_2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2B0367-2B09-4715-8D5C-691B451EB567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_automatic_job_management_system_2:*:*:agent:*:*:*:*:*",
            "matchCriteriaId" : "56D24322-654B-42B7-8579-048DB8C8522D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_performance_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "491AB3B1-035B-41C9-B111-B4CAC018AF06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_pfm_snmp_system_observer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582A7935-673C-4E0A-9BE5-58AACD866EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_security_integrated_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DDE4F2-721C-48AA-9352-67129062C1DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_server_conductor_blade_server_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B56116-8D96-4D91-B569-877C143330DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_server_conductor_server_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C28F7FC-A823-420E-8F1F-0D124B946E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:jpi_server_system_observer_-_report_feature:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DEB565-5509-4BB7-A1A7-CCEE0FB8C807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19841",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-007_e/index-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-007_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T13:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:powerdns:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F3A03F-FB24-445D-A477-9109D0110BF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-0-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19831",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-0-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T13:34:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:devbb:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22E72B8-8946-4D3D-A6B2-18EC39340626"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/DevBB-1.0.0-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17703",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/DevBB-1.0.0-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment.  NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "6968EF1D-7CC5-430D-866D-206F66486F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BB496-749A-40C8-BAA9-6CFBBE308065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF51F68C-60A5-451F-9150-6DABBAE1D41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3BF9D6-BE14-4590-91B8-501DC92261BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6E8B0E-DEDD-43D1-9841-4BAF5A805967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b78b6af66a5fbaf17d7e6bfc32384df5e34408c8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b78b6af66a5fbaf17d7e6bfc32384df5e34408c8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0579.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service via crafted DNS responses messages that cause (1) a buffer over-read or (2) infinite recursion, which can trigger a segmentation fault or invalid memory access, as demonstrated by the OUSPG PROTOS DNS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9180C95-FF6F-4A0C-9DE0-DFF6D8387698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FA1404-9FA2-4379-96BC-6D7970C0EAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EABEE7AB-7C45-473E-9873-0423F2249F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F66F57-6AEB-4E3C-B148-BC7D11E1EBEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611AD3E5-708F-46BB-B21D-09598E1C4771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:7.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD59AEEB-D524-4337-8962-B29863CBC889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15245AF-B9B6-4D46-A901-A781FC0BAF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A3E1EB-89A5-4326-8977-9B462065C39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD607D2-2B07-474B-A855-2C3319B42CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4B4665-84C4-4129-9916-ABAC61B81FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131A4A5-5D67-4522-9A6E-E708815B5B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C30DD0-C957-44BA-B44C-7B424E664B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2E24A5-A864-4F42-A053-2FDA9D09A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0993A56D-3A68-464A-B580-BE2EC3846F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF6186E-90D1-4D22-A469-0E955D5F1EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7323E750-C596-46FC-AA85-9271CC9C2CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A53A0AC-B047-4E60-A7E6-2E2710379F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6F8A23D-2106-4803-AD52-DCB42FB51E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE1799-48D4-491A-AB1E-25169ED99F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14537B85-AA76-462F-85B6-CCF0BBCBC44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B64148-75F2-4646-942D-D6E77D84C65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC64544-CE2E-446A-B689-44DBA4050D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AE9A8A-B18E-4365-8AB6-CF2D63F95E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB2AEB0-1208-4B2E-92E2-5FF64A3A2125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBD6EEE-A728-4571-8AA9-CFCB66FC0288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB89A90-BFF5-4F68-82E8-A097D72155A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B814C6-C489-4EAF-AEB3-33DF2E712AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7EF631-20CC-4FEF-9F46-DA9D39D8FFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E50FA1-1EA7-478C-A268-DD8F593E07F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:8.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E404D7F-0C85-4C86-A6CE-428DE943E51D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82D47C8-BE79-4612-B2AE-C032C04E00D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB38D09-367F-4D5C-85AC-A31ADB3122DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78AF45C0-40FB-4208-8CC7-EB49FE6EA425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BAE78B-6548-44EB-A45D-0C41E7798A8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5249894-59CD-4C49-9D7F-52243CD952D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delegate:delegate:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E6EFAE-E84F-4CCB-9AB7-E0364EEF12C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19750",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015991",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17691",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a \"broken\" TSIG, as demonstrated by the OUSPG PROTOS DNS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52373DC-3E05-424B-9C78-4092A75C75A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098633E6-88F0-4DBC-986F-D11EDA29877F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1861756C-CC81-4EAB-8427-57A3C62BFF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD642FC-1764-4090-A32D-830CEAE69E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE954FD0-56AF-4757-BAA8-B0C64703F6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF891263-4ACE-47C3-83F3-C06E49F32451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6520F4-B203-400A-8629-8A40B739DB11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF07E87-B109-4B15-A358-7A454502E077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C9459-D526-4880-AE03-4A1558CB941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFA05CD-0BE4-4E85-A3DE-8B3E2622159F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA93166-513D-40AA-9855-FC89060BA03C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0D8854-64B6-42C9-B4D2-B2AF16AC0F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F95086-3107-4C38-BB3B-7BABA9BD15C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19808",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the version of bind as shipped with Red Hat Enterprise Linux 5.  We do not believe this issue has a security consequence for earlier versions of Red Hat Enterprise Linux.  For details please see\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192192",
        "lastModified" : "2007-07-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to the DNS \"client code,\" as demonstrated by the OUSPG PROTOS DNS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junose:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226E0D5B-2D0D-443E-9B54-4ABF8A89FCD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19822",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015992",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to cause a denial of service via a crafted DNS message, aka \"Query-of-death,\" as demonstrated by the OUSPG PROTOS DNS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:don_moore:mydns:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40833162-A29F-4596-8B3B-E09EE19FF68F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1015990",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of service (memory consumption) via a DNS query with an unsupported (1) QTYPE or (2) QCLASS, as demonstrated by the OUSPG PROTOS DNS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CA7CEF-0542-449A-B3A8-B82848A6CD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DEBAFA-77D8-4FCC-9514-79318F951EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99963775-9ADD-4135-BE83-EC3C2ECF7791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E40E6EE-77F1-48A3-B86B-24676E076EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F615F9A7-A638-4B62-9E95-F964F562B020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D188D6A9-F740-4ECA-B9DC-FFBD62D56175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4D68F2-3C70-475E-B7C5-C992509945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95A9845-7B28-4159-940C-FB8A2C2F67B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC022BE8-0949-4401-85EB-5A889CDD9612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1848A537-D8B7-4C56-980B-B19237603A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.8b1_par5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07127D33-E813-413C-A9B6-61018880A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.8b1_par6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A94AAB8-1FBA-4762-AA6E-55ECC8284A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.8b1_par8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49C9040-4A00-4CD0-9357-0649295DEF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.10_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C6254C-3583-44DB-AAF5-37CAE8E97B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.11_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB981DF6-B6E4-46E5-B81F-2A9AEE8780EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.2.1_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A894A-4CE6-415E-8601-F495D8DBEE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.2.2_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4019AD-FD86-41ED-AF5A-C170A64D6231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.2.3_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73271DE-40DF-4D27-9A7F-4C81177B1707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015989",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phys.uu.nl/~rombouts/pdnsd.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17694",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phys.uu.nl/~rombouts/pdnsd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown impact and attack vectors.  NOTE: this issue might be related to the OUSPG PROTOS DNS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CA7CEF-0542-449A-B3A8-B82848A6CD3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DEBAFA-77D8-4FCC-9514-79318F951EC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99963775-9ADD-4135-BE83-EC3C2ECF7791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E40E6EE-77F1-48A3-B86B-24676E076EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F615F9A7-A638-4B62-9E95-F964F562B020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D188D6A9-F740-4ECA-B9DC-FFBD62D56175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4D68F2-3C70-475E-B7C5-C992509945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95A9845-7B28-4159-940C-FB8A2C2F67B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC022BE8-0949-4401-85EB-5A889CDD9612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1848A537-D8B7-4C56-980B-B19237603A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.8b1_par5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07127D33-E813-413C-A9B6-61018880A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.8b1_par6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A94AAB8-1FBA-4762-AA6E-55ECC8284A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.8b1_par8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49C9040-4A00-4CD0-9357-0649295DEF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.10_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C6254C-3583-44DB-AAF5-37CAE8E97B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.1.11_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB981DF6-B6E4-46E5-B81F-2A9AEE8780EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.2.1_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7A894A-4CE6-415E-8601-F495D8DBEE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.2.2_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4019AD-FD86-41ED-AF5A-C170A64D6231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdnsd:pdnsd:1.2.3_par:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73271DE-40DF-4D27-9A7F-4C81177B1707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.phys.uu.nl/~rombouts/pdnsd.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.phys.uu.nl/~rombouts/pdnsd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T22:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow remote attackers to cause a denial of service via crafted DNS messages that trigger errors in (1) ProxyDNS or (2) PKI-Resolver, as demonstrated by the OUSPG PROTOS DNS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:fitelnet:e20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377DF433-946B-4E7F-A570-A360B72003FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:fitelnet:e30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC57C4C-6A38-4914-80D9-4644AFD0CC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:fitelnet:f40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F1850F-E46E-4FA3-A107-1A402E3DC638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:fitelnet:f80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA26085-BBEC-4523-A901-D67407AD45C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:fitelnet:f100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D7F0A4-72A1-43CB-A51D-992A9900D883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:fitelnet:f120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B05E835-90D3-4328-9003-C9A367C0AD3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:fitelnet:f1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D5B782-2733-484E-BBEE-716AFFFDB6C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:fitelnet:f3000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5325029-D721-4BB2-821C-AC1FD0DAA3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:furukawa_electric:mucho-ev_pk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D64446-0A00-47C1-BEC5-90A5778FD3AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19820",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.furukawa.co.jp/fitelnet/topic/dns2_attacks.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17710",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.furukawa.co.jp/fitelnet/topic/dns2_attacks.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verosky_media:instant_photo_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A11163-2DFD-4767-960A-297F953F1718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000733.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432024/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432241/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17696",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000733.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432024/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in portfolio_photo_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the count_click function in includes/functions/fns_std.php.  NOTE: this issue could produce resultant XSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verosky_media:instant_photo_gallery:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918041A4-A0CF-4995-8BCC-766EE650D01D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000733.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432024/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432241/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17696",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-April/000733.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432024/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-27T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADATA function in the DBMS_EXPORT_EXTENSION package. NOTE: this issue was originally linked to DB05 (CVE-2006-1870), but a reliable third party has claimed that it is not the same issue. Based on details of the problem, the primary issue appears to be insecure privileges that facilitate the introduction of SQL in a way that is not related to special characters, so this is not \"SQL injection\" per se."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A77562B-D1A5-450D-9288-3FC7145E9292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/932124",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431353/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432078/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432354/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432355/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432632/30/5250/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/932124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431353/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432354/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432355/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432632/30/5250/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2083",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-04-28T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_tridgell:rsync:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8829E5-3C26-407C-A264-4E2DF3B8C075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_tridgell:rsync:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D107BB3-7DC7-4138-BE5F-A8B239427DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_tridgell:rsync:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F902BF6-CC1F-4544-A2FF-839A71C23EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_tridgell:rsync:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C715D1-D7A7-47FC-9473-7F2D23AAC115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_tridgell:rsync:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9CDA0C-DCF8-4790-B345-805570731B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_tridgell:rsync:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA76DC6-84A7-488E-9F91-817B86DA7CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_tridgell:rsync:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E69E14-843A-4764-B550-F89C8EEE544F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_tridgell:rsync:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED5623-C618-40D7-930C-4659859BAA93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://samba.anu.edu.au/ftp/rsync/rsync-2.6.8-NEWS",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19920",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-05.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17788",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1606",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26208",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://samba.anu.edu.au/ftp/rsync/rsync-2.6.8-NEWS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue does not affect the versions of rsync distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in (a) index.php, and the (3) mod parameter in (b) admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.3_pro",
            "matchCriteriaId" : "57C28CA7-CA2F-416C-86CD-97B36865981D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB2CEC8-7EFF-410F-A4E2-CDC515F9E38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F6F8CFD-D03F-494E-96E0-A8C9CCDC6355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3F0B6F-F519-4717-B1A4-5CE599DB611F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432109/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432109/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:speedcommander:10.52_build4450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992E2B67-50A1-4737-9B69-0BF9C77EC171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:speedcommander:11.01_build4450:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B4518F-A0D0-4478-9A5F-F20C4414A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedproject:squeez:5.10_build_4460:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16545546-3669-456A-BF65-BD652CEB4F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19473",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-23/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432101/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.speedproject.de/enu/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1535",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-23/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432101/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.speedproject.de/enu/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device running IVE OS before 4.2r8.1, 5.0 before 5.0r6.1, 5.1 before 5.1r8, 5.2 before 5.2r4.1, or 5.3 before 5.3r2.1, allows remote attackers to execute arbitrary code via a long argument in the ProductName parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junipersetup_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EFAF86-B630-40B9-A36A-81D9A540E832"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060424.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.juniper.net/support/security/alerts/PSN-2006-03-013.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/477604",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432155/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060424.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.juniper.net/support/security/alerts/PSN-2006-03-013.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/477604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432155/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (application hang or erroneous behavior) via an attachment with an MS-DOS device filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_integrated_desktop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C44036D-FBB9-4E98-B863-4316AD54660D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0E629C-E8CC-484A-9D86-DBBEBBA91EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566EE14B-66F9-4DAA-B570-895B66EFBE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3881F85B-51A4-4C3E-A984-2043BC59C666"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2389344424/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-006_e/01-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-006_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2389344424/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-006_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-006_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via (1) the FID parameter in board.php and (2) the TID parameter in read.php.  NOTE: the SQL injection issues are already covered by CVE-2005-1612 (read.php) and CVE-2005-2566 (board.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devsyn:open_bulletin_board:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA59F289-879E-4C1B-AF9B-A4400EDCDF99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432106/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432106/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) username parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysmartbb:mysmartbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26405F8-4385-4276-82F3-E122793F91C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysmartbb:mysmartbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C77D3B-610C-444C-B331-A5282DA16477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432095/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17707",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432095/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) username parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysmartbb:mysmartbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26405F8-4385-4276-82F3-E122793F91C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysmartbb:mysmartbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C77D3B-610C-444C-B331-A5282DA16477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432095/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17707",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432095/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in Virtual War (VWar) 1.5 and versions before 1.2 allows remote attackers to obtain sensitive information via an invalid vwar_root parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDAD337-4009-474B-9105-B18BEE690479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B1A470-C615-498F-9292-19370DE5379F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51D11E1-8756-4D5F-9F2A-1048411911CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A7E74A-113E-46C9-AB7B-85DBFCCD2522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1C5ED5-2892-4F00-941A-EE64C9B56565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D51F5A-3B53-4938-951E-3B3F1024BD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCA7085-CD42-418D-8DBE-B191582DFBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143EC184-3132-439B-835D-AF4D41FA3598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256509A6-F4A0-4443-BC04-EE74CF48BA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3805AC03-2AC5-4233-8BF0-EB799164028B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EF75D3-DB96-48EF-A002-4532A860ABA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87E2E48-B53E-4638-86EC-A284DF2F2F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFA22F-659A-4CBE-B3D7-A8D7B2D7AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E672D937-CF21-478E-82AD-A5FB31AF6CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED33CE9-48E3-4EBC-8236-EA9913CE36D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21EF3A6-287C-448E-AAAD-AD0946C2B604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4DBDAC-3B64-47D1-A2E6-D9D80AA1BDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E470DF7A-A93C-4C5E-92C2-7CEE4D529519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C792C4-6B80-48D3-851C-FF85511246ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2604BF9F-711A-4423-B325-48A9BBE96A0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431900/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431900/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP StorageWorks Secure Path for Windows 4.0C-SP2 before 20060419 allows remote attackers to cause an unspecified denial of service via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:storageworks_secure_path_windows:4.0c:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8D56FE-944A-44E5-A498-6CB95A9E164F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19752",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015969",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00642089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1015969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00642089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter.  NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a script \"can not do anything nasty.\"  This issue is appropriate for CVE only if Nessus users have an expectation that a split statement will not use excessive memory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.7",
            "matchCriteriaId" : "893B7354-62EB-470D-97F2-AED3A424B30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "757C2A87-10EA-48A5-890E-1779FBFEE0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34121C2E-978F-4D68-969A-558886F29CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:2.2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E34C0B-AAC7-4117-8E68-D32FEBB9ABCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD466D6-094E-4F89-AA7E-8C958D751206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E2F716-1BE6-4F06-80A2-C03F60F58E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B73F0FA-8454-4291-98D1-9F7A99373557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511BAE3E-16F4-4451-84D7-AAEB1FD3A87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nessus:nessus:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF4E5AB-816A-4B1D-8901-6551C14B6688"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015996",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431987/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431993/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431994/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1541",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/279-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431987/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431993/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/431994/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/279-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify that a user wishes to run an ActiveX control or perform other risky actions, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking an object or pressing keys that are actually applied to a \"Yes\" approval for executing the control."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*",
            "matchCriteriaId" : "7AAA310C-7DED-40B3-B5EF-80C7407BB01A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "A7B6FB02-F15F-486D-8E7C-40830ABDB62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "376DA3A6-FAB8-4B18-B9D9-C176675C7671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "9F9AE3DB-EB7C-4B17-AF7A-CD8FC3C77070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "151FE30E-9320-495C-84AD-60893FAED223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "5805FB74-2AD6-4919-BAAE-D995CA2650A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*",
            "matchCriteriaId" : "0D328337-A2FE-4E2E-8A8D-C170DC0A88E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B8985B-B927-4928-B1DB-18E29F796992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
            "matchCriteriaId" : "8E93C22E-812E-4CDA-9850-2386CE1E817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED471260-0272-431F-A91E-AC2883D92497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63D18070-EC48-4904-9AE0-558F7F3B869D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0759.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045589.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://student.missouristate.edu/m/matthew007/advisories.asp?adv=2006-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17713",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1559",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0759.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045589.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://student.missouristate.edu/m/matthew007/advisories.asp?adv=2006-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/22351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Phex before 2.8.6 allows remote attackers to cause a denial of service (application hang) by initiating multiple chat requests to a single user and then logging off."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.4",
            "matchCriteriaId" : "DDFF6976-0BDA-4774-AB47-179E9D123B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB358F5-ED96-4687-B46C-943F6AAAE6D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83AFB75A-C70A-4226-8FD0-C93D86DEA17A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2060F95C-4A5A-4C52-BD69-66E94D60931F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FE14D7-0C13-4D38-8BCB-019EA7C52534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F4FB3E-3EB4-4685-A5F1-B4DA0E241EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B063F72D-F526-4F8B-848E-CDE9634E7186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC1AA5B-20ED-42AB-A9F4-7B5A82451C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE51D8D-6BD6-4973-B5C8-18668AAB92CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A775AC-DD70-428C-A08E-8342B69ABC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFECC6BD-C5B7-4CC2-B861-2A6D5383A431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phex:phex:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6BAA9A-D0D8-4655-B1D9-C1E329B378A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=412751",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=412751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "802",
            "matchCriteriaId" : "2EBBCAC0-1C59-4A43-A497-9895D623F26C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD6B4B4-B7A5-4D40-A592-F560A0D51C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AFAA03-3EE3-4903-8D6B-01D752C04716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBE0C14-CC8B-41FE-ABD9-C9C02813C7AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6B6217-DD6C-41C5-AB0C-DE7B989C79D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61969A06-96C3-4142-9065-6A8C2EFD557C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9B3FBC-54DB-4D21-B1AB-BC7721FD138E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:700.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B7E614-0CB5-4AAF-B274-150DA5B85463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D278AA-9952-4117-B789-0E597D0E5599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B013ADC-809F-4DFE-913B-FE3B8974404C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:land_down_under:801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A05DCF-C183-434B-BF4C-8F2228060EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432235/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432235/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the from_contact field in a private message (PM)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "D208E054-B73B-43E0-9A3C-FED1C5844538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF6BD7-04F2-4D69-8402-EC4B637EA083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0C566E-2AC5-47A2-9246-2FBC87828690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29692429-A920-4BAD-9D79-D36EBE74EFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D52AB16-A202-48B6-82C0-AD13EBCC7FCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C498DCB3-3CC7-4334-BF61-F5DA43F4B90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A7875E-DAF0-46CD-AE30-246EB3FC6BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2103FBA-1B72-43FC-A1ED-28F8C7DA0EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FBF21B-CF52-41BB-BAF1-AF822586D28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE478AB9-7ED4-4FDD-8990-CC4442CFA416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB960ACC-74D4-4AFB-886C-11EB5180DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA6316-7E7E-4A6B-AA54-1846198D64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70C944-F70E-49F4-AA9C-D19148925C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAF5259-D99A-45A1-8DD4-C6858B302272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2800F-3A8C-4B63-B754-D921DFF79496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8BA41-7876-4738-A68A-2162E28A3AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF761A-6459-42B0-BCB8-F735FBDD6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432248/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17719",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432248/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0 allows remote attackers to execute arbitrary PHP code via (1) README.html or (2) HEADER.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D679A99-E54F-4A49-A9BF-AE3329B6FFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBF5D6C-FCCD-49C8-8582-E32BEA3CED34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EE8566-48E8-4D2B-8304-81981FD26D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59EAABD0-DB20-49AD-B2CD-2C7B96893EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98759138-C547-48DE-A506-DD62560E8BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA1834B-A299-4883-94F2-5A9D4865F3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F0E0A4-EA5A-4289-999C-FBB8DAA8D134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4835121D-8E1F-4E2E-AA31-F2E62B661725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_thumbnail_autoindex:php_thumbnail_autoindex:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E49828-BB6D-4D9B-BE87-9915DB9DB100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://staff.xiaoka.com/smoku/stuff/ThAutoIndex/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24873",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://staff.xiaoka.com/smoku/stuff/ThAutoIndex/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezb_systems:ultraiso:8.0.0.1392:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610AA85C-D132-4801-8CEC-ECF58F925886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19857",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20060428.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20060428.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magic_iso_maker:magic_iso_maker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0_build_0166",
            "matchCriteriaId" : "1ACA99A9-B520-4B21-9A60-A138F0CD8A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magic_iso_maker:magic_iso_maker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2_build_190",
            "matchCriteriaId" : "BB8BC1BA-9913-46EB-84E5-C3231CBC412E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19864",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20060428.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20060428.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winiso_computing:winiso:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9B444C-5A54-4BB3-8423-50543DC08613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19816",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20060428.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20060428.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:poweriso:poweriso:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79E3CA6-0F24-4F4A-A460-962C65566BA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19858",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20060428.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20060428.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MyBB (MyBulletinBoard) 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the (1) query string ($querystring variable) in (a) admin/adminlogs.php, which is not properly handled by adminfunctions.php; or (2) setid, (3) expand, (4) title, or (5) sid2 parameters to (b) admin/templates.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432229/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432229/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires access to the admin section."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email System (kmail) 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter to main.php, ordner parameter to (2) main.php, or (3) webdisk.php, (4) draft parameter to compose.php, or (5) m, or (6) y parameter to calendar.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmail:kmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "2B77B1D9-F9F0-40B4-A086-2E34946E1341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmail:kmail:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A330E4-EF4F-44D4-B817-13E532CD9047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/kmail-23-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19755",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/kmail-23-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via \"..\" sequences terminated by a %00 (null) character in the n parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30585124-4E60-4207-A563-7EEC2A335A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB372559-61D8-4E8D-9ED2-DB7F211E8C78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/jupitercms-lteq1.1.5-local-file-include.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17716",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/jupitercms-lteq1.1.5-local-file-include.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a \"wiki macro.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF7DA3-8B16-4883-9184-817E85B04395"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2384091359/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015986",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.edgewall.com/blog/news/trac_0_9_5.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2384091359/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.edgewall.com/blog/news/trac_0_9_5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the (1) EHLO, (2) MAIL FROM, and (3) RCPT TO commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bl4:smtp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.4",
            "matchCriteriaId" : "6AE01494-BDC6-403A-AA22-9973EF3E2FD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv30-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432329/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17714",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv30-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432329/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-04-29T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a long request, possibly triggering a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:oce_north_america:3121_printer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0455F6F-949E-4D89-ADE7-02F42444EBD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:oce_north_america:3122_printer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03187512-4A8D-4CF1-B7A4-DF1546E28F17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25000",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17715",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56722F-F61A-404B-B0B2-1C92C22D0436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00EBC44-B4AB-443F-A063-8C8CB64F5F94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kolab.org/security/kolab-vendor-notice-09.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19880",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.clamav.net/security/0.88.2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/599220",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_05.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-09.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.clamav.net/security/0.88.2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/599220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nClam Anti-Virus, ClamAV, 0.88.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Virtual Private Server (Vserver) 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities (ccaps) that allow local guest users to perform operations that were only intended to be allowed by the guest-root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_private_server:vserver:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCD2BA2-6874-4AEB-B58E-9FB541CA7E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_private_server:vserver:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92259BCA-FE7F-405E-8A2E-0CA45A71FF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.croup.de/proj/gentoo-vps/browser/vserver-sources/2.0.1-r4/4915_vs2.0.1-vxcapable-fix.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://list.linux-vserver.org/archive/vserver/msg13167.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.croup.de/proj/gentoo-vps/browser/vserver-sources/2.0.1-r4/4915_vs2.0.1-vxcapable-fix.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://list.linux-vserver.org/archive/vserver/msg13167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nVirtual Private Server, Vserver, 2.0.2-rc18\r\nVirtual Private Server, Vserver, 2.1.1-rc18"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka \"URL Redirect Cross Domain Information Disclosure Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FD3557-956D-4A96-8AA5-5FD9DB87FD11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/783761",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449883/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449917/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471947/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-163A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1558",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2154",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/783761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449883/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449917/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471947/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-163A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D61368-7B32-45CB-A130-BDCA5BFB71D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C7A12D-70DF-46A9-A14A-CEBBED8736D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BBEB60-3EBE-4DEB-BCC4-19353CAEED5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595951BF-3D87-4C1A-8679-5C21E7EC4536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21499F46-1E54-480B-9765-67946DEAEDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA97810C-5937-4CA0-9AFC-4D6D24B4302C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E616D5D-9328-44BB-A3C1-FFD8DD2010B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC56D72D-DABC-4426-942E-2CD70D428F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCB8C81-2AE7-40C5-9BDB-ACE0EF8BC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4E735-43B0-4B34-8EBC-FB320F003A17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432362/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17737",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432362/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D61368-7B32-45CB-A130-BDCA5BFB71D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C7A12D-70DF-46A9-A14A-CEBBED8736D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40BBEB60-3EBE-4DEB-BCC4-19353CAEED5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595951BF-3D87-4C1A-8679-5C21E7EC4536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21499F46-1E54-480B-9765-67946DEAEDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA97810C-5937-4CA0-9AFC-4D6D24B4302C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E616D5D-9328-44BB-A3C1-FFD8DD2010B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC56D72D-DABC-4426-942E-2CD70D428F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCB8C81-2AE7-40C5-9BDB-ACE0EF8BC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:sws_simple_web_server:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F4E735-43B0-4B34-8EBC-FB320F003A17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432362/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17737",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432362/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planet_concept:planetgallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC97F53E-F41E-4AA8-ADAF-E7DC1FBE98D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.planetc.de/download/planetgallery/planetgallery.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432576/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17753",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.planetc.de/download/planetgallery/planetgallery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extrosoft:thyme:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD11855-78B8-4138-AB8E-C261AB93B63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/portals/thyme",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432588/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/portals/thyme",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432588/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admin_gallery.php3, possibly related to the add action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jmk_web_scripts:jmk_picture_gallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3108FF-AACB-4137-B296-4DAB81AAA800"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in event/index.php in Artmedic Event allows remote attackers to execute arbitrary code via a URL in the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artmedic_webdesign:artmedic_event:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8F8C69-240C-4D74-946B-F65C2F2A1BE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/04/artmedic-event-remote-file-include.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19907",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lobnan.de/advisories/artmedic.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432397/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/04/artmedic-event-remote-file-include.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lobnan.de/advisories/artmedic.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432397/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2120",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-01T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2850FD9-8BE8-410E-8A24-28549DAACEB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1065",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19949",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20023",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20330",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20667",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1078",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0425.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189974",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9572",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/277-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0425.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/277-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the include_path parameter.  NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-rater:i-rater_platinum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D46662F-4415-4448-BB35-7734005A9451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432404/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432596/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17731",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432596/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via a URL in the page parameter.  NOTE: the original report for this issue is probably erroneous, since CoolMenus does not appear to be written in PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolmenus:coolmenus:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA26C1E-C666-4AF4-9599-4A20EFDEF477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/04/coolmenus-event-remote-file-include.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dhtmlcentral.com/projects/coolmenus/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432395/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432597/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432630/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/04/coolmenus-event-remote-file-include.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dhtmlcentral.com/projects/coolmenus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432395/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432597/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432630/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:network_administration_visualized:network_administration_visualized:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9D16CF-4EB4-4266-8E8A-D9F212010873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19849",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=413412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17734",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=413412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SunShop 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prevaction, (2) previd, (3) prevstart, (4) itemid, (5) id, and (6) action parameters in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B43DF31-5B83-44B9-9A05-90E48766AB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29019F1-C118-4659-A7B7-E5BE7043E87F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/sunshop-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19871",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/sunshop-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T22:06:00.000",
      "lastModified" : "2023-11-07T01:58:45.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3779.  Reason: This candidate is a duplicate of CVE-2005-3779.  Notes: All CVE users should reference CVE-2005-3779 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categori and (2) stranica parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avalon_ltd:maxtrade:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1259F5-5A68-4A76-A4BC-4B07848C83CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/maxtrade-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/maxtrade-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in weblog_posting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL commands via the r parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blog_mod:blog_mod:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC091-8D7A-4D27-8676-544C96820A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blog_mod:blog_mod:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4291CACD-4AB8-4F27-B6E1-49EF65B0BC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blog_mod:blog_mod:0.2.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA081F4-8568-481B-AE5C-D9FDF2D26A51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432602/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432602/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameter to (a) admin/login.php, (3) find_str parameter to (b) search.php, or (4) artid parameter to (c) art.php, or (5) catid parameter to (d) cat.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:pro_publish:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7A07-563A-49EB-A3BF-36C12A8B8E52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/130/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://soot.shabgard.org/bugs/propublish.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435787/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/130/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://soot.shabgard.org/bugs/propublish.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435787/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings, which are stored in set_inc.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección directa de código estático en Pro Publish 2.0 permite a administradores remotos autenticados ejecutar código PHP arbitrario editando ciertos ajustes, que se almacenan en set_inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:pro_publish:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7A07-563A-49EB-A3BF-36C12A8B8E52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/130/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/130/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_poll:advanced_poll:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57D98B9-E4F1-41D7-B36C-724B07EFC121"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/131/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/131/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that magic_quotes_gpc is set to off.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify the IP address of a client, which makes it easier for remote attackers to spoof the source IP and bypass voting restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_poll:advanced_poll:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57D98B9-E4F1-41D7-B36C-724B07EFC121"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/131/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/131/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute arbitrary SQL commands via the iPro parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:duclassified:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C48DE027-EC92-43F8-9233-28DE8110EEE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/duclassified-detail.asp-sql-inj.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/duclassified-detail.asp-sql-inj.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-01T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) link_dir_target and (2) link_id_target parameter, possibly involving the link_edit functionality."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boonex:barracuda:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "0CFA6788-9DA1-47B5-9089-4E5435612091"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/barracuda-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/barracuda-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly other versions before 2.0.12, allows remote attackers to inject arbitrary web script or HTML via parameters that are set as global variables within the program, as demonstrated using the table parameter to login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsboard:jsboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.11",
            "matchCriteriaId" : "97672C81-9E3E-44FC-860F-4F9828E200C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsboard:jsboard:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67EEA77-8166-4F5A-8C3F-0405EE7A6761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsboard:jsboard:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37ED4D7-A553-4D37-9B46-0F8D7802A466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsboard:jsboard:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DD6C73-07BA-4576-971F-37976C38053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsboard:jsboard:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51965A7-0D08-419D-9411-AC7CE29E2146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432714/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.klink.name/security/aklink-sa-2006-001-jsboard-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432714/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.klink.name/security/aklink-sa-2006-001-jsboard-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nJSBoard, JSBoard, 2.0.12"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "06FECBC5-AB2F-4807-8C4F-C3A3EE56A9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15A5879-39FE-4BFF-B391-52EAA58D1A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4951A567-0C73-4C41-A694-B50293545936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581594BF-92CE-4B16-95DC-200E11C64591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBFC1B3-8C7D-4B63-8E92-F1759EACA2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3575646-AF8E-4D33-97DE-E6EA468D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7717E4CC-C7D1-4DB3-8F15-A6DC3C957B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4E7219-C05D-4269-990B-4B523564BF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A729BD82-D5BA-4BF9-812C-ADACEF42F68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19892",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in Ruperts News allows remote attackers to execute arbitrary SQL commands via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruperts_news:ruperts_news:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6956C4-3480-441A-A05B-BC2A86E8A5C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/128/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/128/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that magic_quotes_gpc is set to off.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary SQL commands via the ID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aznews:aznews:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5B3260-46F5-4EE0-9613-195F8D9113DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/126/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19888",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/126/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Other versions of this product may also be affected by this vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openphpnuke:openphpnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.3",
            "matchCriteriaId" : "B196FDF6-35F5-404E-8800-7239EDFDC36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19893",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openphpnuke.com/system/article/index.php?opnparams=B3YBZAI3BWgEbFU0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openphpnuke.com/system/article/index.php?opnparams=B3YBZAI3BWgEbFU0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nOpenPHPNuke, OpenPHPNuke, 2.3.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neomail:neomail:1.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A628DB-9B45-4670-A1B7-B54D3E8F12AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19906",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/hm/neomail.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432398/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17728",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/hm/neomail.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432398/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wilsonncareabusinesses:php_newsfeed:2004-07-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FC1CBE-9A2C-4180-80B2-3ABEBEE63235"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/129/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19904",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/129/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php or (2) id parameter to members.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitscripts:orbithyip:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0647856-C4A1-4E6D-9B78-DE5B0C28DB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/orbithyip-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/orbithyip-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collaborative_portal_server_project:collaborative_portal_server:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFD985B-5FEA-4562-99F0-54051D72B914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/cps-340-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19879",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/cps-340-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classes_dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7185CF5F-BC31-49B8-881E-5BA674D878E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D899CC0B-334F-4794-A7C2-449545D728C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19891",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446142/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446142/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as \"onmouseover\" in the (1) color, (2) size, or (3) url bbcode tags."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jcink:textfilebb:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE34FB30-F49F-4871-993E-806942FE12A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19883",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432461/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17750",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432461/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmcounter:dmcounter:0.9.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7CFCFC-4466-4B80-954F-1D6EAE641AA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0181.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432572/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17756",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0181.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432572/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) topic or (2) id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:harold_bakker:hb-ns:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A49BA6-C68B-44B0-8D41-C92EB709043D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/127/summary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/127/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) poster_name, (2) poster_email, (3) poster_homepage, or (4) message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:harold_bakker:hb-ns:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A49BA6-C68B-44B0-8D41-C92EB709043D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/127/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/127/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "resmgrd in resmgr for SUSE Linux and other distributions does not properly handle when access to a USB device is granted by using \"usb:<bus>,<dev>\" notation, which grants access to all USB devices and allows local users to bypass intended restrictions.  NOTE: this is a different vulnerability than CVE-2005-4788."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resmgr:resmgrd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F212C0C4-E418-4AD4-A891-15E72CE40220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1047",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Feb/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1526",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-02T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as demonstrated by the (1) XRenderCompositeTriStrip and (2) XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory allocation due to a typo in an expression that uses a \"&\" instead of a \"*\" operator. NOTE: the subject line of the original announcement used an incorrect CVE number for this issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FFBC43-2178-48DF-B61E-CCBA4682AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F506308-E878-4AA5-B5D5-A7E148D63947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D129D08C-AF18-4F9D-9781-64B8C1CFD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9809AF-75A2-4E08-9E41-EE9DB960E789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.freedesktop.org/archives/xorg/2006-May/015136.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19900",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19915",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19916",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19921",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19951",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19956",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19983",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102339-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-02.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/633257",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:081",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_03.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata38.html#xorg",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0451.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436327/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17795",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1617",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=6642",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26200",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9929",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/280-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.freedesktop.org/archives/xorg/2006-May/015136.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102339-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/633257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openbsd.org/errata38.html#xorg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0451.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436327/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=6642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/280-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-02T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in client.c in CGI:IRC (CGIIRC) before 0.5.8 might allow remote attackers to execute arbitrary code via (1) cookies or (2) the query string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgiirc:cgiirc:0.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5323BDF1-B08C-4056-BEBA-54845B22C576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgiirc:cgiirc:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C57C25-D186-47F6-95D4-113DF554BD10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.cgiirc.org/chngview?cn=263",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.cgiirc.org/chngview?cn=283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.cgiirc.org/timeline?d=300&e=2006-Apr-30&c=2&px=&s=0&dm=1&x=1&m=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19922",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.cgiirc.org/chngview?cn=263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.cgiirc.org/chngview?cn=283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.cgiirc.org/timeline?d=300&e=2006-Apr-30&c=2&px=&s=0&dm=1&x=1&m=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the CONFIG[path] parameter, as demonstrated by including a GIF that contains PHP code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avatic:aardvark_topsites_php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9D097-C3E0-4CB3-A802-15D1F807B0B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19911",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in top/list.php in phpBB TopList 1.3.8 and earlier allows remote attackers to include arbitrary files via the returnpath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb_toplist:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3918D96-2869-4EDD-A030-2052D6F791B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/25294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432453/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432453/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb_toplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.8",
            "matchCriteriaId" : "3566D68F-190F-4841-B726-2E0E2BF41B69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb_advanced_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "21D4DF72-383B-4660-B3AB-0515D9CA0297"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19905",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in HTM_PASSWD in DirectAdmin Hosting Management allows remote attackers to inject arbitrary web script or HTML via the domain parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jbmc_software:directadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.26.6",
            "matchCriteriaId" : "2A91B635-B15B-4557-829F-DA557EA5AE3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19885",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/advisory/hm/directadmin.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432459/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/advisory/hm/directadmin.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432459/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the File>Open dialog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "A891F97C-905B-4B59-9BEE-78967D3FC036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "B81A28AB-E359-4F07-813C-82CF5E5BBF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "289D648B-DE4F-46C9-935A-5A539C28BD37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19850",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply Retrospect Driver Update 7.5.1.105.\r\nApply Application Security Update 7.0.344 (requires Retrospect 7.0.326 or Retrospect Express 7.0.301).\r\nApply Application Security Update 6.5.382 (requires Retrospect 6.5.350 or Retrospect Express 6.5.350)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "6.5",
            "matchCriteriaId" : "A891F97C-905B-4B59-9BEE-78967D3FC036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "B81A28AB-E359-4F07-813C-82CF5E5BBF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "289D648B-DE4F-46C9-935A-5A539C28BD37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19850",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Retrospect 7.5:\r\nApply Retrospect Driver Update 7.5.1.105.\r\nhttp://ftp.dantz.com/pub/updates/ru751105.exe\r\n\r\nRetrospect 7.0:\r\nApply Application Security Update 7.0.344 (requires Retrospect 7.0.326 or Retrospect Express 7.0.301).\r\nhttp://download.dantz.com/archives/Retro-EN_7_0_344.exe\r\n\r\nRetrospect 6.5:\r\nApply Application Security Update 6.5.382 (requires Retrospect 6.5.350 or Retrospect Express 6.5.350).\r\nhttp://download.dantz.com/archives/Retro-EN_6_5_382.exe"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. (dot dot) sequences in the help_file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:1.3.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADC9B27-A222-496B-B86E-093ED42DE291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:1.3.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7118CE2-E745-4DC4-BE17-2C1A135E263D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:1.3.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58CB6A44-823A-4AA7-9F56-5344D8B4E8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:1.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17916C46-6B28-4707-8FC0-6F1ADCBEEB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA6CF17-AEDE-45DD-8289-DDFA5E782F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CDF79E-3088-4115-9FF8-103CD3A5AB39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19886",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to \"slideshow\".  NOTE: This is a different vulnerability than CVE-2005-4246."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plogger:plogger:2.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D1C4C9-C2FF-4903-B2C9-3359409A81FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/plogger_b21_sql_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/plogger_b21_sql_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remote file inclusion using the include_files array parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stadtaus:guestbook_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "6BF5EFB5-0EA2-4BAC-A4FB-5F794C3FC902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/gbs_17_xpl_pl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.stadtaus.com/forum/t-2600.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/gbs_17_xpl_pl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stadtaus.com/forum/t-2600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Download Guestbook Script 1.9"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in help.php in Russcom Network Loginphp allows remote attackers to spoof e-mails and inject MIME headers via CRLF sequences in the email address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:russcom_network:loginphp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E9E0B0-D206-41F0-8A6B-069973DCEEA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Russcom Network Loginphp (Russcom.Loginphp) allows remote attackers to inject arbitrary web script or HTML via the username field when registering."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:russcom_network:loginphp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E9E0B0-D206-41F0-8A6B-069973DCEEA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2162",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-03T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "195E2FFA-4AA5-498A-AABD-225C2175918A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "B903D35B-D120-4E63-855F-442F574F9C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19991",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20013",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20215",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1072",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.nagios.org/development/changelog.php",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_19.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17879",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1662",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26253",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://sourceforge.net/mailarchive/forum.php?thread_id=10297806&forum_id=7890",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/282-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nagios.org/development/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceforge.net/mailarchive/forum.php?thread_id=10297806&forum_id=7890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/282-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to versions 1.4 and 2.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1527",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-03T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SCTP-netfilter code in Linux kernel before 2.6.16.13 allows remote attackers to trigger a denial of service (infinite loop) via unknown vectors that cause an invalid SCTP chunk size to be processed by the for_each_sctp_chunk function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19926",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.13",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25229",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17806",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26194",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10373",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to Linux Kernel version 2.6.16.13 :\r\nhttp://www.kernel.org/"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:desert_dog_software:pinnacle_cart:3.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5BF6151-DD9E-45EF-B47A-8314240D29A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/pinnacle-cart-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17794",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/pinnacle-cart-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category_id parameter in (a) store_special_offers.php and (b) store.php, and (2) prod_id parameter in (c) cart.php and (d) product_info.php.  NOTE: this issue also produces resultant full path disclosure from invalid SQL queries."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pentasoft_corp.:avactis_shopping_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.2",
            "matchCriteriaId" : "A3FD4197-0B33-4D00-BEDA-A4C9CA5091E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/avactis-shopping-cart-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/avactis-shopping-cart-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter in (a) store_special_offers.php and (b) store.php and (2) prod_id parameter in (c) product_info.php.  NOTE: this issue might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pentasoft_corp.:avactis_shopping_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.2",
            "matchCriteriaId" : "A3FD4197-0B33-4D00-BEDA-A4C9CA5091E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/avactis-shopping-cart-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/avactis-shopping-cart-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_express_software:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05328FC0-D20B-44AD-A72B-19D125553067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_express_software:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31397846-474A-46B3-8210-ADC20B93E4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_express_software:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CE1AB1-1745-4C19-B3AC-72A033D69F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:unity_express:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7583D706-3702-4571-BD2C-527E5337F6E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19881",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sloughflash:sf-users:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7713A55-5BB6-4BD6-BFE8-80BADB7CA08F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432727/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432727/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fileprotection_express:fileprotection_express:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C874A06-1396-4B1A-9BC7-2A7700F2A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fileprotection_express:fileprotection_express:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B64EF66-3404-467C-8ED7-8FBBEC182AF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432728/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432728/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_practical_solutions:request_tracker:3.5.head:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E51194-1FD0-4291-987C-6202DC22C0D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/rt-request-tracker-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/rt-request-tracker-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en ArgoSoft FTP Server 1.4.3.6 permite a atacantes remotos ejecutar código arbitrario a través de Unicode en el comando RNTO, según lo demostrado por el Infigo FTPStress Fuzzer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B7406-3481-4692-A897-7B8E4BCF4ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A87072-6A64-4400-B839-D7E178AA03AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47EA17F1-AE32-43AF-B11C-13B8D1D5B448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED4F896-AC49-44C5-A7DE-13052F6B9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C462CC04-10A2-4F4C-9E6D-139599D03E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8BA120-D506-4688-B524-275A1FB54C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BEE9B9-B5B9-4FC5-8BE7-554629042868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA27A4CC-41E2-424D-A9EF-93FE0D8F1DEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE4FC9C-2281-4BDD-88FA-8E94D5CA08FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0097A7-8713-4979-A6CD-F5086741706D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68592EA7-2237-4BF0-8769-5942B6D065D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9955ED25-075F-4818-BFAD-070D19EBBA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F374225-32E4-4FDF-B8D0-1576CCFEC1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19774B84-7368-4568-8E92-ECD8F19FC2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2383B139-13E2-416B-9E2E-4D945635CE93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argosoft:ftp_server:1.4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DFB123-9769-4A4B-9BCA-29195F5B1A5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114658586018818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19934",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17789",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114658586018818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en WDM.exe en WarFTPD permite a atacantes remotos ejecutar código arbitrario a través de argumentos no especificados, según lo demostrado por el Infigo FTPStress Fuzzer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgaa:warftpd:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51B8B1A-B6DE-4102-9DE8-9EDD4D966F62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgaa:warftpd:1.82_rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48ECDE60-5387-4C2D-B56C-6930ABB34C4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jgaa:warftpd:1.82_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588C04F1-B594-44FC-8ABF-885AA949E839"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114658586018818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114658586018818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Gene6 FTP Server 3.1.0 allows remote authenticated attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to (1) MKD or (2) XMKD, as demonstrated by the Infigo FTPStress Fuzzer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gene6:g6_ftp_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58EE28D4-0BE0-4255-9430-8E94DF6A8107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432839/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17810",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432839/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en FileZilla FTP Server 2.2.22 permite a atacantes remotos autenticados provocar una denegación de servicio y posiblemente ejecutar código arbitrario a través de un (1) PORT o (2) PASS largo seguido por el comando MLSD, o (2) la interfaz del servidor remoto, según lo demostrado por el Infigo FTPStress Fuzzer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla:filezilla_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F16B8A3-6613-43E6-A91F-8066A27EBDA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114658586018818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114658586018818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VHCS) allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, or (3) year parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78ABC9B-01FE-463A-B7A4-02555636BF19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/hm/vhcs.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432711",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17790",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/hm/vhcs.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) show.php or (2) top.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftrainsoft:fast_click:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F33DEFF-5F73-470D-AC4D-6283542EB53A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/advisory/fc/fastclick.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432963/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/advisory/fc/fastclick.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432963/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) new_input, (2) new_url, or (3) new_name parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_design_x:php_linkliste:1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1778DEAE-8FD4-400D-A7E6-6E32F10EB921"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/05/php-linkliste-10b-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19925",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/05/php-linkliste-10b-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitdamaged:geoblog:mod_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2698AD09-8823-4B89-A9C0-624BC035F637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432720/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17784",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.subjectzero.net/research/geoblog.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432720/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.subjectzero.net/research/geoblog.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) ProductIndex parameter to browse0.htm, (3) rowcolor parameter to result.asp, or (4) heading parameter to result.asp.  NOTE: vectors 1 and 2 might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartwin_technology:cyberoffice_warehouse_builder:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8A8353-1CFE-42FB-B380-E37AEF76EE79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19889",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25197",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25198",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25199",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17829",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartwin_technology:cyberoffice_warehouse_builder:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8A8353-1CFE-42FB-B380-E37AEF76EE79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19889",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long argument to the (1) NLST or (2) APPE commands, as demonstrated by the Infigo FTPStress Fuzzer."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Golden FTP Server Pro 2.70 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y ejecutar código arbitrario a través de un argumento largo para el comando (1) NLST o (2) APPE, según lo demostrado por el Infigo FTPStress Fuzzer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:1.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD40452-E6BB-4138-979F-E88BE3E1AFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kmint21_software:golden_ftp_server:2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A00C191F-5576-4681-A78E-0B47C6F34B3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114658586018818&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19917",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17801",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114658586018818&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/tools",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albinator:albinator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.8",
            "matchCriteriaId" : "30EA9D58-064F-4BD7-A70A-C60F32E44CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17826",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1643",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Config_rootdir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albinator:albinator:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50997045-6678-4F79-8555-E43A00434559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17825",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truecrypt_foundation:truecrypt:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C53DDC-AEBF-4115-A91F-5ADF298F6539"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-April/003152.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19903",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.truecrypt.org/history.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-April/003152.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.truecrypt.org/history.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter.  NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that \"We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chadha_software_technologies:phpkb_knowledge_base:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "33B4EC84-ADB2-438E-8B70-D77BC3166C56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19913",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-May/000753.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-May/000775.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-May/000753.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-May/000775.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1) /photos/themes/default/ and (2) /photos/themes/testing/ URIs, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenphoto:zenphoto:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8F598B-67C4-4255-8E5F-8C01EC8A8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenphoto:zenphoto:1.0.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111DD9F6-C4D7-4154-B9E7-235C870F54E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenphoto:zenphoto:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88921267-D971-4E18-A61E-2E9919DC62E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432718/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17779",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://zone14.free.fr/advisories/2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432718/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://zone14.free.fr/advisories/2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) a parameter in i.php, and the (2) album and (3) image parameters in index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenphoto:zenphoto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1_beta",
            "matchCriteriaId" : "9F641C86-CDCA-49EB-A92F-1CB78514591F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenphoto:zenphoto:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8F598B-67C4-4255-8E5F-8C01EC8A8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenphoto:zenphoto:1.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88921267-D971-4E18-A61E-2E9919DC62E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/432718/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17779",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://zone14.free.fr/advisories/2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432718/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://zone14.free.fr/advisories/2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nzenphoto, zenphoto, 1.0.2 beta"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Body field of a private message (PM), (2) BBCode, or (3) a forum post."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmscout:cmscout:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10",
            "matchCriteriaId" : "F83C06CD-AC90-4A7B-937D-BB9F0D4D1F8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19933",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25246",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432725/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17796",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432725/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nCMScout, CMScout, 1.21"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.  NOTE: this issue can be used to trigger path disclosure.  In addition, it might be primary to vector 1 in CVE-2006-1135."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:servous:sblog:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315E8F45-DBA4-40ED-8ECE-9C2CF079662D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432724/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.subjectzero.net/research/sblog.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432724/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.subjectzero.net/research/sblog.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T12:38:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in (1) openwebmail-send.pl, (2) openwebmail-advsearch.pl, (3) openwebmail-folder.pl, (4) openwebmail-prefs.pl, (5) openwebmail-abook.pl, (6) openwebmail-read.pl, (7) openwebmail-cal.pl, and (8) openwebmail-webdisk.pl.  NOTE: the openwebmail-main.pl vector is already covered by CVE-2005-2863."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.51",
            "matchCriteriaId" : "5C796754-5EF1-4ED9-8FBE-852651FECB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B94ECAA-1148-4A84-93B4-56B56A0938AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA86C04C-D31E-4B0B-A8E0-13A5FED7644E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62736A5C-7E68-4E47-9954-D62C913E3AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D1462D-CC70-41CC-BAF4-48CD0ECAFD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50009537-0820-4CDB-94E1-2222040F234C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53783E69-4E5E-4AAD-A280-338E131478C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F32A212-11C1-432A-9ECD-844CD4EC3EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D334D8-D50F-45DA-9267-F2A4722BF4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC7B40-834B-4476-8A0D-FDEA86C436D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467BEC56-9C42-4180-B422-F0099AF77B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC478ABF-19F8-4195-AA37-23668E2474EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A87C77-5F6E-497D-A6A0-7D68D5E27E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "162770C7-AF47-437C-A0D7-9F92D86DC951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C718757-E831-4C17-A9E6-BB31A20AC8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE131E5-B180-4751-B81B-459CA0207DED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwebmail.acatysmoof.com/archive/html/owm-announce/owm-announce.200605/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/shares/ow-shared.pl?rev1=232%3Brev2=233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/log/trunk/?rev=233&limit=33",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/open-webmail-251-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwebmail.acatysmoof.com/archive/html/owm-announce/owm-announce.200605/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/shares/ow-shared.pl?rev1=232%3Brev2=233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/log/trunk/?rev=233&limit=33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/open-webmail-251-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nOpen WebMail, Open WebMail, 2.52"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CA Resource Initialization Manager (CAIRIM) 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain \"problem state program\" that uses SVC to gain access to supervisor state, key 0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:resource_initialization_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "7A7BAFEB-8178-41E2-80AB-692B264F16A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016028",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/cairim-affprods.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/cairimsecurity-notice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433246/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17840",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1656",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/cairim-affprods.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnectw.ca.com/public/ca_common_docs/cairimsecurity-notice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433246/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all z/OS releases of this product prior to May 2, 2006.\r\nThis vulnerability is addressed in the 20060502 release of this product."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-04T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEE9847-81E2-478A-BFA8-8FCEAF536F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19948",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432731/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432952/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17793",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432731/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432952/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1052",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process."
      }, {
        "lang" : "es",
        "value" : "La lógica selinux_ptrace en hooks.c en SELinux para Linux 2.6.6 permite a usuarios locales con permisos ptrace cambiar el trazador SID a un SID de otro proceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=git-commits-head&m=114210002712363&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=selinux&m=114226465106131&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://selinuxnews.org/wp/index.php/2006/03/13/security-ptrace-bug-cve-2006-1052/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25232",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17830",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10102",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=git-commits-head&m=114210002712363&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=selinux&m=114226465106131&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://selinuxnews.org/wp/index.php/2006/03/13/security-ptrace-bug-cve-2006-1052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/281-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1516",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBEDF5A-5205-4012-B9B8-0FA304E7119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC969A5-52CC-44F2-A929-DE559A5D7624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54D7B3-DC9B-43AC-BE10-565BDF292A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7AC36-4E5D-483B-939E-257FDEDE48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2CEF98-8561-42D2-BCE5-3AAE4DC81ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6132F5E-ADE6-44C2-85BD-17408594789F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6779AC-EF41-46B5-8B26-07FA2537E5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C06765-D153-4D4D-B8CD-DB2E386E082B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E942FA-A458-4607-B48D-FCA112AFF1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E241159-FAA4-4DCF-AB68-BE36DF95D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F610D56-6BB6-48FB-B43A-670CE9168500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/365938",
        "source" : "security@debian.org"
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19929",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20002",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20073",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20076",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20223",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20241",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20253",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20333",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20424",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20625",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20762",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/29847",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/840",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1016017",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1071",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1073",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1079",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:084",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0544.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432733/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434164/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17780",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0028",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "security@debian.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1633",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1326/references",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.wisec.it/vulns.php?page=7",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26236",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9918",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/283-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/365938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0544.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432733/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434164/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1326/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wisec.it/vulns.php?page=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/283-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1517",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBEDF5A-5205-4012-B9B8-0FA304E7119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC969A5-52CC-44F2-A929-DE559A5D7624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54D7B3-DC9B-43AC-BE10-565BDF292A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7AC36-4E5D-483B-939E-257FDEDE48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2CEF98-8561-42D2-BCE5-3AAE4DC81ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6132F5E-ADE6-44C2-85BD-17408594789F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6779AC-EF41-46B5-8B26-07FA2537E5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C06765-D153-4D4D-B8CD-DB2E386E082B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E942FA-A458-4607-B48D-FCA112AFF1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E241159-FAA4-4DCF-AB68-BE36DF95D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F610D56-6BB6-48FB-B43A-670CE9168500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19929",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20002",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20073",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20076",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20223",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20241",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20253",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20333",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20424",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20625",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20762",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/29847",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/839",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1016016",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1071",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1073",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1079",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:084",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/25228",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0544.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432734/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434164/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17780",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0028",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "security@debian.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1633",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1326/references",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.wisec.it/vulns.php?page=8",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26228",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11036",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/283-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.599377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0544.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434164/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1326/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wisec.it/vulns.php?page=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/283-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1518",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E063D-355D-4A5A-A05F-36BF582DE36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F610D56-6BB6-48FB-B43A-670CE9168500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4F891-2A03-45A8-A49C-7F8B8F7D8407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/19929",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20241",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20253",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20333",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20762",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securityreason.com/securityalert/839",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1016016",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1071",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1073",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1079",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/602457",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432734/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17780",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1633",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.wisec.it/vulns.php?page=8",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26232",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/602457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wisec.it/vulns.php?page=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a \"possible bypass of attachment filter.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA7CEE3-7D36-4F9D-8AC6-3F4C55D360CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937A6092-48C9-4721-B069-0B46D3520E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38A0AAC-ACA8-44D3-B36A-741D01BE166F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AE0CAA-B5A4-4E3A-B997-A2858E88CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AC0D46-2096-4006-8FED-A67AFCE2ED98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F931B5E-6F02-48F6-8DAB-C0D796DFC2A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B391EF70-D407-4087-96CF-B925CA2799B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D64B85-51A2-47BC-94A2-8C9980CC573D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AB197E-4F2E-4976-B6F7-17EB8A8BFBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:kerio_mailserver:6.1.3_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "402EE4C7-77D0-4C06-8407-9F69F4059890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19875",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/kms_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kerio.com/kms_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod.php) for Invision Power Board 2.1.5 allows remote authenticated moderators to execute arbitrary SQL commands via the selectedpids parameter, which bypasses an integer value check when the $id variable is an array."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE478AB9-7ED4-4FDD-8990-CC4442CFA416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB960ACC-74D4-4AFB-886C-11EB5180DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA6316-7E7E-4A6B-AA54-1846198D64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70C944-F70E-49F4-AA9C-D19148925C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAF5259-D99A-45A1-8DD4-C6858B302272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2800F-3A8C-4B63-B754-D921DFF79496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8BA41-7876-4738-A68A-2162E28A3AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF761A-6459-42B0-BCB8-F735FBDD6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpo",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19901",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432591/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432948/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17837",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432591/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432948/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The audio_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel crash) by using the audiosetinfo ioctl to change the sample rate of an audio device."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-014.txt.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016004",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-014.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultravnc:ultravnc:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C1C09F-CB74-4DD9-8DA9-ADF118ED4407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0057.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17824",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) hash and (2) page parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planetluc:mynews:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE74C2D-EFAA-4AC7-BBFA-B88E67545FD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cyber-soldiers.org/Dream/mynews.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/25223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17823",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cyber-soldiers.org/Dream/mynews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/25223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via (1) the transtype parameter in an add action or (2) entry parameter in an edit action.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pacheckbook:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD9F4D1-9A16-4B50-99E4-DCBE84D5E9F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/pacheckbook-1.1-mutlsql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/pacheckbook-1.1-mutlsql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbitrary web script or HTML via the path parameter.  NOTE: this issue might be resultant from the directory traversal vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:321soft:php-gallery:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D40E39C-5799-4186-8514-EAC8FB881544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19924",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17812",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:321soft:php-gallery:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D40E39C-5799-4186-8514-EAC8FB881544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17812",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or (2) PASS command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:karjasoft:sami_ftp_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075B214B-CFFE-408E-B341-FF9C5B43A51E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432944/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432944/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hostapd 0.3.7-2 allows remote attackers to cause a denial of service (segmentation fault) via an unspecified value in the key_data_length field of an EAPoL frame."
      }, {
        "lang" : "es",
        "value" : "Hostapd 0.3.7-2 permite a atacantes remotos provocar una denegación de servicio (fallo de segmentación) a través de un valor no especificado en el campo key_data_length de un marco EAPoL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hostapd:hostapd:0.3.7_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C1BDB7-0CD7-4C5C-848C-5AFFFEAE8690"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19966",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php.  NOTE: this issue has also been reported to affect 1.7.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4images:image_gallery_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.2",
            "matchCriteriaId" : "9F9D7FB6-C81E-4D73-BB40-A392EDC3B99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4images:image_gallery_management_system:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2126E4DE-28AD-4712-9D46-092D8F774780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19908",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17748",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2023-11-07T01:58:46.297",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2181.  Reason: This candidate is a duplicate of CVE-2006-2181.  Notes: All CVE users should reference CVE-2006-2181 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pforums parameter to (1) misc.php and (2) member.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devsyn:open_bulletin_board:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5283FE38-D643-4B7E-A0A1-CED2A909D981"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432592/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432592/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BC2011-5D19-4AF2-BCCD-38A03D0175FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/17839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T12:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via \"exceptional conditions\" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19762",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-41/advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/338828",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437099/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-41/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/338828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437099/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Failed exploit attempts will likely crash the affected application."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one ejabberd 1.1.1_1 and earlier, generates an installer that allows local users to cause a denial of service via a symlink attack on the bitrock_installer.log temporary file.  NOTE: it is possible that this vulnerability is present in other products that use this installer."
      }, {
        "lang" : "es",
        "value" : "Una herramienta de generación de instaladores de terceros, posiblemente BitRock InstallBuilder, usada en productos como Process-one ejabberd 1.1.1_1 y anteriores, genera un instalador que permite a usuarios locales causar una denegación de servicio mediante un ataque de enlaces simbólicos en el fichero temporal bitrock_installer.log. NOTA: Es posible que esta vulnerabilidad esté presente en otros productos que utilicen este instalador. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrock:install_builder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.0",
            "matchCriteriaId" : "F8BD54A9-E485-4F7B-81B2-018F152CF27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1.1",
            "matchCriteriaId" : "F637CBEC-0987-4204-BCF6-C3B9DC2FAAA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:process-one:ejabberd:1.1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46528149-3D63-4E68-9209-DAFA55B3A855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19928",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432719/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17804",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432719/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nProcess-one, ejabberd, 1.1.1_2\r\nBitRock, Install Builder, 3.7.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service (daemon crash) via a request for a URI composed of several \"\\\" (backslash) characters."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en zawhttpd 0.8.23, y posiblemente versiones anteriores, permite a atacantes remotos causar una denegación de servicio (caída del demonio) mediante una petición de una URI compuesta varios caractéres \"\\\" (contrabarra).\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:norz:zawhttpd:0.8.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483FEA2D-F885-46CA-B312-74BE63B4D4B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5OP0315IKK.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432955/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17814",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5OP0315IKK.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432955/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE."
      }, {
        "lang" : "es",
        "value" : "RIPd en Quagga 0.98 y 0.99 anteriores a 20060503 no implementa adecuadamente configuraciones que (1) deshabiliten RIPv1 o (2) necesiten autenticación MD5 o en texto plano, lo que permite a atacantes remotos obtener información sensible (estado de encaminamiento) mediante paquetes \"REQUEST\" como \"SEND UPDATE\".º"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6ADB9F6-B519-45D0-966F-F095372FBB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1B30CC-478C-4BD1-AF4C-D126B8CCE8D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.quagga.net/show_bug.cgi?id=261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19910",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20221",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20421",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21159",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0525.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0533.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432822/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432823/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/284-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.quagga.net/show_bug.cgi?id=261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0525.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0533.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432822/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432823/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/284-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets."
      }, {
        "lang" : "es",
        "value" : "RIPd en Quagga 0.98 y 0.99 anteriores a 20060503 no imponen adecuadamente los requerimientos de autenticación de de RIPv2, lo que permite a atacantes remotos modificar el estado de encaminamiento mediante paquetes RIPv1 \"RESPONSE\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga_routing_software_suite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.3",
            "matchCriteriaId" : "26EE7E06-CE27-4782-9A53-35993AC53CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga_routing_software_suite:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18918EDF-53FF-4841-9386-5ED3F168B3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435E018F-DDB1-4909-B808-A45315AFECE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA29EC39-0599-442C-A9E4-1956C6C7AC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga_routing_software_suite:0.98.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BBAC60-F40D-4ED1-9CAD-13C0184F05A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.quagga.net/show_bug.cgi?id=262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19910",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20221",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20421",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21159",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0525.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0533.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432823/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432856/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/284-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.quagga.net/show_bug.cgi?id=262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0525.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0533.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432823/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432856/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/284-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en XM Easy Personal FTP Server 4.3 y anteriores permite a atacantes remotos ejecutar código de su elección, posiblemente mediante una orden USER con un nombre de usuario largo.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3",
            "matchCriteriaId" : "5AA8C724-0F14-4DEE-AB0C-17F9B5D604B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432960/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432960/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en XM Easy Personal FTP Server 4.2 y 5.0.1 permite a usuarios remotos validados causar una denegación de servicio mediante un argumento largo al comando \"PORT\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59536D76-CD94-496D-B605-F64876FD1BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E80D2C1-0624-4D62-AD67-F882B661C12D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0606-exploits/xmepftp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.packetstormsecurity.org/0606-exploits/xmepftp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the req_message parameter, because the value of the redirect_url parameter is not sanitized."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A94FF3-C732-4552-A32B-53C4739F7E52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19986",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.11_to_1.2.12.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/download/hdiff/hdiff-1.2.11_to_1.2.12.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432950/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.11_to_1.2.12.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/download/hdiff/hdiff-1.2.11_to_1.2.12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432950/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' (equals) character, which bypasses a restrictive regular expression that attempts to remove onmouseover and other events."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w-agora:w-agora:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "619CAE5F-664E-46B5-AF93-0F0F1B0CC37B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432457/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17751",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432457/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6457C946-123B-4B85-9253-D284A7A16A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0ECEAF-401A-434E-9B0A-1A234BAEFC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E751FA0E-0DF4-4F81-912A-1A132640246D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F61AC6-EDF6-4818-BA51-3EAA299680B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32984D8-9631-407B-834E-303B9405A425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB44A872-3FE2-47E9-BA84-B6E1015E1973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F020080D-7181-400D-988E-6844D1653464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D08038-9815-4222-9CD3-1211FE5954A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE43EA96-5B3C-498F-A040-C800821DA49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236F2BBF-0CF5-465E-9E65-8AD6D17F57A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF6B1F4-6313-4BF4-AD87-431A1C9D40C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA031086-95E4-4447-A06B-3B2926E3265F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDEBEDA-437A-4942-8A71-7B25DD558BCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB8A78E-DAB9-4A72-BC54-58230E1E9B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D74ED1-34C5-4F95-A941-83664AFFF2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0747C1A9-C404-4FBD-AA8F-9DBB70FEB4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3B1AD4-9EA0-4D86-90E1-3366FBC5629D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E483BD0-CAB9-4DA0-AAA4-A934B8318FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F04FAB1-A558-4F93-9FBF-043DE259A813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189A733-3130-41B4-94DD-E99E294D0FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEE5695-DC49-445D-864A-4739E16DF762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBF146F-2CFA-4F14-BFBC-E01B58F9F72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D263CA-8B2C-4B66-8990-6224BAF52A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C9FCE-AD76-4E32-8FEC-EEFA0662BC04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7519FA-831A-41D7-AFC3-B9457E6DFB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB79AFD-493F-41F1-9EC1-8BCC0D28A914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8F091B-194A-4FC5-87F4-A76CB490F3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11716B49-A920-4A1B-BEA5-4105213B9731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756A7AF5-E502-4EDC-9693-4041C993E3BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9885BC3E-1854-4561-9906-FFAEECA5B6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B7759F-F228-436D-BC86-7317B0109C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB9BD19-1BF9-42D0-9E43-7D95EE010347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0A6E23-6456-4305-A7DA-8CA1D506D4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D985B9F0-5B4F-4120-8ECF-506C5F6179FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7E6096-58BF-47F1-982B-27A9ED735AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62362541-FE20-47ED-9E03-94216A3D43CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BD7019-BBA5-4D08-85C8-571D2EC03FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1D56A4-A03C-445C-993B-1AA12024D4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F563B1FD-FC1F-4304-8141-A1188A190835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4269ED1A-3031-4572-B134-62C6E533D176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140999A7-E9BB-4459-B3F8-48DF8F5DFE0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD75B0-24D0-40BA-A4FB-925BD5414298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED8F3C5-8E43-4B07-8224-38BF4774F4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EC88614-E782-447B-B854-955498FAAA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C1B8EE-3C12-452F-986E-6FD8A230685A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5AC6851-F63E-47D7-BDEF-3BFF39E94D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F5555-793D-4FAA-8CF4-578490CFAC6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E688CF0C-134B-49E2-AEB3-45ECACB8B5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D385327-D1FF-4A22-A0C0-0C5AA53590C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51329755-1DBF-40E1-960C-E924CDC4B22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE65AC5-C218-456F-86FB-1C8BEC3C4598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1412133F-3B44-43B6-A4FF-FF80E7B564E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55EE355-28A1-4955-9ADD-A8E02376C9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E942C13E-6B54-465F-8026-ED49BD7EA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF30CF-AD36-45EB-AF50-EB0533B20B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD078F82-361C-4B38-86E8-85E129F41A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ADBC1B-7835-4D63-AA86-EF056E008F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9831C92-7717-4650-8689-3C41B773C5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3521E7-572E-4ADD-AAF6-F1AE505B4BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73290B2-384B-4B0F-8763-EF4D5D7C39FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4728B3CD-5B54-4B0B-8967-DE7D9E1474F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F353B495-D69A-4831-9E5B-F15F8F749C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16647409-3ADD-4E86-A053-4A7B8365700E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5CA9F6-68FE-4412-8CD5-F85E970249F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A74354-1EAB-4A4F-A79C-C04E9BCDF594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A016A3-CAA9-4FCB-B909-F4163CE1E19E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A53B7C-8E9D-4DD6-8B00-628F7796A365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5AADA5-05DA-4660-9636-A3B737916A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2778FEDE-063B-4454-9FA7-F526334CF9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "989D471D-3F81-4018-A124-7FBEB3F4AB87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EA97AE-B2DD-40F8-81E1-467E895CE736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C82A6A-4548-4508-B337-1061E57D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A972BC-6956-4195-933C-F3694BFEFB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF5187-C008-4927-B5CB-A491768E9822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A39ECE-7C8D-4BB8-A408-08EA0879F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C67474C-3274-4F62-AF98-6953F9744522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5196B669-CF0F-4FED-9EAF-72F335436BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D799CAF5-BFC3-4A80-8AE2-D292B7F9D9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D3B905-FCD7-4136-A94C-76A95994CD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE172A1-D9A5-4FF7-B316-4E0BD639B35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42CB75B-355B-4D80-91EA-77723B275D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5EFEC7-D9B6-454A-A36A-C75874564FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED93D78-3BA8-43DB-B5AF-D2D3941C9DAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B16482-8058-46A8-9D56-DB73BFE32A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openvpn:openvpn_access_server:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F105F380-57BF-44BD-B31D-9D36DF9210A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openvpn.net/man.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openvpn.net/man.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905.  In addition, if the only attack vectors involve a user-assisted, local command line argument of a non-setuid program, this issue might not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine:0.99.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB39798-F8B4-4C20-95C4-4FC5DCB0495A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.debian.org/security/2006/dsa-1093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432598/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432598/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) site, (3) city, (4) state, (5) country, and possibly (6) name fields, which are viewed via viewguest.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:big_webmaster:big_webmaster_guestbook_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "097BB909-7888-4D30-8C53-A05E56E7E8CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045752.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432970/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045752.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432970/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML via the Comments field when signing the guestbook."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptsez:cute_guestbook:2006-02-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CACD8241-155F-4713-BA19-B4ABCF385072"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/CuteGuestbook.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432953/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/CuteGuestbook.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432953/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in BankTown Client Control (aka BtCxCtl20Com) 1.4.2.51817, and possibly 1.5.2.50209, allows remote attackers to execute arbitrary code via a long string in the first argument to SetBannerUrl.  NOTE: portions of these details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banktown:btcxctl20com_activex_control:1.4.2.51817:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448C299-8CAD-41F6-B9C4-FE401899B020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banktown:btcxctl20com_activex_control:1.5.2.50209:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B943417A-AD6F-4B3E-8A55-A102DA3F39C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19942",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432862/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433242/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17815",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432862/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433242/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in TyroCMS beta 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a javascript URI in an img BBCode tag, or a JavaScript event in a (2) url BBCode tag or (3) color BBCode tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tyrocms:tyrocms:beta_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D377DA7-8909-4F61-A918-10462C3080A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-05T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CodeMunkyX (aka free-php.net) Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI of the application."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codemunkyx:simple_poll:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114CB776-BD4F-4089-9D91-19B49DE65FE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.free-php.net/scripts/zip/5.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432577/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17771",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.free-php.net/scripts/zip/5.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432577/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "evaluatorSolution" : "This vulnerability can only be exploited when authentication is not required for the admin directory."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_arena:1.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C4563-76B2-4F37-9CAB-77FC4DB8915C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC83733-F8B0-4985-BB48-2DA85C5C4393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:return_to_castle_wolfenstein:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DCB2FA-2D06-44A8-AC99-D75D394A8A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:wolfenstein_enemy_territory:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09098A4E-B24E-4027-8D63-480F87E2A467"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19984",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433349/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17857",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433349/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-08T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25550AA8-8C79-48EA-A904-896B5B00077B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37231F4-DEC9-46A7-8686-9B3C710CA396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://awstats.sourceforge.net/awstats_security_news.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19969",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_33_awstats.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osreviews.net/reviews/comm/awstats",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25284",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vuxml.org/freebsd/2df297a2-dc74-11da-a22b-000c6ec775d9.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/285-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://awstats.sourceforge.net/awstats_security_news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_33_awstats.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osreviews.net/reviews/comm/awstats",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vuxml.org/freebsd/2df297a2-dc74-11da-a22b-000c6ec775d9.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/285-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED2D96-5CC9-4851-986A-C9ED5E2D96CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC150564-7413-401A-9DD8-8AD773F1D8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA0DDDD-C987-4DA6-ADEE-77B387C26A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49696766-ECCE-4903-AA54-271EFEA58B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.2.2.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A03476-8645-47EE-A139-C866F993B63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.2.3_\\(110\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "900DC321-4CEF-4810-8247-B82FE93F48BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.3.3_\\(133\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "422F8E64-2376-4E82-A1A2-916BFB7172AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A8528D-DF6A-4493-A77E-CBF08359F2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F90E9070-781D-4D3D-98EB-5B6DB9D3C75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026A2C0D-AD93-49DC-AF72-8C12AD565B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920FAF7C-2964-497B-B1F8-3B060AAB4C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D499F38-A34C-44D0-A061-C3AE08CF178B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E564B5-A39F-4837-93B8-1331CD975D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEDB9DD-C862-4783-9F96-88836424B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD36C4A-4B90-4012-B4A5-6081C413E302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39A993C-5A36-4D3F-B8B6-9B3252713127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C4F7D5-DCD0-409C-86BF-A96A5253DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198D129-76D0-4983-BFC4-8EC724FE1B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEECFAA-9DD5-4950-B9F1-CF8582225314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49566EAC-05AF-4880-8000-351AF538E4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E9FBEE-3213-47FA-8CBA-C285533265FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "118CBF59-DAD8-468E-B279-F6359E4624F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(7.202\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "957E6F8F-6881-44DE-A687-9D1E0C13F6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56328FE-F499-4325-AFEC-45BFEAB7662D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA2E425-904C-4070-8F5F-B81BCF3147F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604CF950-5D4B-4DC6-819E-0528B22CB05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12887E5-A2BB-4B1E-9621-2961458BCE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4.206\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5BE2F7-687C-477B-818B-A102526DF36D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999A0969-60EB-4B2E-A274-9F05D9F840E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "626E41D2-A5EF-493D-9486-3D9BC3793EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA31E4D-2215-4E4A-BCCC-B3D922CB752D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(3.210\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F16AD2C-1CC1-43D9-A944-F67071B62E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42FFBF7-9ADB-4F14-BED8-F2E53BEE7B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D16481-CA9A-4B4D-AC9D-3A4F0387FF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E4588E-6C1F-4720-8082-0EF299435CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24E0E92-59D7-4B16-8B0D-2FD0EE821D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED24C763-7558-4AC0-AE10-FDA3D3078D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC85ED3-B598-4A87-A2B8-8D3B52ECC2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1.200\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84CE24E-4ED6-43D0-A234-FBD24D22A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF84B9FE-7C6C-4578-A5A9-EF0D5EEEEC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3E2B4-3A36-44B5-90D3-1BF9FAD98579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C558CED8-8342-46CB-9F52-580B626D320E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F85D19E-6C26-429D-B876-F34238B9DAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09063867-0E64-4630-B35B-4CCA348E4DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F98CD7-A352-483C-9968-8FB2627A7CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97FE485-705F-4707-B6C6-0EF9E8A85D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B925E8-D2C2-4E8C-AC21-0C422245C482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9170562-872E-4C32-869C-B10FF35A925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0927A68-8BB2-4F03-8396-E9CACC158FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DDBA3-2AF4-4A0C-B219-6779BA931F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1.5\\(104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76AED68-8304-4BC6-9D98-64231B08A6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5226C9CC-6933-4F10-B426-B47782C606FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "757DAE9A-B25D-4B8A-A41B-66C2897B537E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3DC170-E279-4725-B9EE-6840B5685CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8091EDA9-BD18-47F7-8CEC-E086238647C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F867890-74A4-4892-B99A-27DB4603B873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE05B514-F094-4632-B25B-973F976F6409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3392428D-1A85-4472-A276-C482A78E2CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D74D2C-662B-4D24-89EE-3DB73F96BBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40954985-16E6-4F37-B014-6A55166AE093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C097809-1FEF-4417-A201-42291CC29122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6D5FD3-CF95-4A3B-9ADB-CEC77F73CA78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433270/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17883",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433270/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1172",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote attackers to execute arbitrary code via vectors related to the TDC Digital signature."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tdc:cryptomathic_cenroll_activex_control:1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EAFC1A3-1ECA-4FF7-95D1-BFBE688ACA1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cirt.dk/advisories/cirt-43-advisory.pdf",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19968",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016034",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/548689",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25282",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433079/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17852",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1675",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26255",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://cirt.dk/advisories/cirt-43-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/548689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433079/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2161",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 and 0.9.3-beta1, (3) CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 y 0.9.3-beta1, (3) CAM UnZip 4.0 y 4.3 y posiblemente en otros productos, permite a atacantes asistidos por usuario ejecutar código arbitrario a través de un archivo ZIP que contiene un archivo con un nombre de archivo largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cam_development:cam_unzip:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8513E54A-127C-4FA0-8C0E-103CAA8F4FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cam_development:cam_unzip:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA64724F-45C7-4F62-9FEB-2572967C40F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erik_dienske:abakt:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B46551EA-9E82-4631-B47E-C9F36508B39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erik_dienske:abakt:0.9.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECE43FF-694A-4CCD-A4CF-2D46D553A62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roger_aelbrecht:tzipbuilder:1.79.03.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8507AD05-5EC6-48FE-BAD7-77D8F338784C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114771024009857&w=2",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/19945",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19946",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20068",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-26/advisory",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-31/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-34/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/853",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016064",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016107",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433257/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434019/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434520/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17880",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1687",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1805",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1865",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.xs4all.nl/~edienske/abakt/releases.html#0.9.3-RC1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26275",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26435",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26549",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114771024009857&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-26/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-31/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-34/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433257/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434520/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xs4all.nl/~edienske/abakt/releases.html#0.9.3-RC1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL commands via the nid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuomas_airaksinen:newsadmin:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208FC1C5-08CB-48F7-8BF1-B2F687C24E7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/133/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/133/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the (1) web cache or (2) web proxy in Fujitsu NetShelter/FW allows remote attackers to cause a denial of service (device unresponsiveness) via certain DNS packets, as demonstrated by the OUSPG PROTOS DNS test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fujitsu:netshelter_fw:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835979BD-964F-4244-B839-9A9D2EF202A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fujitsu:netshelter_fw-l:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4671E210-12DA-4ECC-98DF-81DAE081C3BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fujitsu:netshelter_fw-m:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF3371A-C9E9-4A02-9DA8-A247D77B961B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fujitsu:netshelter_fw-p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0431F4D9-2B7D-4E5E-97AE-475A61A44B69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19894",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/955777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "All Fujitsu NetShelter/FW models E12Lxx and E11Lxx are affected except E11L27 and E12L31.  The listing of affected models is broad, but the following list is a list of exceptions:\r\n\r\nNetShelter/FW E11L27\r\nNetShelter/FW E12L31  \r\nNetShelter/FW-P E10L29\r\nNetShelter/FW-P E11L41 \r\nNetShelter/FW-L E10L31 \r\nNetShelter/FW-M E10L31"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.  NOTE: This is a different vulnerability than CVE-2006-2175."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftrainsoft:fast_click:sql_lite_1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DEE5B7-8111-41F0-8A5F-B37B5BA5FE2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftrainsoft:fast_click:sql_lite_1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BDFA98-AE07-484E-B628-30C797562D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016022",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/fc/fastclicksqllite.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432962/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17819",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/fc/fastclicksqllite.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432962/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with \"{\" (brace) characters to the USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acftp:acftp:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253C00FC-5BA9-444E-B884-1CFAAAFDF380"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19978",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25278",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) comentarii.php or (2) view.php.  NOTE: this issue might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web4future:news_portal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EABEF2B-B0BC-43E6-9F02-D6C507603D20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016027",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web4future:news_portal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EABEF2B-B0BC-43E6-9F02-D6C507603D20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/17880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016027",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in auction\\auction_common.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.0m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F5D33F-0B64-4723-A4E8-36B2C0414C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.2m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C0E5A1-0E90-42BB-92F4-6DECACC18BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.3m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F92D73E-5F07-4BDA-B7EB-312080DF4DB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/phpbb-auction-mod-remote-file.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19944",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/phpbb-auction-mod-remote-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:ublog:1.6_access_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06EE99CE-6F58-4825-8970-31534C321B16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/UBlog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19981",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433557/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/UBlog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433557/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81651E6E-201C-4513-BFAB-F19A4C1A6E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7059C029-D258-439B-B1E2-3302E4BAD836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BC98A1-5D3F-435D-A604-3F4CA9E13C74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19974",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433053/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433053/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:northern_solutions:xeneo_web_server:2.2.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5235D2F7-7F13-40A3-92FA-72CF74ACF129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19325",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-20/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-20/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) story, or (3) title parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "7371D19D-B133-4866-BC63-72931A646021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BB2223-5238-4E3D-895A-BE6793AE3A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4254A63A-3202-4D06-90B3-12D10511BC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A2D600-BEA7-4936-B210-91629B2EFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "674CC558-E3B7-4120-879A-0408A595C5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3793A0A-37B8-48C5-ACA3-A17F8482635B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAD595C-2110-4321-93D6-7B1E90CC8FC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://neosecurityteam.net/index.php?action=advisories&id=21",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17850",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://neosecurityteam.net/index.php?action=advisories&id=21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1) /inc/show.inc.php or (2) /inc/functions.inc.php, which reveal the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED757216-0908-4BB5-B770-A03A47993DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C85BCF-92B3-4D21-BD75-86D373950E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D266D44-2F49-4A97-BA46-585ED827D6EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.1.2_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C335052F-1379-422C-8B2E-8E5AB1F99CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_community_blog:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01E1174-734E-45CF-BD41-4D6731D401DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0142.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpost",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19973",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433076",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17851",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0142.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpost",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openfaq:openfaq:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5E13EF-B014-4490-845C-EF00D5947244"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20018",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433120/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433120/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execute arbitrary PHP code via a URL in the statitpath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otterware:statit:4_2006-02-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE7887E-E82F-4C81-AF49-DD6713AD0147"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20031",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service (application crash) via a username with a large number of newline characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intervations:filecopa:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6210FC1-91FA-448D-80EF-24350AB97CDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blacksecurity.org/exploits/38/FILECOPA_V1.01_and_Below_Pre_Authentication_Remote_Overflow/111.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20033",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blacksecurity.org/exploits/38/FILECOPA_V1.01_and_Below_Pre_Authentication_Remote_Overflow/111.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to (a) ArticleView.php, (2) forum_id parameter to (b) DiscView.php or (c) Discussions.php, (3) event_id parameter to (d) EventView.php, (4) AddVote and (5) answer_id parameter to (e) PollResults.php, or (7) mid parameter to (f) DiscReply.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creative_software:community_portal:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BFB6B3-52C0-4815-8841-18D96E7404D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/creative-community-portal-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19999",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/creative-community-portal-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the eqdkp_root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eqdkp:eqdkp:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E66D9-556D-4FE5-A35C-47AE6D35DBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eqdkp:eqdkp:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F2B657-FF13-48EE-87B3-1B6E84122B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eqdkp:eqdkp:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69E8ED7-ED63-461D-B5A0-0D1B407DFA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eqdkp:eqdkp:1.3_p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4ABA49-A71E-4936-80F3-2B5B9E90D83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20040",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in easyEvent 1.2 allows remote attackers to inject arbitrary web script or HTML via the curr_year parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faktorystudios:easyevent:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCBF950-92DF-4BEB-9648-5A181A0A8423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faktorystudios:easyevent:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA8893F-8889-45B4-BC25-A894D98BD299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faktorystudios:easyevent:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BADC141-4C5F-43E2-A0C1-0F890B8473D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20038",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxxcode:maxxschedule:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F395F98-15BD-4C4D-A7BF-AFBEE31572FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20039",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016093",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to execute arbitrary SQL commands via the txtLogon parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxxcode:maxxschedule:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F395F98-15BD-4C4D-A7BF-AFBEE31572FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20039",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1700",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD40E38-71BA-42AD-BEBB-D4AD05ADDF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6946291-0F27-4666-95C8-E744800D3EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/62406",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19997",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17885",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/62406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acal:acal:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC65DAB-2CCE-494F-B617-A8E388F2FC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acal:acal:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5406CCE0-2FC1-486E-B6C7-E97D6EED2E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acal:acal:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68F7883D-4E4B-47FD-8D56-4ACE4838AD39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20041",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17886",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary web script or HTML via the image parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "238FF55F-E3DE-441E-A857-01A3256F5CC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/singapore-0.9.7-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433250/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sgal.org/files/download/20060512-xss-patch.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/singapore-0.9.7-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433250/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sgal.org/files/download/20060512-xss-patch.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_programming:vp-asp:6.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD4728D-1E7E-43C4-AD42-6BF08F150CA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20004",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocean12_technologies:calendar_manager_pro:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF42D397-D5EE-429E-954D-EA4B290E9572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17877",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocean12_technologies:calendar_manager_pro:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF42D397-D5EE-429E-954D-EA4B290E9572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17877",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Chirpy! 0.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chirpy:chirpy:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD40C83-280E-48CC-BE16-CD1D81EC4DC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/apps/freshmeat/2006-05/0002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25194",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/apps/freshmeat/2006-05/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors in the \"email protocol inspectors,\" possibly (1) SMTP and (2) POP3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E5A18A-572A-4914-8AC7-AEF02C760574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5158D0-ED2B-4716-8A81-385562566A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C7737-404A-4EB3-9A1B-0091116D8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A47DCB-50D3-4CC0-874C-39FF8D09B2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE437407-E9D3-41A7-B5BF-62CD861B3830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810364F5-B6FA-47A2-A5DE-F886CEF1ED70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE280A4-C218-4D2F-88E3-718F19F0E4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591237E-DBA8-42F3-B4A2-BFD537AE0A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC5DAFA-24B9-4C5D-8F7B-9DDDDFAA2342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56C041A-5D92-4B7F-9962-A083E883EA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7223D79B-F096-4265-8D80-F5A41E5A1B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9F17CE-B48E-45A2-BFC9-0D27AF032F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D33CD1F-105E-43CC-B135-76E0AC8CACD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F501CC-BD8E-460F-9251-B492C979676E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84BE69E-9760-4ABE-A8C6-C96AD4ACB56A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD36E240-FDBB-4EB8-B2C2-7B59715EEDF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD7AF9A-54CD-4D15-9D41-D740CC48FF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D7D55B-887B-479D-9067-0CE457C25561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705BC91B-4583-418D-BF68-B219BC04EB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1D191B-ACAF-4871-B553-A55F99827EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7727351-0ED7-45DD-82DE-0FEE92699927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563E83E1-74C0-4312-A5C5-0223ADE55F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE72890F-2421-4A6B-A8F1-4325F824A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AC89E5-8B9C-4C6B-8976-6A4A6F922858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADAAD5F-3286-464E-A309-9454EE9A663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1437DE-E19A-4C2C-9077-DB1FF48772C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0089BE-856D-4998-BBFE-1F626A43377E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE81F49-05CE-4987-90C0-B6D077B65DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E19BC-6545-45E9-BE2B-0900323C80C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173804A3-04EE-484B-A0CF-8DFFE060EFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF1105-8B53-4EC7-B52A-9344BDC524CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9DC6F1-3DB7-48B3-8202-66450B95C0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D06E900-7F9A-4BF0-8411-718AEBFCF8AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7E58F5-627C-40BA-9ACE-0224530D62C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A07C4B-8A49-4126-A957-B16B5A79582B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFD255-A906-4902-9845-C33669CF9795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D0B5DC-4E24-4BCE-B58B-A1DCE2739E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.3_patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1FFCAD-7AE9-4A85-B22F-116A8E9ED441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA93A50-82A0-4965-A905-42A04DF3F0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.4_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15AA2B44-367D-44FE-AC99-EC91D3C59A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19947",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433585/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433585/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nKerio, WinRoute Firewall, 6.2.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in FlexCustomer 0.0.4 and earlier allows remote attackers to bypass authentication and execute arbitrary SQL commands via the admin and ordinary user interface, probably involving the (1) checkuser and (2) checkpass parameters to (a) admin/index.php, and (3) username and (4) password parameters to (b) index.php.  NOTE: it was later reported that 0.0.6 is also affected."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcustomer:flexcustomer:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A8FB0A-6798-4DD1-89D0-05D13A4775D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexcustomer:flexcustomer:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CC29E2-E623-40A7-9045-7A54C391103D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/858",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433125/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17864",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1690",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433125/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/7622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3897412E-B35E-44CE-91C6-6BBA9EB5B047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E310D0A0-AB13-44D3-847B-505D4E7EB011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0FF8C-1AEA-46C0-A867-F2728AA5E069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433126/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17865",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433126/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relative_script_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0916DF3D-71ED-423F-A2F4-842EE706ADDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433121/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17861",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433121/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T16:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.0_test1_0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A24A0C9A-0A44-4DA3-A462-92745D89387E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.0_test4_0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8710142-EFCF-470D-9AAE-9C95E3FCAB15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.2_0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7434FB8-8151-44BA-8C0B-768BC37A3F8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.3_1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA61789-022B-4DB2-8E76-E1DCC1C4172E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.6_1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44118C-EF65-417C-B92E-04406F685AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.10_1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281DE0AF-101D-4E77-9BAE-1F43138C2E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.13_1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E779FA87-52AE-4BF8-ADD1-2C708C1CFA57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.14_1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C341129C-68F2-49D0-A9CD-E62C51CF8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.15_1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90E1ED1-AF36-40EC-BDF2-60948C6FD020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:lksctp:2.6.16_1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02F4DA5-013E-4BB4-9640-02BFBDC0FA74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=35d63edb1c807bc5317e49592260e84637bc432e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200605-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19990",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=35d63edb1c807bc5317e49592260e84637bc432e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200605-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T16:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:stream_control_transmission_protocol:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.16",
            "matchCriteriaId" : "F0A871BF-96F3-4D42-8153-67C6EFDC193B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=62b08083ec3dbfd7e533c8d230dd1d8191a6e813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200605-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19990",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=62b08083ec3dbfd7e533c8d230dd1d8191a6e813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200605-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nLinux, SCTP, 2.6.17"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0BF547-FB9D-400C-8D42-7EB491823AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195A1824-AA90-4B0A-872C-33CA44D73E6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-07.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability affects all versions of Adobe, Dreamweaver, 8.0 before 8.0.2\r\nThis vulnerability is addressed in the following product releases:\r\nAdobe, Dreamweaver, 8.0.2\r\nCode update for Macromedia, Dreamweaver MX, 2004"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:stream_control_transmission_protocol:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D74A43C-4D2F-482A-B786-DCFA580C1770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-09T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to \"spillover of the receive buffer.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lksctp:stream_control_transmission_protocol:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.17",
            "matchCriteriaId" : "E7573BA7-D438-4383-9CCC-3C5110143558"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c3ceb4fb9667f34f1599a062efecf4cdc4a4ce5",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17955",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26433",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11295",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c3ceb4fb9667f34f1599a062efecf4cdc4a4ce5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0027",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-05-10T02:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E88E31D4-1120-4A18-BA65-E2C96B35E599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "01E472FC-3001-48A5-908D-B42467B3DBA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "71A2E549-5F21-4842-BEB3-380CD4029C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20029",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016048",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/303452",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17908",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-129A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1743",
        "source" : "secure@microsoft.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-019",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25556",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1818",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1996",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2035",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/303452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-129A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0034",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:distributed_transaction_coordinator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CE5AD3-C232-4C54-9A92-558D9E3DD708"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "35346A7B-2CB5-446D-B0C3-1F21D71A746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDCBCB8-DAA3-465F-ADDE-9143B8251989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "064F4E76-1B89-4FA5-97ED-64624285C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*",
            "matchCriteriaId" : "416F06DD-980E-4A54-822D-CBA499FD1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B86E0671-ED68-4549-B3AC-FD8BD79B0860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F66DC6FF-2B3D-4718-838F-9E055E89961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*",
            "matchCriteriaId" : "A08D0EA1-DA1B-4C52-883A-3F156F032517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB76E7EC-C396-4537-9065-4E815DA7097C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "DA267420-56C5-4697-B0AA-52932F78B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*",
            "matchCriteriaId" : "02BE9817-E1AE-4619-8302-CA7AA4167F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD026E2-B073-40A6-AD4A-8C76B9169B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "363E3895-A19B-42EC-B479-765168DC0B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*",
            "matchCriteriaId" : "88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFB3E49-3FB5-4947-856D-727CBFFBA543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "81B7961D-151D-4773-80CB-CCD0456BFEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*",
            "matchCriteriaId" : "12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B9236480-6450-42E1-B1FF-F336488A683A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B5CAF64E-98AA-4813-A2A2-5AC3387CF230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
            "matchCriteriaId" : "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*",
            "matchCriteriaId" : "EDDD8DA8-D074-4543-AEDF-F856B5567F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*",
            "matchCriteriaId" : "14F55877-A759-4C8A-84D5-70508E449799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "CA7BA525-6DB8-4444-934A-932AFED69816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "2FECD4B0-23A0-4C0B-9888-D28A5941D848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0238.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0269.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20000",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/863",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016047",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060509a.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25335",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433430/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433677/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17906",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1742",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25559",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1222",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1477",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1908",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0269.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060509a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433430/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433677/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the plaintext version of the master key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "A60B49A7-B569-4485-A6B3-E14B9FB96950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "FA889730-B2FF-4219-BBCA-A4364BA61EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.0.3:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "8731D5CC-A6F9-48DB-B1D1-FD50CEAC63D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "810AD2C1-62DB-4839-9E05-CC4210371F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.1.1:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "DFFE6A50-B704-42BB-8FFF-27E9F4D3B576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "535D5672-AE3F-4D5F-A253-C650298DBD2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_server:*:*:*:*:*",
            "matchCriteriaId" : "7CDA01B6-6887-40BB-B541-65F198D03219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:3.3:*:windows_nt:*:*:*:*:*",
            "matchCriteriaId" : "E01BE6C6-4DB4-47BA-BBE6-C06359320ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433286/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433301/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16743",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-003.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433301/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nCisco, Secure Access Control Server, 4.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1184",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability.  NOTE: this is a variant of CVE-2005-2119."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:distributed_transaction_coordinator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CE5AD3-C232-4C54-9A92-558D9E3DD708"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "35346A7B-2CB5-446D-B0C3-1F21D71A746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDCBCB8-DAA3-465F-ADDE-9143B8251989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "064F4E76-1B89-4FA5-97ED-64624285C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*",
            "matchCriteriaId" : "416F06DD-980E-4A54-822D-CBA499FD1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B86E0671-ED68-4549-B3AC-FD8BD79B0860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F66DC6FF-2B3D-4718-838F-9E055E89961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*",
            "matchCriteriaId" : "A08D0EA1-DA1B-4C52-883A-3F156F032517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB76E7EC-C396-4537-9065-4E815DA7097C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "DA267420-56C5-4697-B0AA-52932F78B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*",
            "matchCriteriaId" : "02BE9817-E1AE-4619-8302-CA7AA4167F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD026E2-B073-40A6-AD4A-8C76B9169B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "363E3895-A19B-42EC-B479-765168DC0B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*",
            "matchCriteriaId" : "88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFB3E49-3FB5-4947-856D-727CBFFBA543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "81B7961D-151D-4773-80CB-CCD0456BFEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*",
            "matchCriteriaId" : "12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B9236480-6450-42E1-B1FF-F336488A683A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B5CAF64E-98AA-4813-A2A2-5AC3387CF230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
            "matchCriteriaId" : "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*",
            "matchCriteriaId" : "EDDD8DA8-D074-4543-AEDF-F856B5567F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*",
            "matchCriteriaId" : "14F55877-A759-4C8A-84D5-70508E449799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "CA7BA525-6DB8-4444-934A-932AFED69816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "2FECD4B0-23A0-4C0B-9888-D28A5941D848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20000",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/864",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016047",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060509b.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25336",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433425/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17905",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1742",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25558",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1295",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1779",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1912",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1990",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060509b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433425/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6ADB9F6-B519-45D0-966F-F095372FBB49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1B30CC-478C-4BD1-AF4C-D126B8CCE8D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.quagga.net/pipermail/quagga-dev/2006-March/004052.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20221",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20421",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25245",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.quagga.net/news2.php?y=2006&m=5&d=4#id1146764580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0525.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0533.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/284-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.quagga.net/pipermail/quagga-dev/2006-March/004052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.quagga.net/news2.php?y=2006&m=5&d=4#id1146764580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0525.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0533.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/284-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (application crash) via a crafted OpenEXR (.exr) image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/27780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432587/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openexr/openexr/issues/564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432587/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/openexr/openexr/issues/564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-array (1) hrow parameter to (a) show.php or (b) index.php; the (2) Lsnrow parameter to (c) showcat.php; or the (3) rows parameter to index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabless:saphplesson:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B183641-76C5-4DAC-9C62-16FFD74D82B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20034",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433052/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433052/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find parameter in (a) search.php, and the (2) LID and (3) Rate parameters in (b) misc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabless:saphplesson:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B183641-76C5-4DAC-9C62-16FFD74D82B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20034",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433052/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433052/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the template parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openengine:openengine:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BACD83C-CEE5-4C9B-9092-B1681B9821CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openengine:openengine:1.8_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AFF99A-459E-4562-A7C6-937189A22CD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433229/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17871",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433229/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, then access it."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x-scripts:x-poll:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FB8376-A097-4CAE-9A91-F9D55B43408D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-May/000752.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20057",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433220/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1732",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-May/000752.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433220/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to the avatar parameter in register.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0B3DAA-5189-4604-9CBE-E0FE6C751513"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20007",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433131/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433131/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) auth.php and (2) auth_phpbb when the phpBB portal is enabled, and via a URL in the smf_root_path parameter in (3) auth.php and (4) auth_SMF when the SMF portal is enabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B680ADB-D7C7-40A0-B2F9-9E402166932D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D85E6FE-04F0-4918-AED2-D6BA84EAD0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACE5F10-2AE4-438C-9044-5CF81FB63547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BDBC4C-257E-47DE-B1C0-B7FB48379336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433252/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17875",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433252/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE56684-B98B-4642-93F3-8C6297246E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BD0DDD-51EC-40E6-8E6D-635E449478AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EA479E-E55B-45B2-9DD2-4E2D088AF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F49508-B7BC-4971-B3A7-279DCE45E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC9DF44-4883-422F-9FB8-57CDE7EA6C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD502BE-8878-461D-AA04-AA450F652DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B1B18B-F92C-4951-8442-DE11FE355840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6329F5E2-97BD-4D5B-A014-4CB3ABFDAB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D280AB8A-6162-47BB-9703-882EF3619B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C0C6A4-3C86-4464-9D27-16E18CE5ADB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85349E3B-08CE-4188-88A5-3515EA26E6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A3134F-784C-461A-B710-599A2C0A109A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:1.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4576DCDD-266F-4984-981E-A83CFFE62021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20003",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433249/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17873",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433249/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB68ED4-C23E-4873-A29A-7644460D25FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D42A87A-A157-44AA-BEF3-09A42CE15D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9A617-7752-4573-89E3-BA4608BD7174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B7036F-9200-4096-82BE-BAABF961DBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11527A7-4436-4363-84B1-64372C7DD07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1CBF1F-DC8B-4504-B1D0-6A482E8A4DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687FBDBF-7E0A-44BD-8DD9-070AAA0D5513"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19980",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433247/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17873",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433247/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allow remote attackers to execute arbitrary PHP code via a URL in the (1) rootSys and (2) clarolineRepositorySys parameters, and possibly the (3) lang_path, (4) extAuthSource, (5) thisAuthSource, (6) main_configuration_file_path, (7) phpDigIncCn, and (8) drs parameters to (a) testheaderpage.php and (b) resourcelinker.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.3",
            "matchCriteriaId" : "AA71F2ED-1ECD-4220-9726-5D50503EDD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos_community_release:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6807D3D-7B50-419C-A22E-78BD29BA079A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19576",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/forum/viewtopic.php?t=6848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1303",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/forum/viewtopic.php?t=6848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dokeos.com/wiki/index.php/Security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the fields in a user's profile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vision_source:vision_source_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6",
            "matchCriteriaId" : "8C001C99-9F82-43F8-81BF-BED3B1174603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433129/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433129/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0D4625-24B2-4BF7-B32B-7BCC12C8BD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8266D64B-B067-413E-BDA7-4AB770D4F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99BF964-2FC8-45B5-AD69-4790179B8AF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_19.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has released version 0.6.10 to address these issues"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0D4625-24B2-4BF7-B32B-7BCC12C8BD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8266D64B-B067-413E-BDA7-4AB770D4F570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99BF964-2FC8-45B5-AD69-4790179B8AF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20022",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_19.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17884",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_05_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 0.6.10."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) email, and (3) url parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:www.goel.ch:2005-comments-script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB73A8D8-E8FE-48F5-B1D6-901D5E356DA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/05/c2005-comments-script-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19996",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/05/c2005-comments-script-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inhouse_associates:ia-calendar:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDA021E-0758-41DD-AF3B-C05FE322E431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in (a) calendar_new.asp and (b) default.asp, and (2) ID parameter in (c) calendar_detail.asp.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inhouse_associates:ia-calendar:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BDA021E-0758-41DD-AF3B-C05FE322E431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expinion.net:multicalendars:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4068BB-F4F7-4704-A3D8-AA1AF18EEF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/multicalendars-3.0-sql-inj.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/multicalendars-3.0-sql-inj.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in (1) index.php and (2) galerie.php.  NOTE: this issue might be resultant from directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timobraun:dynamic_galerie:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB2D5BD-0259-4B55-A489-54BA5BDCAB36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19995",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad parameter to (1) index.php and (2) galerie.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timobraun:dynamic_galerie:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB2D5BD-0259-4B55-A489-54BA5BDCAB36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:14:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keyword parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keyvan1.com:edirectorypro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "3CB90627-52C4-40D8-BF66-2103D3BA0C76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/edirectorypro-sql-inj.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/edirectorypro-sql-inj.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the sv_allowdownload cvar is enabled, allows remote attackers to read arbitrary files from the server via \"..\" sequences in a .pk3 file request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AE0171-46F1-4137-99BE-4B825A403D6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045906.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433349/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045906.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433349/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "id Software has released patches to address this and other issues."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:tippingpoint_sms_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1.4477",
            "matchCriteriaId" : "8386EA42-F932-4562-A9AD-327BE51E2516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.3com.com/securityalert/alerts/3COM-06-002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433432/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.3com.com/securityalert/alerts/3COM-06-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433432/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to 3Com TippingPoint SMS Server version 2.2.1.4478"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T02:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:infotech_storage_system_library:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A590B1-2AF6-4FC2-B91E-5B53911340E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.reversemode.com/advisories/advisory-itss.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433435/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433833/30/5040/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433854/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17926",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1761",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.reversemode.com/advisories/advisory-itss.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433435/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433833/30/5040/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433854/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with \"invalid folder count values,\" which leads to heap corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.00",
            "versionEndExcluding" : "4.05",
            "matchCriteriaId" : "8DBC6DFC-6CDA-4F9C-ACCD-75FC9517DEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.1",
            "matchCriteriaId" : "FC446E06-1F15-4A58-8004-1591DE170DEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045897.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20028",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/869",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016041",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433272/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17876",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1730",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26305",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045897.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433272/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "The vendor has issued a fixed version"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-10T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_key_exchange:internet_key_exchange:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CADA641-1232-4EB0-A067-F0132A93A204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20050",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Sun has released patches to address the vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keyvan1:eimagepro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F66A4A7-B679-447B-812D-7267AE46A2CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20043",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17911",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin_default.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ozzywork:galeri:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCC81A3-3F45-465C-83B1-14F538ADD5FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20049",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dugallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7200D99C-8A4A-45D5-98CB-5E2443A43FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433410",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explorer COM object."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:5.04_build2321:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09169C1E-FCBA-4BE8-9C80-B3A985E992AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045916.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433360/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045916.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433360/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3, 4.90 SP2 and 4.91 SP2 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which triggers the overflows in the ndps_xdr_array function.  NOTE: this was originally reported to be a buffer overflow by Novell, but the original cause is an integer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:client:4.83:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "431631B7-CC4D-4596-95B7-8CA64EE901DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:client:4.90:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B72C2440-20E6-4A5A-B299-A328E3E74C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:client:4.91:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "78A17422-1FFE-4942-A6F1-01F99E4D42F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046048.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016052",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973719.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hustlelabs.com/novell_ndps_advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434017/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17931",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973719.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hustlelabs.com/novell_ndps_advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434017/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Jadu CMS allow remote attackers to inject arbitrary web script or HTML via the (1) forename, (2) surname, (3) reg_email, (4) email_conf, (5) company, (6) city, (7) postcode, or (8) telephone parameters to site/scripts/register.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jadu_limited:jadu_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090CA259-F596-4F51-84CE-F684A45AF56B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20053",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary web script or HTML via the title parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keyvan_janghorbani:epublisherpro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F2F838-9317-41AD-9D71-8AA35AFD1FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17907",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-11T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_baker:website_baker:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E912B82E-C82F-4DA6-BEC8-9092C32C2A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_baker:website_baker:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "471C8140-526F-4A09-9205-89A5EF3C2AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:website_baker:website_baker:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302ED220-5E54-46C9-9A69-8E0AC2AF43D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433130/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434714/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17868",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433130/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434714/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabinet (.CAB) files, which allows remote attackers to run an arbitrary executable file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verisign:i-nav:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64EE30B-69C6-4BB2-9309-C8D638563E32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433589/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433589/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the go_info[server][classes_root] parameter.  NOTE: the vendor has disputed this vulnerability, saying that session.inc.php is not under the web root in version 2.2, and register_globals is not enabled"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "696CEEE2-E385-4354-A1CB-1B3F2EEF5847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045855.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19994",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.howtoforge.com/forums/showthread.php?t=4123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437456/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1727",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-ISPConfig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045855.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.howtoforge.com/forums/showthread.php?t=4123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437456/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xorcrew.net/xpa/XPA-ISPConfig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memory section with weak permissions, which allows local users to read or modify passwords or other data, or cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intel:proset_wireless:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.33",
            "matchCriteriaId" : "227FDA95-B8B8-4264-B4B6-073A2013EB36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_content&task=view&id=10&Itemid=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17914",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_content&task=view&id=10&Itemid=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to the OpenTextFile method in Scripting.FileSystemObject."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3127A3FA-3110-4901-98A3-90B81BBB3FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20DAF53-53FE-4FF7-86C9-A7F525E04F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD493BE-1ACF-4107-AE8C-CBDC1AC0546E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC6DE5D-23E4-41B3-8E31-067ABAF27FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6FEDD6-2445-480A-83FB-CC2F5FB512DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C016844-21F0-40C6-B8A5-9CDA91859928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D86C38C-AA64-47EB-9142-660C3545C07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B7637B-EB4A-4E08-BAF8-812F4AD3A358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FA07AC-9D80-4B48-B42A-C4EC14F2F4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0EA2D0-8DA2-4740-B092-502C4A70D957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10445738-9B32-403B-8D46-020719BE271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3851C24-1C35-4205-A396-10F7947048C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353B45AB-160F-448E-885A-86FA4E6BCB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C12385-64AA-455C-B73F-52FBDBEC9239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27274F29-E259-48C1-95A0-5D25E07B7A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CFC6A1-0F93-40E6-8E46-E39BFDB2F919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0203.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0203.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a \".asa\" file, which bypasses the check for the \".asp\" extension but is executable on the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41048CAB-2D3D-481F-BE7A-7A3FD4183620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.4.9_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6DA9A4-6A5A-46EE-AA27-8206ABAFF5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.4.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2E3AA5-828A-4A4B-8E76-653245B02652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3127A3FA-3110-4901-98A3-90B81BBB3FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20DAF53-53FE-4FF7-86C9-A7F525E04F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD493BE-1ACF-4107-AE8C-CBDC1AC0546E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC6DE5D-23E4-41B3-8E31-067ABAF27FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6FEDD6-2445-480A-83FB-CC2F5FB512DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C016844-21F0-40C6-B8A5-9CDA91859928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D86C38C-AA64-47EB-9142-660C3545C07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B7637B-EB4A-4E08-BAF8-812F4AD3A358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FA07AC-9D80-4B48-B42A-C4EC14F2F4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0EA2D0-8DA2-4740-B092-502C4A70D957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10445738-9B32-403B-8D46-020719BE271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3851C24-1C35-4205-A396-10F7947048C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353B45AB-160F-448E-885A-86FA4E6BCB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C12385-64AA-455C-B73F-52FBDBEC9239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27274F29-E259-48C1-95A0-5D25E07B7A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CFC6A1-0F93-40E6-8E46-E39BFDB2F919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D5300-AF00-4C9B-98B1-EAC0B46376AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A84DAFA-8CEC-453E-A17C-5452372D2103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E859CA87-C613-4453-8AB2-56B6952F63CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D67AC6B-7D47-41F6-81E9-9A355C444C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CADB9F-F217-4E57-90FC-5526D950F457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4FD41D-7C18-4330-BB50-42132BE9AEE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nIdeal Science, Ideal BB, 1.5.4b"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the \".asp\" portion of the filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3127A3FA-3110-4901-98A3-90B81BBB3FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20DAF53-53FE-4FF7-86C9-A7F525E04F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD493BE-1ACF-4107-AE8C-CBDC1AC0546E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC6DE5D-23E4-41B3-8E31-067ABAF27FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6FEDD6-2445-480A-83FB-CC2F5FB512DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C016844-21F0-40C6-B8A5-9CDA91859928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D86C38C-AA64-47EB-9142-660C3545C07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B7637B-EB4A-4E08-BAF8-812F4AD3A358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FA07AC-9D80-4B48-B42A-C4EC14F2F4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0EA2D0-8DA2-4740-B092-502C4A70D957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10445738-9B32-403B-8D46-020719BE271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3851C24-1C35-4205-A396-10F7947048C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353B45AB-160F-448E-885A-86FA4E6BCB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C12385-64AA-455C-B73F-52FBDBEC9239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27274F29-E259-48C1-95A0-5D25E07B7A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CFC6A1-0F93-40E6-8E46-E39BFDB2F919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls.  NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2209."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3127A3FA-3110-4901-98A3-90B81BBB3FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20DAF53-53FE-4FF7-86C9-A7F525E04F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD493BE-1ACF-4107-AE8C-CBDC1AC0546E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC6DE5D-23E4-41B3-8E31-067ABAF27FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6FEDD6-2445-480A-83FB-CC2F5FB512DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C016844-21F0-40C6-B8A5-9CDA91859928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D86C38C-AA64-47EB-9142-660C3545C07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B7637B-EB4A-4E08-BAF8-812F4AD3A358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FA07AC-9D80-4B48-B42A-C4EC14F2F4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0EA2D0-8DA2-4740-B092-502C4A70D957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10445738-9B32-403B-8D46-020719BE271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3851C24-1C35-4205-A396-10F7947048C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353B45AB-160F-448E-885A-86FA4E6BCB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C12385-64AA-455C-B73F-52FBDBEC9239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27274F29-E259-48C1-95A0-5D25E07B7A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CFC6A1-0F93-40E6-8E46-E39BFDB2F919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3127A3FA-3110-4901-98A3-90B81BBB3FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F20DAF53-53FE-4FF7-86C9-A7F525E04F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD493BE-1ACF-4107-AE8C-CBDC1AC0546E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC6DE5D-23E4-41B3-8E31-067ABAF27FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6FEDD6-2445-480A-83FB-CC2F5FB512DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C016844-21F0-40C6-B8A5-9CDA91859928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D86C38C-AA64-47EB-9142-660C3545C07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B7637B-EB4A-4E08-BAF8-812F4AD3A358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5FA07AC-9D80-4B48-B42A-C4EC14F2F4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0EA2D0-8DA2-4740-B092-502C4A70D957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10445738-9B32-403B-8D46-020719BE271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3851C24-1C35-4205-A396-10F7947048C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353B45AB-160F-448E-885A-86FA4E6BCB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C12385-64AA-455C-B73F-52FBDBEC9239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27274F29-E259-48C1-95A0-5D25E07B7A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideal_science:idealbb:1.5.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CFC6A1-0F93-40E6-8E46-E39BFDB2F919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idealscience.com/ibb/posts.aspx?postID=24415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433248/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The transparent proxy feature of the Cisco Application Velocity System (AVS) 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_velocity_system_3110:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "817AC9BE-A161-4217-9CDC-3C2A9CCEFA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_velocity_system_3110:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDF2384-C0E1-4041-93D2-DB3B7703B497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:application_velocity_system_3120:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC0FF37-6B71-46E9-9052-06220BFF83AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060510-avs.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060510-avs.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in (1) editsite.php, (2) addsite.php, and (3) in.php.  NOTE: The config.php vector is already covered by CVE-2006-1749."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartisoft:phplistpro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.01",
            "matchCriteriaId" : "2C852CFA-D983-41DC-BB4A-C336C0D0FD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartisoft:phplistpro:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0449AA0-2D20-4FEC-8F71-E5B3F903355C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433285/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433562/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433285/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433562/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "180solutions Zango downloads \"required Adware components\" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:180solutions:zango:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E1E0A0-6FAF-44D5-A618-DBF0BE7B10D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secdev.zoller.lu/research/zango.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433566/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secdev.zoller.lu/research/zango.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433566/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The only known mitigation for this vulnerability is to block access to static.zangocash.com or zangocash.com althogether at the firewall."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  Also, this issue might be resultant from directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlyscript.info:online_universal_payment_system_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D07FB4-97CC-456B-A1A1-71CA589E2180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlyscript.info:online_universal_payment_system_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D07FB4-97CC-456B-A1A1-71CA589E2180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the DPRPC library (DPRPCNLM.NLM) NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which triggers the overflows in the ndps_xdr_array function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D328A81E-DC60-4B67-B707-F0AD9A6F48E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEB9CEA-9245-490F-88F6-EFD23B11A19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*",
            "matchCriteriaId" : "0669D0E2-AB83-44AE-A87C-C7EB7AA2953A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*",
            "matchCriteriaId" : "062E2A9A-CF88-4844-B5A1-7418722087D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8E031C-CE1F-410F-8F32-B3E33719C498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "87F80FDC-7851-4EA8-BC7D-87B85C6BB93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3AB68F-1D78-4217-9C56-B1B25F62FF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7A41C8-4332-4F8C-A297-6850C05B3EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046048.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016068",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973700.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hustlelabs.com/novell_ndps_advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434017/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17922",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1740",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973700.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hustlelabs.com/novell_ndps_advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434017/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply fix for Novell NetWare 6.5 Support Pack 3, 4, or 5."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to execute arbitrary SQL commands via the query string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angelinecms:angelinecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.5",
            "matchCriteriaId" : "40C8D6DB-5FCF-428E-BBAB-8965B07CB684"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433241/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.subjectzero.net/research/ang_CMS.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.subjectzero.net/research/ang_CMS.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for (1) adodb-access.inc.php, (2) adodb-ado.inc.php, (3) adodb-ado_access.inc, (4) adodb-ado_mssql.inc.php, (5) adodb-borland_ibase, (6) adodb-csv.inc.php, (7) adodb-db2.inc.php, (8) adodb-fbsql.inc.php, (9) adodb-firebird.inc.php, (10) adodb-ibase.inc.php, (11) adodb-informix.inc.php, (12) adodb-informix72.inc, (13) adodb-mssql.inc.php, (14) adodb-mssqlpo.inc.php, (15) adodb-mysql.inc.php, (16) adodb-mysqlt.inc.php, (17) adodb-oci8.inc.php, (18) adodb-oci805.inc.php, (19) adodb-oci8po.inc.php, and (20) adodb-odbc.inc.php, which reveal the path in various error messages; and via a direct request for the (21) lib/system/ directory and (22) possibly other lib/ directories, which provide a directory listing and \"architecture view.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angelinecms:angelinecms:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0ABBDF-5536-455E-8FAA-2060AEA330F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433241/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.subjectzero.net/research/ang_CMS.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.subjectzero.net/research/ang_CMS.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in \".php.gif\" and contains PHP code in EXIF metadata."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D8A288-20D3-42A2-BF19-14417D9063F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D79B94-BBA2-47D2-9D2C-5EF59FE6D7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92E863F-C72B-428E-A134-2CA5CA7058B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC61337-9477-46AC-AA5E-7722F594BCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBE45DB-64DA-4EC5-9DF0-749D533E7510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B24DACA-1F61-4AD6-9074-F330EFB28B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5335762A-EA49-48D3-8A0C-0C031FECBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15B4762-66F2-4277-A975-00401C78F381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA03A905-10E9-4EF5-B6C0-739ADEB16705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8CD847-F478-4DC1-92A8-A0DB3CBE3BBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19992",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433277/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17898",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433277/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via (1) a .. (dot dot) in the settings[locale] parameter in infusions/last_seen_users_panel/last_seen_users_panel.php, and (2) a ..  (dot dot) in the localeset parameter in setup.php.  NOTE: the vendor states that this issue might exist due to problems in third party local files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D8A288-20D3-42A2-BF19-14417D9063F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D79B94-BBA2-47D2-9D2C-5EF59FE6D7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92E863F-C72B-428E-A134-2CA5CA7058B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC61337-9477-46AC-AA5E-7722F594BCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBE45DB-64DA-4EC5-9DF0-749D533E7510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B24DACA-1F61-4AD6-9074-F330EFB28B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5335762A-EA49-48D3-8A0C-0C031FECBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15B4762-66F2-4277-A975-00401C78F381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA03A905-10E9-4EF5-B6C0-739ADEB16705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8CD847-F478-4DC1-92A8-A0DB3CBE3BBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19992",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=321",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433277/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17898",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433277/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5.0.3 allows remote attackers to cause a denial of service via a web page with a large number of IMG elements in which the SRC attribute is a mailto URI.  NOTE: another researcher found that the web page caused a temporary browser slowdown instead of a crash."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433534/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433568/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433984/30/5010/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityview.org/confirmed-bug-in-firefox-1503.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://securityreason.com/securityalert/876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433534/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433568/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433984/30/5010/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityview.org/confirmed-bug-in-firefox-1503.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in (1) usercp.php and (2) member.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-05-07/mybb111email-verification-in-user-activation-sql-injection-attack.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433231/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-05-07/mybb111email-verification-in-user-activation-sql-injection-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433231/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.48bits.com/advisories/rtldospath.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433583/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17934",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.48bits.com/advisories/rtldospath.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433583/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed.  NOTE: the vendor was unable to reproduce this issue in 3.5.x.  NOTE: this issue might be due to direct static code injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9C02DA-F2B3-4915-BC7E-B562C01EC1F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://b3hr0uz.persiangig.com/VbStyleVuln.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433580/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433678/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://b3hr0uz.persiangig.com/VbStyleVuln.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433580/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433678/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433564/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433564/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers to read arbitrary files via an absolute path in the getpage parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsl-g604t:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A13C0C-C808-41AC-8AB2-E04DF1669086"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016038",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gnucitizen.org/projects/router-hacking-challenge/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5JP0220IKK.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gnucitizen.org/projects/router-hacking-challenge/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5JP0220IKK.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the (1) admin.php or (2) settings.php page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planet_concept:planetstat:2005-01-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60EC744-5A39-4F1C-9582-4D665638A764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433372/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433372/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1859",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-12T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in __setlease in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to cause a denial of service (memory consumption) via unspecified actions related to an \"uninitialised return value,\" aka \"slab leak.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=blobdiff%3Bh=aa7f66091823dde953e15895dc427615701c39c7%3Bhp=e75ac392a313f3fad823bf2e46a03f29701e3e34%3Bhb=1f0e637c94a9b041833947c79110d6c02fff8618%3Bf=fs/locks.c",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=1f0e637c94a9b041833947c79110d6c02fff8618",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1767",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26438",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=blobdiff%3Bh=aa7f66091823dde953e15895dc427615701c39c7%3Bhp=e75ac392a313f3fad823bf2e46a03f29701e3e34%3Bhb=1f0e637c94a9b041833947c79110d6c02fff8618%3Bf=fs/locks.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=1f0e637c94a9b041833947c79110d6c02fff8618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1860",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-12T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lease_init in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to cause a denial of service (fcntl_setlease lockup) via actions that cause lease_init to free a lock that might not have been allocated on the stack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=blobdiff%3Bh=aa7f66091823dde953e15895dc427615701c39c7%3Bhp=e75ac392a313f3fad823bf2e46a03f29701e3e34%3Bhb=1f0e637c94a9b041833947c79110d6c02fff8618%3Bf=fs/locks.c",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=1f0e637c94a9b041833947c79110d6c02fff8618",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.16",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25425",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0028",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1767",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26437",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=blobdiff%3Bh=aa7f66091823dde953e15895dc427615701c39c7%3Bhp=e75ac392a313f3fad823bf2e46a03f29701e3e34%3Bhb=1f0e637c94a9b041833947c79110d6c02fff8618%3Bf=fs/locks.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=1f0e637c94a9b041833947c79110d6c02fff8618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in evoTopsites 2.x and evoTopsites Pro 2.x allows remote attackers to execute arbitrary SQL commands via the (1) cat_id and (2) id parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evo-dev:evotopsites:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B975B2-1F4F-4702-8F73-D57B3271E083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evo-dev:evotopsites_pro:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC67D5D-77CB-4D0A-A432-7C98ADB7D4CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19989",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hamid.ir/security/evotopsites.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17893",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hamid.ir/security/evotopsites.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex+) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password, or (3) User-Agent HTTP header in the Hack Log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lethal_penguin:passmasterflex:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A62E97-9662-4FD7-AF4D-C99C00446463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lethal_penguin:passmasterflexplus:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD858593-FE8C-4C3F-8FB0-800F008CF0AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0108.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0108.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_firewall:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "593124AA-5952-4A7E-AB55-D5D851C5DE0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:gateway_security:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031C9545-1CF1-46EF-B79C-7AD69E1B1C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:gateway_security:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA50974-633C-40EF-B11D-4897E4CD44D9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5000_series_2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00163129-F72A-4C56-A4E4-D254ED71FB63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5000_series_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BE5E88-1DA6-48A7-9811-97EE6582A627"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20082",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.05.10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016057",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016058",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433876/30/5040/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17936",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1764",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.05.10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433876/30/5040/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote attackers to bypass authentication for the Welcome Page via a request to the default context root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20025",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24010245",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24010245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote attackers to inject arbitrary web script or HTML via the searchTerm parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adventnet:manageengine_opmanager:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9806A588-661A-4F0F-B9E1-E408211BA55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20067",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc/elementz.php in AliPAGER 1.5, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the ubild parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax_softwares:alipager:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7265B02-07EB-4C49-BB94-E679BF6E7A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax_softwares:alipager:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5018E90D-79C4-424D-97A3-5CA587BEB202"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/alipager.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/alipager.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inc/elementz.php in AliPAGER 1.5 allows remote attackers to inject arbitrary web script or HTML via the ubild parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.  NOTE: this issue might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roostercode_ajax_softwares:alipager:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DE9FF0-0117-4D19-B9EA-AB0B3C1DC9C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to (1) SMTP AUTH or (2) APOP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B015084D-8E04-49FE-AF52-B83A4A70F92D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90CD719-1B4D-43DA-BB8A-6E36E3053FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19987",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=415350",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17894",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=415350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via \"'\" characters, and possibly other invalid values, in (1) the id parameter to form_grupo.html, or requests to the (2) archivos/ and (3) files/ directories.  NOTE: this issue might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oasyssoft:e-business_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.4",
            "matchCriteriaId" : "4376297B-1E53-405B-AFFD-CF31DDA17E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oasyssoft:e-business_designer:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC010B7-67D7-47CB-B99C-2E485DCF5E3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20071",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433807/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433807/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: this issue might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oasyssoft:e-business_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.4",
            "matchCriteriaId" : "4376297B-1E53-405B-AFFD-CF31DDA17E22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20071",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433807/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433807/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, or (3) common/html_editor/html_editor.html.  NOTE: this can also be used for cross-site scripting (XSS) attacks by uploading cascading style sheet (.CSS) files."
      }, {
        "lang" : "es",
        "value" : "E-Business Designer (eBD) 3.1.4 y versiones anteriores permite a atacantes remotos subir o modificar archivos arbitrarios y ejecutar código arbitrario, a través de una petición directa a (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html o (3) common/html_editor/html_editor.html. NOTA: ésto también puede ser usado para ataques XSS mediante la carga de archivos (.CSS) de hoja de estilo en cascada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oasyssoft:e-business_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.4",
            "matchCriteriaId" : "4376297B-1E53-405B-AFFD-CF31DDA17E22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.oasyssoft.com/ebd-devel/200605/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115047779610633&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20071",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433807/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.oasyssoft.com/ebd-devel/200605/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115047779610633&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433807/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed font information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.4",
            "matchCriteriaId" : "EEAFBED2-7F11-42F2-ADAF-14998633BE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F310A8-F760-4059-987D-42369F360DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71BC599-FCBE-4F1F-AA24-41AF91F82226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ADED98-62C6-4961-894C-1D26E3B3EE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F522CEA4-B3BB-4C94-B070-6679EEA43439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B630944-F838-4C02-90D4-F5EB2A073CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9066C81B-A69F-450D-8606-5E29AF1AD286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71285AD2-3966-4817-B630-8335BE985D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2458480E-F222-452A-AB21-933F924F8F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30C83A78-6BB9-443E-B508-CC6F8D157A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61463F4F-BBE0-42AA-AC22-8F39E94EB520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file with malformed image data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute arbitrary code via a crafted JPEG image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/289705",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/289705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted QuickTime movie (.MOV)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.4",
            "matchCriteriaId" : "EEAFBED2-7F11-42F2-ADAF-14998633BE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime movie (.MOV), as demonstrated via a large size for a udta Atom."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.4",
            "matchCriteriaId" : "EEAFBED2-7F11-42F2-ADAF-14998633BE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045987.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secway.org/advisory/AD20060512.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433810/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045987.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secway.org/advisory/AD20060512.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433810/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash (SWF) file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.4",
            "matchCriteriaId" : "EEAFBED2-7F11-42F2-ADAF-14998633BE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime H.264 (M4V) video format file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.4",
            "matchCriteriaId" : "EEAFBED2-7F11-42F2-ADAF-14998633BE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43E39C4-6A08-4C38-BC7D-573F40978527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a H.264 (M4V) video format file with a certain modified size value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433828/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433828/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 (M4P) video format file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/587937",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/587937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreGraphics in Apple Mac OS X 10.4.6, when \"Enable access for assistive devices\" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"Enable access for assistive devices\" is on.\r\nThis vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the FTP server (FTPServer) in Apple Mac OS X 10.3.9 and 10.4.6 allows remote authenticated users to execute arbitrary code via vectors related to \"FTP server path name handling.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keychain in Apple Mac OS X 10.3.9 and 10.4.6 might allow an application to bypass a locked Keychain by first obtaining a reference to the Keychain when it is unlocked, then reusing that reference after the Keychain has been locked."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Finder in Apple Mac OS X 10.3.9 and 10.4.6 allows user-assisted attackers to execute arbitrary code by tricking a user into launching an Internet Location item that appears to use a safe URL scheme, but which actually has a different and more risky scheme."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted MacMIME encapsulated attachment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via an enriched text e-mail message with \"invalid color information\" that causes Mail to allocate and initialize arbitrary classes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the \"New MySQL root password\" that is provided, which causes the MySQL root password to be blank and allows local users to gain full privileges to that database."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to cause a denial of service (crash and connection interruption) via a QuickTime movie with a missing track, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted RTSP request, which is not properly handled during message logging."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Safari on Apple Mac OS X 10.4.6, when \"Open `safe' files after downloading\" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/519473",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/519473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-12T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function.  NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier because it is a distinct issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.4",
            "matchCriteriaId" : "EEAFBED2-7F11-42F2-ADAF-14998633BE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/24820",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/sp-x27-advisory.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/24820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-protocols.com/sp-x27-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-132B.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, QuickTime, 7.1 for Mac OS X (latest update)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1519",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:38.720",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2224.  Reason: This candidate is a duplicate of CVE-2006-2224.  Notes: All CVE users should reference CVE-2006-2224 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:47.867",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2344.  Reason: This candidate is a duplicate of CVE-2006-2344.  Notes: All CVE users should reference CVE-2006-2344 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAA6D2-F90D-431B-B616-9D1EBFB6F115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DFE67-4665-4475-ABD5-C44E5794304B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17964",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via unknown vectors in (1) NmConsole/Tools.asp and (2) NmConsole/DeviceSelection.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAA6D2-F90D-431B-B616-9D1EBFB6F115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DFE67-4665-4475-ABD5-C44E5794304B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAA6D2-F90D-431B-B616-9D1EBFB6F115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DFE67-4665-4475-ABD5-C44E5794304B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433808",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers to enumerate valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAA6D2-F90D-431B-B616-9D1EBFB6F115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DFE67-4665-4475-ABD5-C44E5794304B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAA6D2-F90D-431B-B616-9D1EBFB6F115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DFE67-4665-4475-ABD5-C44E5794304B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain sensitive information about network nodes via a modified nDeviceGroupID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAA6D2-F90D-431B-B616-9D1EBFB6F115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:premium:*:*:*",
            "matchCriteriaId" : "952D0B4D-20CF-469A-8917-93C09F5F598B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/897",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25475",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26505",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEAAA6D2-F90D-431B-B616-9D1EBFB6F115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup_professional:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431DFE67-4665-4475-ABD5-C44E5794304B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter and (2) unspecified fields related to e-mail alerts.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-labs:web-labs_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B9C46B-48FF-4F0D-BE95-109A856C6C69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20060",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: this issue might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101667DF-0B3E-49A1-A0C9-BDBEEC9F89CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/433715/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433848/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434461/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433715/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433848/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434461/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "101667DF-0B3E-49A1-A0C9-BDBEEC9F89CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/433715/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433848/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434461/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433715/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433848/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434461/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxbb:mxbb_portal:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52A9BEC-1475-4C98-BB86-C198744FF65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mxbb:mxbb_portal:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C48A50-0868-4A44-8A71-A504B2FC7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pafiledb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB092C95-F759-43A0-A1F5-40CD98369C25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20062",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17930",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17",
            "matchCriteriaId" : "133521B0-6212-48E3-B114-216F626E1D23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20188",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20531",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20550",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22932",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27441",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceware.org/bugzilla/show_bug.cgi?id=2584",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17950",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018872",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0034/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-292-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1924",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3665",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sourceware.org/bugzilla/show_bug.cgi?id=2584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-292-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D899CC0B-334F-4794-A7C2-449545D728C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.limboforge.org/index.php?topic=6.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19891",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433221/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.limboforge.org/index.php?topic=6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/19891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433221/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a \"_required\" field when the associated normal field is missing or empty, which is not sanitized before being presented in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B3D372-BD14-4FF9-802B-116CAE39E596"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433819",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in a_login.php in Vizra allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vizra:vizra:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250EA44F-B483-47B7-8E44-F0E6C79297D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/17949",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/Vizra-0511-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/Vizra-0511-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openobex:openobex:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275E6ACF-F1B6-43EF-B65E-2B1C5108D0D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansys:clansys:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C4ACCF-86E7-4ACD-802F-0CA7476CCAA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansys:clansys:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F87471A-70FA-47E5-927E-D2F6CE2C94D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0238.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19609",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015934",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://soot.shabgard.org/bugs/Clansys.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://soot.shabgard.org/bugs/Clansys.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clansys:clansys:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F87471A-70FA-47E5-927E-D2F6CE2C94D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0238.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19609",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1015934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://soot.shabgard.org/bugs/Clansys.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-04/0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1015934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://soot.shabgard.org/bugs/Clansys.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2369",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-15T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as \"Type 1 - None\", which is accepted even if it is not offered by the server, as originally demonstrated using a long password."
      }, {
        "lang" : "es",
        "value" : "RealVNC 4.1.1 y otros productos que usan RealVNC tales como AdderLink IP y Cisco CallManager, permite a atacantes remotos eludir autenticación a través de una petición en la que el cliente especifica un tipo de seguridad insegura como \"Type 1 - None\", que es aceptada incluso si no es ofrecida por el servidor, como se demuestra originalmente usando una contraseña larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vnc:realvnc:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992E24CA-43E0-411D-9DB9-F9567868E2A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114768344111131&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=vnc-list&m=114755444130188&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/29",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20109",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20789",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/8355",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060622-cmm.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.intelliadmin.com/blog/2006/05/security-flaw-in-realvnc-411.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.intelliadmin.com/blog/2006/05/vnc-flaw-proof-of-concept.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/117929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.realvnc.com/products/free/4.1/release-notes.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433994/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434015/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434117/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434518/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434560/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438175/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438368/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/17978",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1790",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1821",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2492",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26445",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114768344111131&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=vnc-list&m=114755444130188&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/8355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060622-cmm.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intelliadmin.com/blog/2006/05/security-flaw-in-realvnc-411.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intelliadmin.com/blog/2006/05/vnc-flaw-proof-of-concept.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/117929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/08/02/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.realvnc.com/products/free/4.1/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433994/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434015/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434117/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434560/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438175/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438368/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue only affected version 4.1.1 and not the versions distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HTML via the vname parameter in the comments functionality."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ozjournals:ozjournals:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D14D8E-C070-4253-B83F-3F825AEB943E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kiki91.altervista.org/exploit/ozjournals.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17954",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kiki91.altervista.org/exploit/ozjournals.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in EMC Retrospect Client 5.1 through 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet to port 497."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect_client:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7117B74F-F583-4D4D-93F4-5A8660B5FE38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect_client:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4380CF-4E27-43F1-951D-C9C787E9225D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect_client:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5006422-E55D-4D83-B538-F2702088E322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emc:retrospect_client:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A567D484-ECEB-446C-88F5-B431DC457C0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20080",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016063",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016136",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.acrossecurity.com/aspr/ASPR-2006-05-17-1-PUB.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/186944",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434726/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17948",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.acrossecurity.com/aspr/ASPR-2006-05-17-1-PUB.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/186944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434726/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Failed exploit attempts will likely crash the application, denying further service to legitimate users."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_dragon:php_blue_dragon:platinum_2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95710926-EE8E-4FC9-8098-2A41EE73D4C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application crash) by causing long text strings to be appended to the player->client buffer, which causes an invalid memory access."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B49FB14B-063B-41F9-A91B-EE5DD56EBDD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:empire_server:empire_server:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0386D5-FB0D-4677-BCA4-F57AE5376DE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/empiredos-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://empserver.cvs.sourceforge.net/empserver/empserver/src/lib/player/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20094",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433940/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/empiredos-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://empserver.cvs.sourceforge.net/empserver/empserver/src/lib/player/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433940/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_web_tools:php_live_helper:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C93ED5E-E1D4-4956-8D16-1FF270F1F7AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17960",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto Studio 3.5.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter (cfg['popphoto_base_path'] variable).  NOTE: Pixaria has notified CVE that \"PopPhoto is NOT a product of Pixaria.  It was a product of PopSoft Digital and is only hosted by Pixaria as a courtesy... The vulnerability listed was patched by the previous vendor and all previous users have received this update.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:popsoft_digital:popphoto:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31F7510-B843-4C4E-A612-C847238493B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/popphoto-remote-file-inclusion-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20087",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000869.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pixaria.com/news/article/35/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1792",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/popphoto-remote-file-inclusion-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000869.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pixaria.com/news/article/35/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpodp:phpodp:1.5h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9204D50F-1A62-4FA5-BF3F-A2A9B1BFDC00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kiki91.altervista.org/exploit/open.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17976",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kiki91.altervista.org/exploit/open.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) rep parameter to (a) index.php or (b) diapo.php or (2) image parameter to (c) affich.php.  NOTE: item 1a might be resultant from directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gphotos:gphotos:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A226B0-22D0-46FF-BF3A-AF4690CC1C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gphotos:gphotos:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D790E5B-F020-4566-974C-37C60376883C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20095",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433936/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17967",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the rep parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gphotos:gphotos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "528FB682-3AF0-441D-9619-639B77385E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gphotos:gphotos:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A226B0-22D0-46FF-BF3A-AF4690CC1C3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20095",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433936/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452025/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452099/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17967",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452025/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452099/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ServerNetworking::incoming_client_data function in servnet.cpp in Outgun 1.0.3 bot 2 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a data_file_request command with a long (1) type or (2) name string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3_bot_2",
            "matchCriteriaId" : "F18B5C33-0A00-4545-80FC-F7C5B4520023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353D05D-78E6-496C-8F3C-FF88C8FC5E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D116DA-FCEF-4363-B415-96370C08FA66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/outgunx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20098",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433932/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1796",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/outgunx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433932/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of service (game interruption) via large packets, which cause an exception to be thrown."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3_bot_2",
            "matchCriteriaId" : "F18B5C33-0A00-4545-80FC-F7C5B4520023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353D05D-78E6-496C-8F3C-FF88C8FC5E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D116DA-FCEF-4363-B415-96370C08FA66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/outgunx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20098",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433932/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/outgunx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433932/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of service (application crash) via packets with incorrect message sizes, which triggers a buffer over-read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3_bot_2",
            "matchCriteriaId" : "F18B5C33-0A00-4545-80FC-F7C5B4520023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353D05D-78E6-496C-8F3C-FF88C8FC5E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D116DA-FCEF-4363-B415-96370C08FA66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/outgunx-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20098",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433932/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/outgunx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433932/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote attackers to change the registration information of other players via a long string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3_bot_2",
            "matchCriteriaId" : "F18B5C33-0A00-4545-80FC-F7C5B4520023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353D05D-78E6-496C-8F3C-FF88C8FC5E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outgun:outgun:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D116DA-FCEF-4363-B415-96370C08FA66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/outgunx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20098",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433932/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/outgunx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433932/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla:filezilla:2.2.14b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3192F9E2-D38E-4563-B148-3F0B5C3FBB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla:filezilla:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC390AF-5CEB-4201-B719-3A1132CBC05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filezilla:filezilla:2.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE0841F-4D10-4E4B-A9E5-3A457C42EFDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=416790",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17972",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=416790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Failed exploit attempts will likely crash the application.\r\nThis vulnerability is addressed in the following product release:\r\nFileZilla, FileZilla, 2.2.23"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the read parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radscripts:radlance:7.0:*:gold:*:*:*:*:*",
            "matchCriteriaId" : "FC53C288-76DE-46D3-A798-54F71DAC3229"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/RadLance-0515-lfi.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5VP0C1FIKY.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434327/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17975",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/RadLance-0515-lfi.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5VP0C1FIKY.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434327/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the ABBC[Config][smileset] parameter to unb_lib/abbc.css.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1_patch1",
            "matchCriteriaId" : "B197D8A4-908D-42F9-B4EE-71299984127D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "116B875B-A829-43B7-87F0-59B774458706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:1.5.3_patch3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B683188-84B1-4277-B636-D4E7BF124A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:1.5.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2979C737-A467-4A12-A0CF-17C45E19EA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C19E15-EEAD-4CA8-B2C7-468197CAF203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://newsboard.unclassified.de/forum/post/6499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://retrogod.altervista.org/unb_161p1_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20090",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433686/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17947",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://newsboard.unclassified.de/forum/post/6499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://retrogod.altervista.org/unb_161p1_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433686/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled and that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the design_path parameter.  NOTE: this is closely related, but a different vulnerability than the ABBC[Config][smileset] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unclassified_newsboard:unclassified_newsboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.3d",
            "matchCriteriaId" : "58B80679-27C3-404A-9E86-15492B9F9795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-May/000769.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://newsboard.unclassified.de/forum/post/6499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-May/000769.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://newsboard.unclassified.de/forum/post/6499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 y 1.3.3 DEMO, como se usa en otros productos incluyendo (2) FreeSSHd 1.0.9 y (3) freeFTPd 1.0.10, permite a atacantes remotos ejecutar código arbitrario a través de una cadena de algoritmo de intercambio de clave larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeftpd:freeftpd:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F34D7A-D6EB-4818-83AD-0A6B40F4F37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freesshd:freesshd:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0856F72-9F1E-425C-B434-BB9DDF88BED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weonlydo:wodsshserver:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF7CF76-6EE4-481B-8034-8E4849AD6FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weonlydo:wodsshserver:1.3.3_demo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B750682-F305-4AAF-A973-88DA5F3200E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114764338702488&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19845",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19846",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20136",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/477960",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434038/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434402/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434415/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434415/30/4920/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17958",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1785",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114764338702488&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/477960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434038/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434402/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434415/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434415/30/4920/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via (1) the raydium_log function in log.c or (2) the raydium_console_line_add function in console.c, possibly from a long player name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD879750-83D9-40DE-BE9F-001AB975271C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB6F8-E793-4274-BC1A-457A2130F40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA11AEA4-EAB5-40AA-8719-94DD09D687A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2FDAD6-C4FB-442F-98F2-5068576038B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F929617-CAAD-4634-9412-5C6A57995789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC92ACF-9FFF-4305-A194-9B4A56DEC0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F301B1-428E-4B87-9107-268D5D3F5210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3F00C1-0C47-43A5-96D2-678B9E160316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FECC81-6C1E-4D20-958D-F8AE6E668792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2EF6F4-4B07-4593-A83A-0F5FAF15CAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D790A0-AB22-4A1E-B1EF-E79F56335286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8694C813-7402-4913-8667-2BA3BD00BEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CB7D08-CF9F-4BE5-98FD-704F6F979249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D75131-5359-4198-9A29-F05D08884566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8DCDC7-94BC-45A5-AC78-3B5B9E5E3155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8BE2E-0407-420C-BE94-61B7E0A9A7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5008EA2C-90F5-425D-93CF-0A78500AA5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF314B62-DBE2-47B8-B8B6-8C9FE8BEEA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81B4B8C-FF55-4D46-88EC-70DFF58401A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CE2D75-0A95-4624-B8DB-96C8A5DB97A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B28972-B2CA-4DCC-87CF-203095510630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D6C13A-DFC1-4D66-9CC5-BAF5030BE066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A01459-1876-4642-A9FF-0D2CE4611F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5CC74C-D278-4677-953A-E95806CA06C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A55F26-031E-4D42-A98B-1F03A71037EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FBF3DD-2C92-4931-983D-3352165D1967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C05005C-3860-4063-A81F-F8A69C1DC04C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://raydium.org/svn.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://raydium.org/svn.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD879750-83D9-40DE-BE9F-001AB975271C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB6F8-E793-4274-BC1A-457A2130F40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA11AEA4-EAB5-40AA-8719-94DD09D687A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2FDAD6-C4FB-442F-98F2-5068576038B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F929617-CAAD-4634-9412-5C6A57995789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC92ACF-9FFF-4305-A194-9B4A56DEC0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F301B1-428E-4B87-9107-268D5D3F5210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3F00C1-0C47-43A5-96D2-678B9E160316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FECC81-6C1E-4D20-958D-F8AE6E668792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2EF6F4-4B07-4593-A83A-0F5FAF15CAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D790A0-AB22-4A1E-B1EF-E79F56335286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8694C813-7402-4913-8667-2BA3BD00BEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CB7D08-CF9F-4BE5-98FD-704F6F979249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D75131-5359-4198-9A29-F05D08884566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8DCDC7-94BC-45A5-AC78-3B5B9E5E3155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8BE2E-0407-420C-BE94-61B7E0A9A7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5008EA2C-90F5-425D-93CF-0A78500AA5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF314B62-DBE2-47B8-B8B6-8C9FE8BEEA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81B4B8C-FF55-4D46-88EC-70DFF58401A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CE2D75-0A95-4624-B8DB-96C8A5DB97A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B28972-B2CA-4DCC-87CF-203095510630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D6C13A-DFC1-4D66-9CC5-BAF5030BE066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A01459-1876-4642-A9FF-0D2CE4611F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5CC74C-D278-4677-953A-E95806CA06C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A55F26-031E-4D42-A98B-1F03A71037EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FBF3DD-2C92-4931-983D-3352165D1967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C05005C-3860-4063-A81F-F8A69C1DC04C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://raydium.org/svn.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://raydium.org/svn.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service (application crash) via a packet of type 0xFF, which causes a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD879750-83D9-40DE-BE9F-001AB975271C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB6F8-E793-4274-BC1A-457A2130F40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA11AEA4-EAB5-40AA-8719-94DD09D687A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2FDAD6-C4FB-442F-98F2-5068576038B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F929617-CAAD-4634-9412-5C6A57995789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC92ACF-9FFF-4305-A194-9B4A56DEC0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F301B1-428E-4B87-9107-268D5D3F5210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3F00C1-0C47-43A5-96D2-678B9E160316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FECC81-6C1E-4D20-958D-F8AE6E668792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2EF6F4-4B07-4593-A83A-0F5FAF15CAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D790A0-AB22-4A1E-B1EF-E79F56335286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8694C813-7402-4913-8667-2BA3BD00BEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CB7D08-CF9F-4BE5-98FD-704F6F979249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D75131-5359-4198-9A29-F05D08884566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8DCDC7-94BC-45A5-AC78-3B5B9E5E3155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8BE2E-0407-420C-BE94-61B7E0A9A7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5008EA2C-90F5-425D-93CF-0A78500AA5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF314B62-DBE2-47B8-B8B6-8C9FE8BEEA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81B4B8C-FF55-4D46-88EC-70DFF58401A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CE2D75-0A95-4624-B8DB-96C8A5DB97A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B28972-B2CA-4DCC-87CF-203095510630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D6C13A-DFC1-4D66-9CC5-BAF5030BE066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A01459-1876-4642-A9FF-0D2CE4611F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5CC74C-D278-4677-953A-E95806CA06C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A55F26-031E-4D42-A98B-1F03A71037EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FBF3DD-2C92-4931-983D-3352165D1967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C05005C-3860-4063-A81F-F8A69C1DC04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB8734E-9B4C-4CA5-895F-C774E530C621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0B1FE3-2B21-4DB1-8E50-E17B591C60D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8EFEAA6-0CD5-4831-87EE-96790D4D636C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to execute arbitrary code by sending packets with long global variables to the client."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD879750-83D9-40DE-BE9F-001AB975271C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB6F8-E793-4274-BC1A-457A2130F40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA11AEA4-EAB5-40AA-8719-94DD09D687A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2FDAD6-C4FB-442F-98F2-5068576038B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F929617-CAAD-4634-9412-5C6A57995789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC92ACF-9FFF-4305-A194-9B4A56DEC0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F301B1-428E-4B87-9107-268D5D3F5210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3F00C1-0C47-43A5-96D2-678B9E160316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FECC81-6C1E-4D20-958D-F8AE6E668792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2EF6F4-4B07-4593-A83A-0F5FAF15CAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D790A0-AB22-4A1E-B1EF-E79F56335286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8694C813-7402-4913-8667-2BA3BD00BEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CB7D08-CF9F-4BE5-98FD-704F6F979249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D75131-5359-4198-9A29-F05D08884566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8DCDC7-94BC-45A5-AC78-3B5B9E5E3155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8BE2E-0407-420C-BE94-61B7E0A9A7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5008EA2C-90F5-425D-93CF-0A78500AA5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF314B62-DBE2-47B8-B8B6-8C9FE8BEEA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81B4B8C-FF55-4D46-88EC-70DFF58401A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CE2D75-0A95-4624-B8DB-96C8A5DB97A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B28972-B2CA-4DCC-87CF-203095510630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D6C13A-DFC1-4D66-9CC5-BAF5030BE066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A01459-1876-4642-A9FF-0D2CE4611F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5CC74C-D278-4677-953A-E95806CA06C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A55F26-031E-4D42-A98B-1F03A71037EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FBF3DD-2C92-4931-983D-3352165D1967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C05005C-3860-4063-A81F-F8A69C1DC04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB8734E-9B4C-4CA5-895F-C774E530C621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0B1FE3-2B21-4DB1-8E50-E17B591C60D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8EFEAA6-0CD5-4831-87EE-96790D4D636C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service (application crash) via a large ID, which causes an invalid memory access (buffer over-read)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD879750-83D9-40DE-BE9F-001AB975271C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB6F8-E793-4274-BC1A-457A2130F40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA11AEA4-EAB5-40AA-8719-94DD09D687A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2FDAD6-C4FB-442F-98F2-5068576038B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F929617-CAAD-4634-9412-5C6A57995789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC92ACF-9FFF-4305-A194-9B4A56DEC0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F301B1-428E-4B87-9107-268D5D3F5210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3F00C1-0C47-43A5-96D2-678B9E160316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FECC81-6C1E-4D20-958D-F8AE6E668792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2EF6F4-4B07-4593-A83A-0F5FAF15CAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D790A0-AB22-4A1E-B1EF-E79F56335286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8694C813-7402-4913-8667-2BA3BD00BEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CB7D08-CF9F-4BE5-98FD-704F6F979249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D75131-5359-4198-9A29-F05D08884566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8DCDC7-94BC-45A5-AC78-3B5B9E5E3155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B8BE2E-0407-420C-BE94-61B7E0A9A7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5008EA2C-90F5-425D-93CF-0A78500AA5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF314B62-DBE2-47B8-B8B6-8C9FE8BEEA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81B4B8C-FF55-4D46-88EC-70DFF58401A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CE2D75-0A95-4624-B8DB-96C8A5DB97A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B28972-B2CA-4DCC-87CF-203095510630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D6C13A-DFC1-4D66-9CC5-BAF5030BE066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A01459-1876-4642-A9FF-0D2CE4611F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5CC74C-D278-4677-953A-E95806CA06C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A55F26-031E-4D42-A98B-1F03A71037EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FBF3DD-2C92-4931-983D-3352165D1967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C05005C-3860-4063-A81F-F8A69C1DC04C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB8734E-9B4C-4CA5-895F-C774E530C621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0B1FE3-2B21-4DB1-8E50-E17B591C60D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raydium:raydium:svn_revision_312:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8EFEAA6-0CD5-4831-87EE-96790D4D636C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/raydiumx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an empty UDP datagram, possibly involving FIONREAD errors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnunet:gnunet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0d",
            "matchCriteriaId" : "8609C8D4-F96A-4BCB-AFDA-2F067303D857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnunet:gnunet:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86F9B69-941C-4251-A0B0-739CBBAFF3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnunet:gnunet:0.7.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E485778-F72E-4571-9C72-DF617E1218BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnunet:gnunet:0.7.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DE7746-AF42-473E-A9A4-54556396F213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnunet:gnunet:0.7.0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C09D8-6903-42D7-9CB5-6CCEDAF1B212"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/gnunetzero-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20096",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433933/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gnunet.org/svn/GNUnet/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/gnunetzero-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433933/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gnunet.org/svn/GNUnet/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via \"..\" sequences in the (1) LIST or (2) DELETE IMAP command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timo_sirainen:dovecot:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE001666-8419-4F23-A9C4-CC2E929C7447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timo_sirainen:dovecot:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C2CA41-C59A-4072-BFAF-1B6D831233D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timo_sirainen:dovecot:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA25732-C560-4A78-8AE9-3BC17DD667F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timo_sirainen:dovecot:1.0_beta7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F7B8F0-CD1A-4851-B24F-F1E8ABCA726B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433878/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17961",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433878/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue does not affect the versions of Dovecot distributed with Red Hat Enterprise Linux.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) CFTOKEN parameter in (a) index.cfm and (3) CFTOKEN and (4) CFID parameter in (b) chat.cfm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexchat:flexchat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "34E466C6-382E-477F-9678-FC9D8A179919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/flexchat-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/flexchat-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref['cookie_name']."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C34EB0-7685-4346-81A2-371C1F19F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB26A2A4-B0DE-4130-AA5F-76D5394A0614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90909932-AD39-4648-8621-5866F0C4AB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F208E9-3C39-4D00-B1E0-5CD0B315E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7402F-54C9-4FDA-B181-85941DDC7010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F77F5E4-8636-41F5-9A80-055CC0FC0346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AB914E-D616-45D2-A451-1C247B8B6E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA03C1AC-97EA-47ED-9558-A7CA48420AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32695A82-B042-46B7-9CB4-20F3446E0C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6454D949-83A2-4F69-92E1-BBCD84F21BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692341-8DF2-4943-853A-4AAF1F313914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB33E9-9AB8-482A-A196-768A2085A49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF75A192-81C1-4F58-A660-7EFE4F33E58B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20089",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25521",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433938/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1802",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 0.7.4.\r\nhttp://e107.org/edownload.php"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts.  NOTE: the lang parameter is already covered by CVE-2006-2031."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9852676-A91F-4FD6-A734-BF7E048411FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC64B22B-E415-4510-A0DF-CE4763A423D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12375469-DD81-42BE-8BC0-FCAB0D2D6253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20113",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20627",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17973",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1794",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 2.8.0.4.\r\nhttp://www.phpmyadmin.net/home_page/downloads.php"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12375469-DD81-42BE-8BC0-FCAB0D2D6253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20113",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17973",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Some releases of phpMyAdmin before 2.8.0.4 are affected (2.6.2 tested vulnerable). \r\nThis vulnerability is addressed in the following product release:\r\nphpMyAdmin, phpMyAdmin, 2.8.0.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:directory_listing_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "177BEB41-2816-45E1-9FF2-DA1503707229"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kiki91.altervista.org/exploit/dir.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20118",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kiki91.altervista.org/exploit/dir.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vulnerability has been confirmed in the latest available version of this product. Other versions may also be affected."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.20rc1 through 2.20 and 2.21.1, when using RSS 1.0, allows remote attackers to conduct cross-site scripting (XSS) attacks via a title element with HTML encoded sequences such as \"&gt;\", which are automatically decoded by some RSS readers.  NOTE: this issue is not in Bugzilla itself, but rather due to design or documentation inconsistencies within RSS, or implementation vulnerabilities in RSS readers.  While this issue normally would not be included in CVE, it is being identified since the Bugzilla developers have addressed it."
      }, {
        "lang" : "es",
        "value" : "Bugzilla 2.20rc1 hasta la versión 2.20 y 2.21.1, cuando utiliza RSS 1.0, permite a atacantes remotos llevar a cabo ataques de XSS a través de un elemento del título con secuencias HTML codificadas tales como \">\", que son descodificadas automáticamente por algunos lectores RSS. NOTA: este problema no está en sí mismo en Bugzilla, sino más bien debido a su diseño o inconsistencias de documentación entre RSS, o vulnerabilidades de implementación en lectores RSS. Aunque este problema normalmente no se incluiría en una CVE, está siendo identificada dado que los desarrolladores de Bugzilla se han ocupado de ella."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2053CFB4-602E-4141-BB3D-A440E2A31D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ACBA13-AC13-4469-862F-B3DD2327B6FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=112818466125484&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18979",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=313441",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=112818466125484&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/18979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=313441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 2.18.5 or 2.20.1."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a \"C:%5C\" (encoded drive letter) in a URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caucho_technology:resin:3.0.17:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "3D4F5915-A49D-463E-82AA-0F0DF2FC8B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caucho_technology:resin:3.0.18:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7C27BBED-F6D6-4BAB-888B-D7CDD863437B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0026.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434150/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434150/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nCaucho Technology, Resin, 3.0.19\r\n\r\nThe following product releases are not vulnerable: \r\nCaucho Technology, Resin, 3.0.16 \r\nCaucho Technology, Resin, 2.1.12 \r\nCaucho Technology, Resin, 2.1.2 \r\nCaucho Technology, Resin, 2.1.1\r\nCaucho Technology, Resin, 2.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code via long SSH_MSG_KEXINIT messages, which may cause an overflow when being logged.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pragma_systems:fortressssh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.7.20",
            "matchCriteriaId" : "AEBDDABA-D3B5-489D-A16A-EB81EE85691C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20114",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an \"additional contact\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FDCCE7-B76F-42EA-BD82-11D35AAED66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84AC0DD-109D-4E44-9673-668238545F05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FECE4E8-3258-48E7-8F3A-F564512442CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D9693E-D179-414E-AA4B-50C27E4C4EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.phpcoin.com/index.php?showtopic=5941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply patch :\r\nhttp://forums.phpcoin.com/index.php?showtopic=5941"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.2",
            "matchCriteriaId" : "234A12ED-B72C-471B-8D54-22B3053FDF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF785E3-20AB-4480-9DE1-51AB0F9F71CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "837FA32B-DDF5-4168-96A4-8F6A696D754D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434034/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434034/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the ezUserManager_Path parameter to ezusermanager_pwd_forgott.php, possibly due to an issue in ezusermanager_core.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezusermanager:ezusermanager:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3FDF56E-2ED1-41B2-A133-4B6520A70F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezusermanager:ezusermanager:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51C7F4B-CE9E-4479-96BD-5CB916D04EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ezusermanager.com/security.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17998",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ezusermanager.com/security.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "The vulnerability has been confirmed in version 1.6 and the vendor states that only version 1.6 is affected.  Successful exploitation requires that \"register_globals\" is enabled.",
      "evaluatorSolution" : "A patched version (1.7b) was released 17th May 2006 that fixes this vulnerbility."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PRV.php in PhpRemoteView, possibly 2003-10-23 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) f, (2) d, and (3) ref parameters, and the (4) \"MAKE DIR\" and (5) \"Full file name\" fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpremoteview:phpremoteview:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2003-10-23",
            "matchCriteriaId" : "C785DA4C-16A8-4A36-833C-493941DB4E14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://soot.shabgard.org/bugs/phpremoteview.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434118/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17994",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://soot.shabgard.org/bugs/phpremoteview.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434118/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.5.0_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419C4590-0E4C-437B-966B-C5D69AAAB4D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20132",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.illegalaccess.org/exploit/FullDiskApplet.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434001/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2009/dsa-1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.illegalaccess.org/exploit/FullDiskApplet.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0392.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0394.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434001/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-748-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2009-0377.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56722F-F61A-404B-B0B2-1C92C22D0436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamxav:1.0.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9DBEDE-C414-4F98-A52E-30DD7B10B1C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20085",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016086",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434008/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434008/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed.  NOTE: some of these details are obtained from third party information, since the raw source is vague."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware_dubanner_project:duware_dubanner:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9AD8BD-C46E-43B6-BC08-F18D1474CC9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20102",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/911",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433894/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17993",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1825",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26457",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/20102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433894/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to \"HTTP request handlers\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK12319&uid=swg1PK16502&loc=en_US&cs=utf-8&lang=",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK12319&uid=swg1PK16502&loc=en_US&cs=utf-8&lang=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84200300-1985-4770-81E0-31CB2CB99DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A6A6-D840-48E2-AED2-BB8584E3817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang=",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24011773",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012009",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK16492&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24011773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK16492&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page.  NOTE: some sources have reported the element as \"faultfactor,\" but this is likely erroneous."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84200300-1985-4770-81E0-31CB2CB99DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A6A6-D840-48E2-AED2-BB8584E3817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6453897-CA51-4143-B58D-689E0B69CE34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DB3E62-C18C-440D-B2C8-E14122D2EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0C57F6-D011-47C1-B9DC-B1C3083FD28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang=",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012163",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK16602&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK26181&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001112.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20061031-00727.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450704/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK16602&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK26181&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001112.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20061031-00727.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450704/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84200300-1985-4770-81E0-31CB2CB99DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A6A6-D840-48E2-AED2-BB8584E3817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK19195&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK19195&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and attack vectors related to the \"administrative console\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK17838&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK17838&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive and J2EE Models might allow attackers to obtain sensitive information via the trace."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to \"Inserting certain script tags in urls [that] may allow unintended execution of scripts.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84200300-1985-4770-81E0-31CB2CB99DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A6A6-D840-48E2-AED2-BB8584E3817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK15571&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK15571&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84200300-1985-4770-81E0-31CB2CB99DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A6A6-D840-48E2-AED2-BB8584E3817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK17589&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK17589&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caucho_technology:resin:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB32FC6-A5D8-4A8B-8C23-5226DE47806E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caucho_technology:resin:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE050F6-06CE-4399-943B-006CEC9D447A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434145",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18007",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-17T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter.  NOTE: this issue can produce resultant path disclosure when the parameter is invalid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caucho_technology:resin:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB32FC6-A5D8-4A8B-8C23-5226DE47806E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caucho_technology:resin:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE050F6-06CE-4399-943B-006CEC9D447A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434145",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18007",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nCaucho Technology, Resin, 3.0.19"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91C63C5-765B-4511-B6CF-CA09433DE051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA9ACBD-6065-4340-B987-560BE5A54FE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345595",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192278\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 or 3.\n",
        "lastModified" : "2006-09-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service (crash) via certain requests from an older gnocatan client to create a new game."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pioneers:pioneers_meta-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.49",
            "matchCriteriaId" : "544EC068-1FD3-4162-BC24-1586DF8ADA1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=351986",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1425705&group_id=5095&atid=305095",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=351986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1425705&group_id=5095&atid=305095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the server-console is not installed.\r\nThis vulnerability is addressed in the following product release:\r\nPioneers, Pioneers, 0.9.49"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kphone:kphone:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C677AF4B-8DB6-473C-A868-199BCC8C6BDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-18T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knowledgetree:knowledgetree:2.0.7:*:debian_linux:*:*:*:*:*",
            "matchCriteriaId" : "40664721-B46F-4587-83A4-4E29CA083642"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348306",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1528",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-18T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (mmap) IO space."
      }, {
        "lang" : "es",
        "value" : "El kernel de Linux en versiones anteriores a 2.6.13 permite a usuarios locales provocar una denegación de servicio (caída) a través de una transferencia dio desde el controlador sg al espacio de memoria asignada (mmap) IO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4043220081yu9ClBQNuqSSnW_9amW7iQ",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=linux-scsi&m=112540053711489&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21555",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3330",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28510",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://linux.bkbits.net:8080/linux-2.6/cset%4043220081yu9ClBQNuqSSnW_9amW7iQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=linux-scsi&m=112540053711489&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1855",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-18T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "choose_new_parent in Linux kernel before 2.6.11.12 includes certain debugging code, which allows local users to cause a denial of service (panic) by causing certain circumstances involving termination of a parent process."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18099",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=127302",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11235",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=127302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-18T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libextractor:libextractor:0.5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69979B1F-1D91-4178-B692-0F1E907DC81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gnunet.org/libextractor/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20150",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016118",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434288/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18021",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gnunet.org/libextractor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434288/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srch_where parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8CD847-F478-4DC1-92A8-A0DB3CBE3BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3E1E0C-2F23-4608-89BA-AE6CD467B4E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phpfusion_600306_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20129",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434162/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpfusion_600306_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434162/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as $_GLOBALS and $_SESSION from modification, which allows remote attackers to conduct attacks such as directory traversal or PHP remote file inclusion, as demonstrated by modifying the GLOBALS[sugarEntry] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DAF9EB-FED5-482D-820E-553E9057B92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF5360C-C07C-413A-9B8C-50907187DAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4525F5B5-E268-4B50-8244-E8829C106FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28098D0F-B3E2-470E-92B1-C9138A664496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/sugar_suite_42_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20072",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016087",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17987",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/sugar_suite_42_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/194",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016102",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/195",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016103",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "view_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation path via a certain request, which displays the path in an error message, possibly due to an invalid or missing parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:out_of_the_trees_web_design:selectapix:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059797BA-CEEE-4D0F-ACDE-6BF141D40825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016085",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016094",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument.  NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3info:mp3info:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EA5921-3239-4190-867A-A67E65CBBC49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/show/osvdb/30945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/32358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5GP0E15IKO.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/show/osvdb/30945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/32358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5GP0E15IKO.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a \"timing window\" when a compilation error occurs, aka the \"JSP showcode vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/192",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/191",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/190",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "703482E8-35A9-4A9F-A9FD-B0F8CEA4A404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA97F1A-49F7-4511-8959-D62155491DF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/189",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA97F1A-49F7-4511-8959-D62155491DF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/188",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain \"server details\" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "FED6AE20-974B-44A7-98C4-F69E6E33D9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nBEA Systems, Weblogic Server, 8.1 SP 5\r\nBEA Systems, Weblogic Express, 8.1 SP 5\r\nBEA Systems, Weblogic Server, 7.0 SP 7\r\nBEA Systems, Weblogic Express, 7.0 SP 7\r\nBEA Systems, Weblogic Server, 6.1 SP 8\r\nBEA Systems, Weblogic Express, 6.1 SP 8"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "05AFBE78-C611-4EA2-8B00-5F8B61696CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "C3B7752C-B297-480A-B3FC-948EA081670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "63017BF8-D681-45EC-9C31-09D029F1126D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "71892EC0-E6B1-4214-AC53-06489F711829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0B1791-974A-4967-8CF9-33BE8183200B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "696F52AE-FEB9-4090-872E-FDFD969F5604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "7B12A8B1-F78E-46B3-8872-4C6484345477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "DCED03B6-7565-4F53-8D85-F3391BF66988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "B70F0353-635F-465B-A7E5-AF2D017AB008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "6B091903-943F-4822-9F24-9D109B2D76A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "FED6AE20-974B-44A7-98C4-F69E6E33D9DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*",
            "matchCriteriaId" : "F77E777F-7EB5-4A08-9063-C772B49B5E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
            "matchCriteriaId" : "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6828CE4B-91E8-4688-977F-DC7BC21131C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "D59F9859-7344-43F0-9348-E57FABB9E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D34E2925-DE2A-437F-B349-BD7103F4C37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "16E3F943-D920-4C0A-8545-5CF7D792011F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "6BBA04D4-BA2E-4495-85DE-38918A878012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*",
            "matchCriteriaId" : "A3024422-1CA9-4E5D-80D1-2F4B57FDAEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
            "matchCriteriaId" : "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
            "matchCriteriaId" : "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
            "matchCriteriaId" : "893C2387-03E3-4F8E-9029-BC64C64239EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*",
            "matchCriteriaId" : "55661356-58E0-49D3-9C79-B4BB5EBE24CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "0653ACAC-B0D9-4381-AB23-11D24852A414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*",
            "matchCriteriaId" : "107C2FC6-BC60-4817-8A21-14C81DA6DEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*",
            "matchCriteriaId" : "24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA97F1A-49F7-4511-8959-D62155491DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/186",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Hyperlink #907650 has patches for the following products:\r\nWebLogic Server 9.1\r\nWebLogic Server 9.0\r\nThis vulnerability is addressed in the following product releases:\r\nBEA Systems, Weblogic Server, 8.1 SP 6\r\nBEA Systems, Weblogic Express, 8.1 SP 6\r\nBEA Systems, Weblogic Server, 7.0 SP 7\r\nBEA Systems, Weblogic Express, 7.0 SP 7\r\nBEA Systems, Weblogic Server, 6.1 SP 8\r\nBEA Systems, Weblogic Express, 6.1 SP 8"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter.  NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product.  The vendor states \"You cannot insert code in a wikipage or via URL parameters as they are all escaped before usage, so nothing can be compromised at other sites."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwiki:openwiki:0.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F25ED0-893B-4182-9F2C-9DFBF8AF1BF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwiki.com/ow.asp?OpenWikiVulnerability",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwiki.com/ow.asp?XssVulnerability",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434295/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/496294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwiki.com/ow.asp?OpenWikiVulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwiki.com/ow.asp?XssVulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434295/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/496294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary SQL commands via the artnum parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmoshop:cosmoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.11.106",
            "matchCriteriaId" : "E8FDF02E-8687-45F7-A6C4-9BEB5E233AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmoshop:cosmoshop:8.10.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0E1DC4-D6AD-49F5-8F6D-901F3D9A888A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434368/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434368/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via \"..\" sequences in the file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmoshop:cosmoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.11.106",
            "matchCriteriaId" : "E8FDF02E-8687-45F7-A6C4-9BEB5E233AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmoshop:cosmoshop:8.10.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D0E1DC4-D6AD-49F5-8F6D-901F3D9A888A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434368/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434368/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "5DB5EEB8-73FD-4A03-AFB6-EC930B34F612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8FAB07-B0A4-499E-A9F9-5135ED70FAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964A32F7-699D-4096-8AF7-CDB6EBCA8FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A233BC-68DA-4988-A840-B26B40294D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE66137-DED6-4EF3-90BC-29331C9281C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C04D4F3-1E3D-436A-A8CF-F362DC854733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD84101B-84E9-44C5-9E5A-BEE676F12427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A4DF4-871F-4E20-9AA1-2725BC1CDB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D469F51-611B-47F1-A5AC-4CE99E944DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434367/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434367/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8FAB07-B0A4-499E-A9F9-5135ED70FAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964A32F7-699D-4096-8AF7-CDB6EBCA8FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A233BC-68DA-4988-A840-B26B40294D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE66137-DED6-4EF3-90BC-29331C9281C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C04D4F3-1E3D-436A-A8CF-F362DC854733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD84101B-84E9-44C5-9E5A-BEE676F12427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A4DF4-871F-4E20-9AA1-2725BC1CDB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D469F51-611B-47F1-A5AC-4CE99E944DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A63D71-42EF-4E05-A891-AB711F3309CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434367/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434367/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as \"cross-site scripting,\" but that is inconsistent with the common use of the term."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8FAB07-B0A4-499E-A9F9-5135ED70FAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964A32F7-699D-4096-8AF7-CDB6EBCA8FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A233BC-68DA-4988-A840-B26B40294D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE66137-DED6-4EF3-90BC-29331C9281C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C04D4F3-1E3D-436A-A8CF-F362DC854733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD84101B-84E9-44C5-9E5A-BEE676F12427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A4DF4-871F-4E20-9AA1-2725BC1CDB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D469F51-611B-47F1-A5AC-4CE99E944DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A63D71-42EF-4E05-A891-AB711F3309CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434367/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434367/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8FAB07-B0A4-499E-A9F9-5135ED70FAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964A32F7-699D-4096-8AF7-CDB6EBCA8FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A233BC-68DA-4988-A840-B26B40294D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE66137-DED6-4EF3-90BC-29331C9281C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C04D4F3-1E3D-436A-A8CF-F362DC854733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD84101B-84E9-44C5-9E5A-BEE676F12427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A4DF4-871F-4E20-9AA1-2725BC1CDB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D469F51-611B-47F1-A5AC-4CE99E944DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitrix:bitrix_site_manager:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A63D71-42EF-4E05-A891-AB711F3309CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434367/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434367/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0059",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-05-19T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of LiveData ICCP Server before 5.00.035 allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livedata:iccp_server:5.00.045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDA4EFD-CABC-4496-8B6D-D23491B1DAA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20146",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1016113",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.digitalbond.com/SCADA_Blog/2006/05/us-cert-livedata-iccp-vulnerability.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/190617",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6MMS9T",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18010",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1830",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26490",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/20146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalbond.com/SCADA_Blog/2006/05/us-cert-livedata-iccp-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/190617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6MMS9T",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nLiveData, ICCP Server, 5.00.035"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*.78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype:skype:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0.105",
            "matchCriteriaId" : "6A0E061A-71C1-433B-AB31-6E2F67F91613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype:skype:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0.0",
            "versionEndExcluding" : "2.5.0.79",
            "matchCriteriaId" : "45A2F435-8951-44FC-A081-67B385A36727"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0549.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20154",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/466428",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25658",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434707/30/4860/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18038",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.skype.com/security/skype-sb-2006-001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1871",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26557",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/466428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434707/30/4860/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.skype.com/security/skype-sb-2006-001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "Update to the fixed versions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename.  NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C2501-F15B-4292-9C0C-A1205304A9A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=342111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://kandangjamur.net/tutorial/dia.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20199",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20254",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20339",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20422",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0541.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/82/433313/30/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1908",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/286-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=342111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://kandangjamur.net/tutorial/dia.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0541.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/82/433313/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/286-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0039",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-19T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=133465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20991",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2722971cbe831117686039d5c334f2c0f560be13",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25697",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18113",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-311-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1893",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191698",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26583",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10309",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=133465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2722971cbe831117686039d5c334f2c0f560be13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-311-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1856",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.jammed.com/linux-security-module/2005/09/0019.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25747",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18105",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ussg.iu.edu/hypermail/linux/kernel/0604.3/0777.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191524",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9927",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.jammed.com/linux-security-module/2005/09/0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ussg.iu.edu/hypermail/linux/kernel/0604.3/0777.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cart_isp_root parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighthouse_development:squirrelcart:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F14FA5-D431-48A8-935E-F3E7CCC1F248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighthouse_development:squirrelcart:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE70A0C-4C79-4684-A5D5-46E640E71387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lighthouse_development:squirrelcart:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84D8F62-082C-41B5-9DC1-B0E5D6520BF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20121",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ldev.com/forums/showthread.php?p=9976#post9976",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/25523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17992",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.ldev.com/forums/showthread.php?p=9976#post9976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/25523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/17992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:1.40.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645A57E0-F473-4373-9533-B03EA22E6976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:1.40.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A88549-6BCC-4091-887B-EDFD6FB53610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "654895AA-76FE-4773-A338-C2F2CFD8C26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC0BB2C-3513-4E4C-9E4A-A0826934F664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B3A55C-9EAE-4CEA-BC13-99EEEF3B456B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729776E8-2BBD-41A0-860C-11A84AA16285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE807278-AEF4-4174-A1ED-C9819E39218C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF09CE36-8053-4784-AB2A-FC2BAEBD135D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484F6B5E-2DDE-45EE-955E-7DC08B5D0D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096D978E-A8C2-47DE-803A-C200DF21F753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0714F080-A5EE-4B06-AA77-DD8CC1056B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFA5E8D-C505-443A-BF27-1B1B80F6AE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559FAE27-0092-4C36-9D21-4E79696B7EC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A024C321-E1DD-409E-9E0D-CC2C1E41123B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "468F8C45-6E74-4490-83EB-4B566FE94BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFBAF4F-2B71-4BAB-A3C2-AB7249B1F81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CB8216-BF0A-4BFA-8CFB-0B5D718652D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A1B67D-FE00-4E52-9947-577A0552C01E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434121/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434121/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the quezza_root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quezza:quezza_bb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "11B781C6-A91D-4CA0-BD01-C1465B72AA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quezza:quezza_bb:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5139143-AB7B-48E1-AE62-B57B0D644B48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0396.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434231/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18011",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0396.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434231/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapbb:yapbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83D9A64-D110-4F71-A677-651B24847295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapbb:yapbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF9D451F-380D-48A3-BBD5-B0842CDCEE12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapbb:yapbb:1.2_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73ED9510-EF9A-47F1-A6FD-CF708F1F2941"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[main_path] parameter in (1) functions.php, (2) template.php, (3) news.php, (4) help.php, (5) mail.php, (6) Admin/admin_cats.php, (8) Admin/admin_edit.php, (9) Admin/admin_import.php, and (10) Admin/admin_templates.php.  NOTE: this might be resultant from a variable overwrite issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scoznet:scoznews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "9AB221BA-1B58-4F2A-984B-B2ECB501543F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439969/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18027",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439969/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) del_folder, (2) nick, or (3) action parameters to (a) notes/index.php, (4) curr parameter to (b) ipod/get_ipod.php, and in (c) login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:spymac:spymac_web_os:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18EBAD0E-0BBD-47F8-AD51-D97998CA136D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2006/05/multiple-cross-site-scripting-in.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016116",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2006/05/multiple-cross-site-scripting-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header.  NOTE: this is a different vulnerability than CVE-2006-2162."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA91B05-9578-46D8-A21C-4E3C4AB4936A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52432776-C9C6-4CA7-B3D9-87513CBA5716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "601958D5-B393-4EFA-9A6F-A5A04A95F4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B2E88A-A611-43C5-8037-411D6B78EC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCEFBFC-38BD-4F78-B068-1A90C6199CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61ACC55-1002-4FA3-8E5A-52041CE5DCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.0b6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C773265-0BE7-463A-8E24-84D804F14AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A847327-D74E-460C-9F6F-E04C9B77E0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7425E3-F152-439B-B95F-5160E4593DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5911624-5BD8-4A40-B417-FCD926D352BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF45013F-A844-4726-8B2A-EF602A3BC4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A91E463-D239-4853-8A63-E01EE7DB319F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239CAF7F-E9BF-4D0F-BB99-EF51E1366516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738DF14D-A716-46F0-87AC-2DB2F1E44594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8E1234-9F0D-4E6F-BF58-5DAE8E41DB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0b4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0073F69B-C5FA-470A-BA95-9C4E8033F5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA7C5B6-C13D-4814-AA7B-444CF12E4DEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0b6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1209D1C-DD27-41FC-8DAF-BFC0B4B1D602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39551FFC-E1F0-4D45-ADA6-AB3E74BB576D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.0rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BED52AA-BE20-447C-8896-4B591C42F66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DE68E3-7003-4675-96A9-6F7308E1E39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3F8DC3-2F34-4E11-A796-4EA7CB17FDDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADCBA8C-06DB-4D85-AEED-807E64A29DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20123",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nagios.org/development/changelog.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/287-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200605-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nagios.org/development/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/287-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobotix:mobotix_ip_network_camera:d10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483AD916-B69E-40CD-A50F-FFC226A561D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobotix:mobotix_ip_network_camera:m1_1.9.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FC677F-6D6E-43D3-B079-19B342F9555F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobotix:mobotix_ip_network_camera:m10_2.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD689C6-70F6-4C14-B338-1BAD032058B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobotix:mobotix_ip_network_camera:m22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312F2F5C-0791-4540-BBBA-63695478F123"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20151",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016128",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000980.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eazel.es/media/advisory001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25621",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25622",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25623",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434289/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444018/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1857",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000980.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eazel.es/media/advisory001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434289/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Vendor Provided Solution Statement:\r\n\r\nAccording the vendor, MOBOTIX \"has resolved this problem as of 2006-06-27.\r\nMOBOTIX AG provides new software versions that include a security patch that prevents cross site scripting flaws. Customers are encouraged to upgrade to at least software version\r\n- V2.2.3.18 (for camera models M10/D10) and\r\n- V3.0.3.31 (for camera model M22)\r\nor higher (if available). The software is available for download from our website http://www.mobotix.com/services/software_downloads\"\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-19T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER[\"PHP_SELF\"] variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boastmachine:boastmachine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "B9400823-B9FA-4B8C-8C9E-0509C38E72DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boastmachine:boastmachine:3.0:*:platinum:*:*:*:*:*",
            "matchCriteriaId" : "3F1FEADA-C140-4375-80CF-DFD7B486DA24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19759CD-3F3D-4A96-8DD0-828BA628427D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD75997-6BFC-4161-A12A-8AB03FBDB562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC1D5AE-1D9C-416A-8A34-61931C810478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3FA6A-5221-4607-961F-075A78EC6BEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25617",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25618",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18012",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2492",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-05-20T00:02:00.000",
      "lastModified" : "2026-04-16T14:02:14.803",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-06-08",
      "cisaActionDue" : "2022-06-22",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Word Malformed Object Pointer Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works_suite:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2000",
            "versionEndIncluding" : "2006",
            "matchCriteriaId" : "CB6B64C0-E58E-4606-A6DD-AEF2C6F5D33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/05/19/429353.aspx",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1345",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1346",
        "source" : "cret@cert.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20153",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016130",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/446012",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/919637.mspx",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25635",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18037",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-139A.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1872",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-027",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26556",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1418",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1738",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2068",
        "source" : "cret@cert.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/05/19/429353.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/446012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/919637.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-139A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2006-2492",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2023-11-07T01:58:50.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-1861.  Reason: This candidate is a duplicate of CVE-2006-1861.  Notes: All CVE users should reference CVE-2006-1861 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nFreeType, FreeType, 2.2.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lacaveprods:intellitamper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.07",
            "matchCriteriaId" : "FDC4C01A-8585-43DE-B117-BC5F666EAC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20172",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62233D77-9838-48AB-9A2D-F4EAA9E237EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DCAE37-B4E9-490E-B441-CA6DD4DBBE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E7512-FDB5-45F2-80B2-9BDAB856E856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7930F0-59AD-45D6-B79D-92DB88EFF4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C739BCD2-1722-42E0-9560-752DBBF05BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7515A9A-1FD0-484E-97CB-5969729804DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A451C0-D4D8-43FF-BFC9-E525138DCA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1F8976-0691-4C47-9BA3-BC01BA808BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2FF146-8CEF-48C8-81A3-08B4736DC27D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5986FA95-D0F8-4E41-A445-F2F0EFEE872A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A4B77F-67DC-4D25-8948-0C0B59C38E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24AD8E2-AEB7-4D73-9B15-AE0B293A0825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CE7E31-9C42-434E-B1B7-F38966514405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B618E746-146D-4FAC-B64F-F31447F821F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s9y:serendipity:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF5283A-C29F-47FC-BC9B-6F521A2A12C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20155",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=414920&group_id=75065",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=414920&group_id=75065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7548D05-AD2B-46C3-9036-366585FFCB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imonitor:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6948E1-826D-4951-994E-29E0E04C44CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20139",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973759.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434723/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18026",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-016.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973759.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434723/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to default.asp or (2) get parameter to profile.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC94A3E-5F1F-4F64-B711-C052AA97B97F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20175",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434370/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18025",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post_icon variable in classes/post/class_post.php and (2) the df value in action_public/moderate.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB960ACC-74D4-4AFB-886C-11EB5180DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA6316-7E7E-4A6B-AA54-1846198D64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70C944-F70E-49F4-AA9C-D19148925C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAF5259-D99A-45A1-8DD4-C6858B302272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BC2011-5D19-4AF2-BCCD-38A03D0175FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2800F-3A8C-4B63-B754-D921DFF79496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8BA41-7876-4738-A68A-2162E28A3AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF761A-6459-42B0-BCB8-F735FBDD6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-May/000776.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?act=Attach&type=post&id=10026",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=215527",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20158",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-May/000776.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?act=Attach&type=post&id=10026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=215527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via the password field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfairguy:codeavalanche_news:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFD3FE0-F003-4609-966E-37FCE488D723"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/CANews.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18031",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/CANews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field.  NOTE: if this issue is limited to administrators, and if it is expected behavior for administrators to be able to generate HTML, then this is not a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfairguy:codeavalanche_news:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFD3FE0-F003-4609-966E-37FCE488D723"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/CANews.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/CANews.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-20T03:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:*:ur2:enterprise:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "E3CBDF1B-C506-4A89-B597-AFEA98FBDBC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:*:ur2:standard:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "AA47D452-353D-4108-9350-1A0EC1D2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:*:sp4:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "E24F3990-8090-49AA-B490-B57DF2756791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044D96F6-7A18-4295-A665-16F1A6630963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85A181D1-C261-4C29-BC8C-A7A815A63E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A10F68F-4A2F-44A0-A039-1A34C6E2D083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "021DC080-18ED-41F4-9FBD-1DD0C332F871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:*:update_6:platform:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "948567FB-7B09-42BF-ACFA-A2E04E7BD276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:*:update_6:standard:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "1A5885D7-8FC7-4BF7-BE07-06CE1C743454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352D9910-BC83-44B2-B5C0-59B8F2C23142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F316ECED-A6E3-43AC-BA05-C42F2CB0D830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA32646E-1014-47D1-9C96-6CD8F0B13480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:7.0:*:platform:*:*:*:*:*",
            "matchCriteriaId" : "0F6B3BC6-9A4B-40E7-A540-9BCFC3D02E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "9760BDBA-E5FD-4AFF-ACB8-4C8B55CC3A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:*:sp9:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "BDAF373D-CB7C-4410-8187-167B79480AA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "38698A3B-9597-4BC9-B112-BB908C3DE86B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "78587B6D-2A95-4714-9632-4F75CD552E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.0:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "279FE555-E290-4B17-855D-781C9B58ED55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.0:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "26A8BE1A-082B-4CB5-97D0-7964FBC93572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_web_server:6.0:sp8:*:*:*:*:*:*",
            "matchCriteriaId" : "3609AA35-6B6A-47A1-B1D4-011B735E0671"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2303D5EAA8/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20147",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102164-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/114956",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2303D5EAA8/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102164-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/114956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nSun, ONE Web Server, 6.0 SP10 or later\r\nSun, Java System Web Server, 6.1 SP5 or later\r\nSun, ONE Application Server, 7.0 Platform Update 7 or later\r\nSun, ONE Application Server, 7.0 Standard Update 7 or later\r\nSun, Java System Application Server, 7.0 2004Q2 Standard Update 3 or later\r\nSun, Java System Application Server, 7.0 2004Q2 Enterprise Update 3 or later"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1857",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-22T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25695",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1893",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26584",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1858",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-22T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25696",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1893",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26585",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9510",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2502",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-22T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyrus:imapd:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD72CCC-B2E0-456D-9FBB-EDAC88501930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016131",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18056",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1891",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26578",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue does not affect the versions of cyrus-imapd distributed with Red Hat Enterprise Linux.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:novell:netware:6.5:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7A41C8-4332-4F8C-A297-6850C05B3EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016106",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?2973698.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?2973698.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20104",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25529",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434040/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17989",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434040/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search and (2) cate parameters to (a) list.asp, and the (3) id and cate parameters to (b) admin_ok.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azboard:azboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "6ECFF393-56D6-4833-AD74-8B5418D668DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://user.chol.com/~jyj9782/sec/azboard_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://user.chol.com/~jyj9782/sec/azboard_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious package in the TYPE_NAME argument in the (1) GET_DOMAIN_INDEX_TABLES or (2) GET_V2_DOMAIN_INDEX_TABLES function in the DBMS_EXPORT_EXTENSION package."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7B3945-0F94-4990-8701-E0075203694C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/932124",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432078/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432354/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432355/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17699",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/19860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/932124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432354/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/432355/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in search.php in Sphider allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO and (2) the category parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sphider:sphider:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD95DB9E-B966-4020-8479-BB02302E4956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sphider:sphider:1.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42919F4-2ADC-4671-8809-03B09BE9DE65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sphider:sphider:1.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614BA825-F5DA-4A12-A120-EDA396B746E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sphider:sphider:1.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38088136-65C3-4596-BDDE-D85C99326439"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://soot.shabgard.org/bugs/Sphider.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434119/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1845",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://soot.shabgard.org/bugs/Sphider.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434119/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) index.php, (2) song.php, (3) faq.php, (4) list.php, (5) gen_m3u.php, and (6) playlist.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teake_nutma:foing:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343BF5A0-2ADC-4CFA-9EE2-D0C83A6546AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teake_nutma:foing:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FABCF4F-E526-4A93-A621-F5D077B28359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teake_nutma:foing:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429110C2-A2BB-471B-99D8-88E074EACE30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teake_nutma:foing:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A164CB-1060-4BE8-A7DA-8C87600B64CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teake_nutma:foing:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4460D48-399A-4A2D-9A66-FBEF75ED3D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teake_nutma:foing:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFFAA95-E688-495A-84E4-682C89786B9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/05/kurdish-security-7-foing-remote-file.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20092",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433824/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17963",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/05/kurdish-security-7-foing-remote-file.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433824/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourfreeworld:stylish_text_ads_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662ECA4B-722E-4170-9C26-070093F346EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20213",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25691",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25692",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434527/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18044",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434527/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourfreeworld:short_url_and_url_tracker_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED7F3FB-CE1C-402B-B250-3FAF55F65B80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/434530/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434530/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yourfreeworld:short_url_and_url_tracker_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED7F3FB-CE1C-402B-B250-3FAF55F65B80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/434530/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434530/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ActiveX version of FrontRange iHEAT allows remote authenticated users to run arbitrary programs or access arbitrary files on the host machine by uploading a file with an extension that is not associated with an application, and selecting a file from the \"Open With...\" dialog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frontrange:iheat:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD2CABD-0A89-4359-99F1-0BDF01641987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434400/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434400/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Hitachi EUR Professional Edition, EUR Viewer, EUR Print Service, and EUR Print Service for ILF allows remote authenticated users to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:eur_print_service:05_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BC0C9B-4027-4B3F-9803-B48CCDFA9F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:eur_print_service:05_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2AC433-5157-4E2A-B2AC-F6DD4790CBB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:eur_print_service_for_ilf:05_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75237193-C175-4E50-B107-B67555E095B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:eur_professional:05_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A24125B6-F7A1-4FC6-9256-A2A038A9B4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:eur_professional:05_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C08CA82-EF9F-405B-954D-1F7A0A2C41E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:eur_viewer:05_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70C2EA6B-7A92-45DF-A478-C4115FACC9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:eur_viewer:05_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA1C32D7-EF15-488D-87EE-40EEF9816A2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20106",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-010_e/index-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18015",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-010_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nHitachi, EUR Viewer, 05-06-/A\r\nHitachi, EUR Professional, 05-06-/A\r\nHitachi, EUR Print Service, 05-06-/A"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the installation process in Sun Java System Directory Server 5.2 causes wrong user data to be written to a file created by the installation, which allows remote attackers or local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083E8ACF-7A6B-4C7C-B1E1-1567D09A8E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:2003q4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6D70A5-A2AE-4142-86C7-A3D15C155801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:2004q2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F64D5A0-9BED-497F-9C90-B4F404A699A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:2005q1:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4F9948-4A6A-4C68-8CDA-AF34ACA12D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:2005q4:*:*:*:*:*:*",
            "matchCriteriaId" : "92E44A06-2535-4841-8191-9B27B03A42CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20144",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016112",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102345-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18018",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102345-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "275AA095-0E63-43AA-A456-B1FE4C0D45AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3479C85-5B30-43FE-9492-5438D27B8DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50D96F4-F7D5-4EF7-83B3-CB588FF6D60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCDC744-DAF3-449C-B3AE-BA420A636CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDBEDCE-787D-4523-A209-0CCFD6E41064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7292845-96FB-48BF-935F-9BD7772AFD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB182E1B-9E32-46CA-9B49-5029107955D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD2CA54-6534-4A4F-9667-8A594B7E43CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF90F7F-070C-4ABE-8F94-7192F18B1A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA317DD-C804-4349-9BDC-B23FAE493516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFCDB9A-E808-4EC2-A377-CF17C0B6AFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3BB681-16F8-441F-912C-9488791A6420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D1312-5285-4D6C-AAD3-2465527F6796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20211",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=418266",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=418266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Product is vulnerable when running on Apache with mod_mime installed.\r\nThis vulnerability is addressed in the following product release:\r\nCoppermine, Photo Gallery, 1.4.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Hiox Guestbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input forms for signing the guestbook."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiox_india:guest_book:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2B10FC-B44C-4022-9AF3-DD57C10F172C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434686/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434686/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote attackers to overwrite variables such as $xoopsOption['nocommon'] and conduct directory traversal attacks or include PHP files via (1) xoopsConfig[language] to misc.php or (2) xoopsConfig[theme_set] to index.php, as demonstrated by injecting PHP sequences into a log file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.13.2",
            "matchCriteriaId" : "A38E1988-0A3F-4877-A7DD-59B5DFA724B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D649637-9772-4B71-B219-DD505CDB3549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E91D0D-42F6-4FAC-BD04-AA4D77C6DAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "881DDA3C-4D95-471F-95BA-6C4629B3CB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E235D928-E2D9-46D3-B95F-C4AF556D3C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0B5583-8489-4AF9-AD04-4A56AC244A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C32DECD-1E28-4CC1-812B-E8D54B5703EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD25BC1-E435-4691-B42A-0D98D80F0F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F58A3E7-4C21-48FD-AA26-7CCE85BAE887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26950415-06AF-4910-A881-121EA0B43058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89CFFAD2-F511-431C-BF24-08CA810B4645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675A7068-CE9E-412A-8159-2A3820D6272E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC857372-A76D-4F3D-9FEE-6086A0AB002C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2D117B-2800-462A-BA58-E71AED33EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08729570-512B-4B7E-A055-B8E312F41E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476872A3-838B-40B7-B180-2FE018EA9BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.12_jp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E9D3E8-7DBC-4C38-A874-EFE49B1FA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:2.0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BD8530-64CA-4528-BD17-DCF685DC6E21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20176",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434698/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434698/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled, and that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MyWeb Portal Office, Standard Edition, Public Edition, Medical Edition, Citizen Edition, School Edition, and Light Edition allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:myweb_portal_office:*:*:citizen:*:*:*:*:*",
            "matchCriteriaId" : "FFC925FC-ED55-4772-A5DC-9A0CD9C7DC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:myweb_portal_office:*:*:light:*:*:*:*:*",
            "matchCriteriaId" : "103183F1-C8AA-4173-9428-10BEE08CCDFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:myweb_portal_office:*:*:medical:*:*:*:*:*",
            "matchCriteriaId" : "715E759F-84CE-4F26-BF05-DA00ADC4122F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:myweb_portal_office:*:*:public:*:*:*:*:*",
            "matchCriteriaId" : "2FF8EBF7-B37D-446F-A358-4490721D1017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:myweb_portal_office:*:*:school:*:*:*:*:*",
            "matchCriteriaId" : "B13FFDAD-0F8E-4420-BF49-EB331A9A2D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:myweb_portal_office:*:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "0C2599E9-A8E3-4E2D-AB3A-F49EAA919220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20178",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.myweb-jp.com/support/tech/tech_common_013.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.myweb-jp.com/support/tech/tech_common_013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpwcms 1.2.5-DEV allows remote attackers to inject arbitrary web script or HTML via the BL[be_cnt_plainhtml] parameter to include/inc_tmpl/content/cnt6.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwcms:phpwcms:1.2.5_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9634FD91-CA79-4153-AC1A-C34A69057049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-331.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434706/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in include/inc_ext/spaw/spaw_control.class.php in phpwcms 1.2.5-DEV allows remote attackers to include arbitrary local files via .. (dot dot) sequences in the spaw_root parameter.  NOTE: CVE analysis suggests that this issue is actually in SPAW Editor PHP Edition."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwcms:phpwcms:1.2.5_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9634FD91-CA79-4153-AC1A-C34A69057049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-331.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434706/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-331.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a ..  (dot dot) in the filename of a file that is stored in a (1) RAR (.rar), (2) TAR (.tar), (3) ZIP (.zip), (4) GZ (.gz), or (5) JAR (.jar) archive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7EB06C-D25A-40E4-BE7A-99404CA0DB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4FA0CD2-678A-4672-B1B2-3DC0BD5D198E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02AA3A10-34BD-471E-B6AF-A1ACFECE41EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A482ED8-E41B-485E-B660-F448D761797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B90134-AD26-40F6-87AE-1999A974B845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8C5720-004A-43E3-81B3-E4981B4498B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26028CF-D873-474E-B15A-6153BEA813DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82353B0-77F7-464A-A773-EF785BA6FAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitberry_software:bitzipper:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC7DBDF-3FA8-4FC3-A266-1A0A54EC408F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/bitzipper.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20207",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434713/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/bitzipper.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434713/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOT_PATH parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.4",
            "matchCriteriaId" : "DB190BE8-50E4-4A5B-979B-605AB519D4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B552DA-6D35-4BDF-A97B-B88CC16D0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62587DB1-B135-4F27-B77C-DE0EF917FC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6647056C-687E-4F30-B576-6A438B611745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51DB83A-67F2-4476-A074-22512E8A793D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34F0F60-FB88-47AA-8113-EC4B933AB80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE4E6B-AC7B-4500-93F9-0415EFE3FD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4723D3-BD9E-46DB-9783-7A97C8AC78C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A75D22-2E40-4986-BB33-73E1AAC50475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9E3CEA-09D1-4E51-84D8-39340219E774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E69696-0885-4BF0-BD89-F81FDBB0AEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C63AAC-8753-4769-B98E-E732715DAB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8F8C7A-755C-4DDE-A182-74B1889E7E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0C2118-C89D-452B-9270-7C85EE6D5298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D109078-AD74-4275-9069-A9226DF56F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851B7ABF-3116-46B1-8B21-A372A4075290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C65CBE-E83D-42F4-90F0-270530F6711C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34363AB0-E74F-4A92-AAC8-4EB42EC5488A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53172EEE-835A-4E3D-80F0-8215FEF0A16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26285314-4863-467A-80B3-B845DCB924B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA77316-49F3-4B40-93F0-FE3189AE31E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2138D7A2-920A-4EB6-952D-AB5E6054FDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "D957E6B7-5F58-40CC-8776-522AAC1EFA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D9547C-4436-4CC5-8AC1-2132CD1C140D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B05F8B-0A58-4C99-9208-942D065F5FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "54BFC064-E947-4520-92C9-F2904AB8BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE1576E-7C26-4295-9A38-A7A78ECA000A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D687BFB-D590-4329-B7C6-CAA3F4F4FF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F5AA88-4609-4AEF-B210-775A0F0A4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EB8A68-D56B-49F3-9DCB-560B57450D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB92CB8-51D7-48AA-894B-4E2A7F2378FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E1BC45-9657-494E-9DF2-64A12DA9DF59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECB010-BC7C-4EF7-A310-9DF0B03A7AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD48843-99B9-476A-9172-1FCBABE4424F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20209",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dayfox Blog 2.0 and earlier stores user credentials in edit/slog_users.txt under the web document root with insufficient access control, which allows remote attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dayfox_designs:dayfox_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "12FD9ADC-8ED2-4B83-9978-A3A9CB3B237D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/DayfoxBlog.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20216",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/DayfoxBlog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the Language cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartisoft:phplistpro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "482ED11D-5E9C-4C96-937A-394F9F795F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartisoft:phplistpro:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0449AA0-2D20-4FEC-8F71-E5B3F903355C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20220",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when processing the user date format."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B67E6CA-EDCD-4824-BB92-FB58504503FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.usebb.net/community/topic.php?id=1130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.usebb.net/community/topic.php?id=1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to execute arbitrary SQL commands via the member list search module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usebb:usebb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B67E6CA-EDCD-4824-BB92-FB58504503FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.usebb.net/community/topic.php?id=1130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.usebb.net/community/topic.php?id=1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in PHP Easy Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:power_place:php_easy_galerie:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B052DF-4F97-4D50-B0A8-439CFE9AAF52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434695/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434695/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative section by setting the action parameter to edit_member and the value parameter to 1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartisoft:phpbazar:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5677BF8-F12C-4C81-92A2-6B9D3FB668BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434558/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434558/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in classified_right.php in phpBazar 2.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the language_dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartisoft:phpbazar:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5677BF8-F12C-4C81-92A2-6B9D3FB668BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20198",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434558",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1520",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in ANSI C Sender Policy Framework library (libspf) before 1.0.0-p5, when debugging is enabled, allows remote attackers to execute arbitrary code via format string specifiers, possibly in an e-mail address."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libspf:libspf:1.0.0_p4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D810F3-7517-4C26-808E-ED03393E7491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://permalink.gmane.org/gmane.mail.spam.spf.devel/849",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gossamer-threads.com/lists/spf/devel/27053?page=last",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.libspf.org/index.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1846",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26535",
        "source" : "security@debian.org"
      }, {
        "url" : "http://permalink.gmane.org/gmane.mail.spam.spf.devel/849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gossamer-threads.com/lists/spf/devel/27053?page=last",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.libspf.org/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "editor/filemanager/upload/php/upload.php in FCKeditor before 2.3 Beta, when the upload feature is enabled, does not verify the Type parameter, which allows remote attackers to upload arbitrary file types.  NOTE: It is not clear whether this is related to CVE-2006-0658."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fckeditor:fckeditor:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2823302-CCF1-438B-B962-6EE49D371A28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20122",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fckeditor.net/whatsnew/default.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fckeditor.net/whatsnew/default.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:avatar_mod:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E69FB7DC-8795-4E9D-B8CE-A94597B4D159"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D89B42F-7738-47EE-871A-FE16C53BCD81"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4EF4E8-F8A9-40C4-9F89-8C64A8CF2625"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31D3D44-EC0B-4502-A1FA-3AE2BF4D4254"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E3811E-DE0F-4AEB-A0C8-4115E9188A79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6A7A03-4580-4FB9-958E-992717F2AE72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5108B6BF-64D8-4F14-A237-E6A3F2538B7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20148",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.codescan.com/Advisories/CodeScanLabs_AvatarMod.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-assessment.com/Whitepapers/0x00_vs_ASP_File_Uploads.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434366/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.codescan.com/Advisories/CodeScanLabs_AvatarMod.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.security-assessment.com/Whitepapers/0x00_vs_ASP_File_Uploads.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434366/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to \"Ipswitch/1.0\" and the User-Application header to \"NmConsole\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:whatsup:professional_2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B28A5682-3F0C-40B7-B502-ABA0BE339D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ftusecurity.com/pub/whatsup.public.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434247/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434447/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ftusecurity.com/pub/whatsup.public.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434247/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434447/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers to obtain the installation path via an invalid s parameter, which displays the path in an error message.  NOTE: this issue was originally claimed to be SQL injection, but CVE analysis shows that the problem is related to an invalid value that prevents some variables from being set."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_donald:destiney_rated_images_script:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E855E13-20EC-409D-9158-F99FE7110217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434691/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434691/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in (1) addWeblog.php and (2) leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_donald:destiney_rated_images_script:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E855E13-20EC-409D-9158-F99FE7110217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434691/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435093/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434691/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435093/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_donald:destiney_links_script:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F696C027-D0CF-4DB5-AC56-902C178A4BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434692/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434692/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message.  NOTE: this issue might be resultant from a more serious issue such as directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_donald:destiney_links_script:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F696C027-D0CF-4DB5-AC56-902C178A4BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434692/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1933",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434692/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) \"Search\" (term parameter in index.php) and (2) \"Add a Site\" (add.php) fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_donald:destiney_links_script:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F696C027-D0CF-4DB5-AC56-902C178A4BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434692/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434692/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in (a) OpenBOR 2.0046 and earlier, (b) Beats of Rage (BOR) 1.0029 and earlier, and (c) Horizontal Shooter BOR (HOR) 2.0000 and earlier allow remote attackers to execute code via format string specifiers in configurations used in various mod files, as demonstrated by the (1) music identifier in data/scenes/intro.txt, which is not properly handled in the update function, and (2) background identifier in data/easy/1aeasy.txt, which is not properly handled in the shutdown function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horizontal_shooter_bor:horizontal_shooter_bor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0000",
            "matchCriteriaId" : "CD0FF3E6-7D7F-4189-A2C4-CFB096178AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbor:openbor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0046",
            "matchCriteriaId" : "B878B83A-9ECB-4CEE-9E54-29499E3E5749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senile_team:beats_of_rage:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0029",
            "matchCriteriaId" : "90405AA3-7733-45DA-9787-F0D42FF451BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/borfs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20174",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/borfs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IE Tab 1.0.9 plugin for Mozilla Firefox 1.5.0.3 allows remote user-assisted attackers to cause a denial of service (application crash), possibly due to a null dereference, via certain Javascript, as demonstrated using a url parameter to the content/reloaded.html page in a chrome:// URI.  Some third-party researchers claim that they are unable to reproduce this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ie_tab:ie_tab:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8555A238-2AAA-4FA4-84CB-197CD23EB004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/434280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434519/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434519/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-22T23:10:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the getSelectedText function in javax.swing.JPasswordField component."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 3.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C604B5-7CAB-4D38-981A-E8543B717FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9C6A53-8D65-4B4D-88A4-2F43D0823B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:easerver:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7920CE9-8B9D-46BB-AEBC-7C129CB3C8BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18036",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sybase.com/detail?id=1040665",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sybase.com/detail?id=1040665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0747",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "6351F282-0A46-4A6D-9793-D338845EFF2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20525",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20591",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20638",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21062",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21701",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23939",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:099",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0500.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436836/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0381",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-429",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9508",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/291-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436836/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA09-133A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/291-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1861",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c.  NOTE: item 4 was originally identified by CVE-2006-2493."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369D87D8-E4A7-4EC4-B508-2940EE174F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288FDB59-7FE4-4351-8822-554ADF07C79A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B681257A-F8D8-46D5-995D-BC44F54DD5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E0DEB6-4414-49AB-88E9-988CE5D8EF67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A90D08-2CAF-422F-8587-7D88EC7632A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B944FEB-F69D-4F6C-9485-26F95A5874B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5283E910-D512-481C-804E-8717A83B24CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20100",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20525",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20591",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20638",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21000",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21062",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21701",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23939",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27162",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27167",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27271",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35200",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35233",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=416463",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200710-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:099",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0500.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0329.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1062.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436836/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1868",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0381",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128606",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593#c8",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502565",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26553",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-429",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9124",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/291-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=416463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200710-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-0329.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436836/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593#c8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/291-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dieselscripts:diesel_job_site:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B44F0-17D2-4E40-8C80-D707BEA17BC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20142",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434369/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435382/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435408/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434369/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435382/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435408/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid parameter to (1) login.asp and (2) main.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_andersson:zixforum:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA289DF-AFAB-4782-BCAF-C5E10423F046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20190",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-327.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18043",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-327.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xmcdconfig in xmcd for Debian GNU/Linux 2.6-17.1 creates /var/lib/cddb and /var/lib/xmcd/discog with world writable permissions, which allows local users to cause a denial of service (disk consumption)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ti_kan:xmcd:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76E3AF3-8699-4414-AAF1-46E84E131295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366816",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20078",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct SQL injection attacks via unspecified vectors in join.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xtreme_scripts:xtreme_topsites:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8755CA5C-27D2-41AA-A9C8-DEFBA6338DE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434568/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434568/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchthis parameter in lostid.php and (2) id parameter in stats.php.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xtreme_scripts:xtreme_topsites:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8755CA5C-27D2-41AA-A9C8-DEFBA6338DE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in stats.php and (2) unspecified inputs in lostid.php, probably the searchthis parameter.  NOTE: one or more of these vectors might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xtreme_scripts:xtreme_topsites:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8755CA5C-27D2-41AA-A9C8-DEFBA6338DE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434568/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434568/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, which could allow attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D4CEA-9ACC-4869-BC87-3524A059914F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev2dev.bea.com/pub/advisory/193",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to \"insecure environment variable\" handling."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sapdba:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "023D50B3-48DD-46B1-A084-B5F641D94981"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20180",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Local_Privilege_Escalation_in_SAP_sapdba_Command.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434534/30/4890/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Local_Privilege_Escalation_in_SAP_sapdba_Command.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434534/30/4890/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlpodder:perlpodder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "2ABE3ADD-8789-43B5-B0CB-15E1EB1B4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlpodder:perlpodder:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D418DFBE-6841-4503-9032-645778E213FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlpodder:perlpodder:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EEADA-DFFE-46A9-951C-AA3C60BEB953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prodder:prodder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "4053C6B4-6FC5-4936-89C8-5057851529B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prodder:prodder:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7B3C8E-DF1C-427D-AAFF-2B5BA8C8446F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20208",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=418189&group_id=148643",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-002.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434712/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1905",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=418189&group_id=148643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-002.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434712/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, which are executed when saving the URL to a log file.  NOTE: the wget vector is already covered by CVE-2006-2548."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlpodder:perlpodder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "2ABE3ADD-8789-43B5-B0CB-15E1EB1B4F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlpodder:perlpodder:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D418DFBE-6841-4503-9032-645778E213FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlpodder:perlpodder:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8EEADA-DFFE-46A9-951C-AA3C60BEB953"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0570.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18067",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0570.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-23T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the kernel in HP-UX B.11.00 allows local users to cause an unspecified denial of service via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20227",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-109.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434717/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18057",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-109.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434717/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modify WebObjects projects through a network service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "6ECC94B6-CDEF-4D25-8757-019F7A5E244F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks the pathname in an error message.  NOTE: this was originally claimed to be SQL injection, but it is probably resultant from another issue in functions.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jemscripts:downloadcontrol:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251A52A0-A0E5-4F63-B8EF-BC92E8552696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434533/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18041",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434533/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary HTML or web script via the dcid parameter to dc.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. This issue appears to be independent from a different issue that involves the same vector."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jemscripts:downloadcontrol:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251A52A0-A0E5-4F63-B8EF-BC92E8552696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-May/000783.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434533/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-May/000783.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434533/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genecys:genecys:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BD33E1-0AE7-4686-9693-9E9253D98ED7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/genecysbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20099",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433929/30/5010/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/genecysbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433929/30/5010/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a command with a missing \":\" (colon) separator, which triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genecys:genecys:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2",
            "matchCriteriaId" : "C4B90002-5D04-43E6-AE8D-4AF03EBE0E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/genecysbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20099",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433929/30/5010/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/genecysbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433929/30/5010/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal (TRanx rebuilded), allows remote attackers to inject arbitrary web script or HTML via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:florian_amrhein:newsportal:0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563DEC8B-BE25-44C3-94B2-570614ADFC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20128",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal (TRanx rebuilded), allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:florian_amrhein:newsportal:0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563DEC8B-BE25-44C3-94B2-570614ADFC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0325.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20128",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18000",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0325.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent (useragent) header in an HTTP request, which is not filtered when the log files are viewed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iplogger:iplogger:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5B5265-2F43-4653-B894-F4FE96AFF943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434822/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435005/30/4740/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434822/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435005/30/4740/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:1.42.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51DC73D9-CBB8-4683-BB21-3AA0F9468F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:2.00.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF3AB9D-CE52-42CF-9FD7-ECB83495C3AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:2.02.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD5B2C5-E393-45E4-B847-4CFF7DA972B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:2.04.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E807422-77F7-4B91-9397-D974F339801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:2.04.4_non_default:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF028B3-314E-4F04-8CBB-87314907AB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2930D914-EBA6-48D7-8D61-A7B0C3A140BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9F2EDC-30F5-480E-8E6E-4D0C553AE281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:4.00.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D095E4-B0FC-4BFF-9E72-DFDE308A9062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g_v5:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98A579C-A78D-44B3-B12B-8EF75A2A5CFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20161",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityview.org/how-does-the-upnp-flaw-works.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityview.org/how-does-the-upnp-flaw-works.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sitecom:wl-153_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.34",
            "matchCriteriaId" : "B9E768D0-5360-41A4-A10C-89DA416169D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sitecom:wl-153_router_firmware:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD603E5-B223-4ABC-A3B8-E1925699701B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sitecom:wl-153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBED964D-46D2-4359-91A9-E2A2D4D719A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20183",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityview.org/how-does-the-upnp-flaw-works.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityview.org/how-does-the-upnp-flaw-works.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:edimax:br_6104k:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B51C723-F587-4856-BF24-0E995B13679F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20169",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityview.org/how-does-the-upnp-flaw-works.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityview.org/how-does-the-upnp-flaw-works.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:p-335wt_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF99C4E-91AC-479D-B3E8-CB65603492E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityview.org/how-does-the-upnp-flaw-works.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1910",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityview.org/how-does-the-upnp-flaw-works.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of \"Encoding-Based SQL Injection.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A96D-84D5-4257-9981-1139CD4CD08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98290E4-2919-4492-BD14-BB24BA85C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56E9F72-6CBF-4784-89CD-435A030AC0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B480F0-8FFC-4463-ADC6-95906751811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF44286-0DBF-4CCA-8FFB-993976C18CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629881D2-2A6D-4461-8C35-6EE575B63E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C91580-6428-4234-92DF-6A96108FCF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A19EB5-A1AF-4293-854D-347CD21065DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18ED293-B408-435F-9D1F-2365A2E51022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7106B29-76F3-43FD-BF57-4693D5B55076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B804CD-AE47-4B46-9B37-7F46D4C9A332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23E89A3-551D-42E2-90EC-59A9DAB4F854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC46594-100B-459F-BCB7-1FA9D0719D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECD278B-55A7-4BCC-8AF1-004F02A96BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C8302B-631A-4DF7-839B-C6F3CC39E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5913A53B-7B72-4CBD-ADAE-318333EB8B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC7F18-B227-4C46-9A33-FB34DDE456CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB903F-0C89-4E65-857E-553CF9C192E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105E9F52-D17E-4A0B-9C46-FD32A930B1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE2055D-AAA4-4A6A-918F-349A9749AF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12409B2-161B-4F78-B7AD-3CF69DDCC574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2F1DA4-6625-469D-988B-5457B68851A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870F4348-6001-4C2F-A547-61964074E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E26D52-D95A-4547-BE6E-4F142F54A624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF590F2-899F-42E1-8A57-6F514C94CE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEC35A2-B17C-46EC-8697-9E03568339BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00562C18-DD81-4B09-AF93-739AF8757A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B52D093-7867-4FE8-B055-D8190103A1E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/docs/techdocs.50",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435038/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435161/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0032/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-288-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/288-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/docs/techdocs.50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435038/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435161/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0032/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-288-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/288-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the \"\\\" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of \"Encoding-Based SQL Injection.\" NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A96D-84D5-4257-9981-1139CD4CD08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98290E4-2919-4492-BD14-BB24BA85C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56E9F72-6CBF-4784-89CD-435A030AC0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B480F0-8FFC-4463-ADC6-95906751811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF44286-0DBF-4CCA-8FFB-993976C18CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629881D2-2A6D-4461-8C35-6EE575B63E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C91580-6428-4234-92DF-6A96108FCF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A19EB5-A1AF-4293-854D-347CD21065DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18ED293-B408-435F-9D1F-2365A2E51022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7106B29-76F3-43FD-BF57-4693D5B55076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B804CD-AE47-4B46-9B37-7F46D4C9A332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23E89A3-551D-42E2-90EC-59A9DAB4F854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC46594-100B-459F-BCB7-1FA9D0719D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECD278B-55A7-4BCC-8AF1-004F02A96BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C8302B-631A-4DF7-839B-C6F3CC39E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5913A53B-7B72-4CBD-ADAE-318333EB8B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC7F18-B227-4C46-9A33-FB34DDE456CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB903F-0C89-4E65-857E-553CF9C192E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105E9F52-D17E-4A0B-9C46-FD32A930B1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE2055D-AAA4-4A6A-918F-349A9749AF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12409B2-161B-4F78-B7AD-3CF69DDCC574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2F1DA4-6625-469D-988B-5457B68851A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870F4348-6001-4C2F-A547-61964074E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E26D52-D95A-4547-BE6E-4F142F54A624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF590F2-899F-42E1-8A57-6F514C94CE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEC35A2-B17C-46EC-8697-9E03568339BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00562C18-DD81-4B09-AF93-739AF8757A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B52D093-7867-4FE8-B055-D8190103A1E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/docs/techdocs.50",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435038/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435161/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0032/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-288-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-288-3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/288-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/docs/techdocs.50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435038/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435161/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0032/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-288-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-288-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/288-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1862",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-24T17:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The virtual memory implementation in Linux kernel 2.6.x allows local users to cause a denial of service (panic) by running lsof a large number of times in a way that produces a heavy system load."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/31663",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189031",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189260",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9390",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/31663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by (1) posting a blog, (2) posting a listing, (3) posting an event, (4) adding comments, or (5) sending a message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:e-friends:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D707E991-FF03-4F31-8619-D554A4474B2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20229",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434846/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434846/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via (1) the author_id parameter in profile.php and (2) the aut_id parameter in userarticles.php.  NOTE: the aut_id vector can produce resultant path disclosure if the SQL manipulation is invalid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:article_manager_pro:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260942FF-4FA5-45A5-8EA4-B6C064F3A510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20228",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434847/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434847/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or possibly an invalid value in the action parameter in a request to mrarticles.php or (2) a login QUERY_STRING to admin.php without any additional parameters, which reveal the path in various error messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:article_manager_pro:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260942FF-4FA5-45A5-8EA4-B6C064F3A510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434847/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434847/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting an article, as demonstrated using a javascript URI in a Cascading Style Sheets (CSS) property of a STYLE attribute of an element."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:article_manager_pro:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260942FF-4FA5-45A5-8EA4-B6C064F3A510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20228",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434847/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434847/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in PDF Form Filling and Flattening Tool before 3.1.0.12 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long field names."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdf_tools_ag:pdf_form_filling_and_flattening_tool:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C73DBAF-0AD9-43EE-8EE7-84EDD9AB83D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046292.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20233",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434992/30/4770/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vsecurity.com/bulletins/advisories/2006/pdf-form-filling.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046292.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434992/30/4770/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vsecurity.com/bulletins/advisories/2006/pdf-form-filling.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F82ADBA-67A1-47E8-8D09-21138BDE84AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0DFCB9-3033-4509-BEDC-2B032524C4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A5853-5C97-412B-B55B-7430B23565DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D3CCE6-909B-46F4-AD8F-603E433C01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803A29EC-E63B-4F66-93E1-60698EE76011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07593CA3-8583-44FE-82CB-9DB32C988766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20242",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/4560078/an/0/page/0#Post4560078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/4560078/an/0/page/0#Post4560078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4r_linklist:4r_linklist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_rc2",
            "matchCriteriaId" : "C79E4D53-EA24-46FF-9176-15C7CEC0A849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AEF174-AF7E-43D7-83D7-DC191786FFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C7CE3D-BF83-435D-B5E6-D3FCBAEF847C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2EB1EB-9D43-44E2-B599-D05955FFBC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9D29C8-AAC7-42D6-BD2D-2B0917253086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833E4A46-5D42-4EA5-9D35-E0E07291D5EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B976F-2F26-497C-92A8-2F2FD4C41A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40CCEE5-4B68-4F45-911F-0A7089A0609D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CAAE7C-258A-47E0-B832-642C1C466EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380709B2-5458-46B9-8B23-9F53A15462E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20167",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18077",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[\"CLPath\"] parameter to (1) reconfig.php and (2) srxclr.php. NOTE: this might be due to a globals overwrite issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calogic:calogic_calendars:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9F3A94B-F5D9-43CA-AB4E-6C4E7DB310D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18076",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8369451E-7C00-4CC3-9B80-871559E3F59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4F9A11-BF2F-4C12-AE12-480EE547DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A4931F-1EA7-48E5-B369-FA013FB87D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20251",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eazel.es/media/advisory002-OpenCms-Xml-Content-Demo-search-engine-Cross-site-scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434932/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eazel.es/media/advisory002-OpenCms-Xml-Content-Demo-search-engine-Cross-site-scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434932/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dian_gemilang:dgbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F90586-397D-45A1-B5A2-F6222F52AB60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20201",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436615/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436615/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in DGBook 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, (4) address, (5) comment, and (6) ip parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dian_gemilang:dgbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F90586-397D-45A1-B5A2-F6222F52AB60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20201",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00659649",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20230",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016139",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-106.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434838/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00659649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-106.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434838/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (crash) via a client flag (frameNum) that is greater than 41, which triggers an assert error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyrosoft_inc:netpanzer:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8E35AA-AE3C-4EF7-AB8F-A58458119841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/panza-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20250/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434908/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/panza-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20250/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434908/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) GLOBALS[where_framework] to (a) lib.simplesel.php, (b) lib.filelist.php, (c) tree.documents.php, (d) lib.repo.php, and (e) lib.php, and (2) GLOBALS[where_scs] to (f) lib.teleskill.php.  NOTE: this issue might be resultant from a global overwrite vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docebo:docebo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.3",
            "matchCriteriaId" : "62D76E7D-45D9-43ED-8536-73F27E2533CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0113.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20260",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0113.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) where_cms, (2) where_lms, (3) where_upgrade, (4) BBC_LIB_PATH, and (5) BBC_LANGUAGE_PATH parameters in various unspecified scripts. NOTE: the provenance of some of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docebo:docebo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.3",
            "matchCriteriaId" : "62D76E7D-45D9-43ED-8536-73F27E2533CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/cron.php in eSyndicat Directory 1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the path_to_config parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esyndicat:esyndicat_directory:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCA0B4B-A84C-48C9-9FC0-6A44971CC057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/esyndicat-directory-software-local.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/esyndicat-directory-software-local.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP OpenView Storage Data Protector 5.1 and 5.5 allows remote attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_storage_data_protector:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC36ADB-81B5-4DA8-A344-756CDF563B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_storage_data_protector:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE01D35-E53F-417F-A0CA-CE56BA145F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00671912",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434871/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00671912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434871/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-24T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A2AF84-E59A-4725-85E6-D2AF56F97F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65AAF9FC-36B2-4939-BAB5-829E13D310FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31677CB-1DAC-498C-9372-D442D60A6389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_network_node_manager:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725DA559-EE1C-4CCE-91C4-D5AAA940D855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00672314",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20193",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016137",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434872/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00672314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434872/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2444",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.18",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20182",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20225",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22822",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016153",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/681569",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=1db6b5a66e93ff125ab871d6b3f7363412cc87e8",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:087",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_64_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/25750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18081",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1916",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26594",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11318",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/681569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=1db6b5a66e93ff125ab871d6b3f7363412cc87e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_64_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0437.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0580.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-302-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"ip_nat_snmp_basic\" module is loaded and that traffic NAT is enabled on port 161 or 162.\r\nThis vulnerability is addressed in the following product release:\r\nLinux, Linux Kernel, 2.6.16.18"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rwiki:rwiki:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69EE1863-7602-43AE-85F2-1A13AA5BF002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rwiki:rwiki:2.1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D28E749-E769-4E98-BEF4-ED32F6F63112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rwiki:rwiki:2.1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F88D238-4CE3-4486-8F75-33C910EDFD52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rwiki:rwiki:2.1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D28E749-E769-4E98-BEF4-ED32F6F63112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rwiki:rwiki:2.1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F88D238-4CE3-4486-8F75-33C910EDFD52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[DIR_LIBS] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.22",
            "matchCriteriaId" : "2FE0D665-5818-4ECA-88B6-282232561571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.nucleuscms.org/viewtopic.php?t=12304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/nucleus_322_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20219",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nucleuscms.org/item/3038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434837/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.nucleuscms.org/viewtopic.php?t=12304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/nucleus_322_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nucleuscms.org/item/3038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434837/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in post.php in SkyeBox 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it was likely prompted by a vague announcement from a researcher who incorrectly referred to the product as \"SkyeShoutbox.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skyebox:skyebox:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1F9387-AE28-4A7D-8117-3B08DA9DF506"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20234",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434826/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434826/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_donald:destiney_links_script:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F696C027-D0CF-4DB5-AC56-902C178A4BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20248",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTP_REFERER header in an HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iplogger:iplogger:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5B5265-2F43-4653-B894-F4FE96AFF943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/1937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products including (2) America's Army 1.228 and earlier, (3) Battlefield 1942 1.158 and earlier, (4) Battlefield 2 1.184 and earlier, (5) Battlefield Vietnam 1.150 and earlier, (6) Call of Duty 1.173 and earlier, (7) Call of Duty 2 1.108 and earlier, (8) DOOM 3 1.159 and earlier, (9) Enemy Territory 1.167 and earlier, (10) Far Cry 1.150 and earlier, (11) F.E.A.R. 1.093 and earlier, (12) Joint Operations 1.187 and earlier, (13) Quake III Arena 1.150 and earlier, (14) Quake 4 1.181 and earlier, (15) Rainbow Six 3: Raven Shield 1.169 and earlier, (16) Rainbow Six 4: Lockdown 1.093 and earlier, (17) Return to Castle Wolfenstein 1.175 and earlier, and (18) Soldier of Fortune II 1.183 and earlier allows remote attackers to cause a denial of service (application crash) via a long webkey parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:even_balance:punkbuster:1.228:*:servers:*:*:*:*:*",
            "matchCriteriaId" : "0E450DAE-58FE-406F-95E1-908175EC308D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/pbwebbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0607.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20257",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evenbalance.com/index.php?page=support-all.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434909/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/pbwebbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0607.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evenbalance.com/index.php?page=support-all.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434909/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension.  NOTE: due to lack of specific information about attack vectors do not depend on the existence of another vulnerability, it is not clear whether this is a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:russcom_network:phpimages:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF438A5-AF47-426E-AD1D-AD22D57CDD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434824/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434824/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter.  NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten with static data in the extracted source code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434728/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434728/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DAAA4F-B893-4914-8538-E68DDA211225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e107.org/comment.php?comment.news.788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e107.org/comment.php?comment.news.788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an \"emailing exploit\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DAAA4F-B893-4914-8538-E68DDA211225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e107.org/comment.php?comment.news.788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20262",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e107.org/comment.php?comment.news.788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dschat:dschat:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997907C7-A1FC-4836-979B-D8772C04BE07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20258",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:50.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2581.  Reason: This candidate is a duplicate of CVE-2006-2581.  Notes: All CVE users should reference CVE-2006-2581 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:50.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2582.  Reason: This candidate is a duplicate of CVE-2006-2582.  Notes: All CVE users should reference CVE-2006-2582 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:50.997",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2583.  Reason: This candidate is a duplicate of CVE-2006-2583.  Notes: All CVE users should reference CVE-2006-2583 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2584.  Reason: This candidate is a duplicate of CVE-2006-2584.  Notes: All CVE users should reference CVE-2006-2584 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2585.  Reason: This candidate is a duplicate of CVE-2006-2585.  Notes: All CVE users should reference CVE-2006-2585 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.083",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2586.  Reason: This candidate is a duplicate of CVE-2006-2586.  Notes: All CVE users should reference CVE-2006-2586 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.110",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2587.  Reason: This candidate is a duplicate of CVE-2006-2587.  Notes: All CVE users should reference CVE-2006-2587 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ],
      "evaluatorSolution" : "Upgrade to PunkBuster version 1.229 :\r\nhttp://www.punkbuster.com"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2588.  Reason: This candidate is a duplicate of CVE-2006-2588.  Notes: All CVE users should reference CVE-2006-2588 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2589.  Reason: This candidate is a duplicate of CVE-2006-2589.  Notes: All CVE users should reference CVE-2006-2589 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2590.  Reason: This candidate is a duplicate of CVE-2006-2590.  Notes: All CVE users should reference CVE-2006-2590 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.220",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2591.  Reason: This candidate is a duplicate of CVE-2006-2591.  Notes: All CVE users should reference CVE-2006-2591 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:51.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2592.  Reason: This candidate is a duplicate of CVE-2006-2592.  Notes: All CVE users should reference CVE-2006-2592 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dschat:dschat:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997907C7-A1FC-4836-979B-D8772C04BE07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20258",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434821/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18084",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434821/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatty:chatty:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855EA18C-DCC6-43B2-9290-778AE74F550F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434819/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434819/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-25T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_vixie:vixie_cron:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F661927-058A-4F4C-8E0A-DA031A9E85B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=134194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/35318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-07.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-168.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-32.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0539.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435033/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/778-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=134194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/35318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-168.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-05-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0539.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435033/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/778-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "artmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log.php, which causes the $logfile variable to be redefined to an attacker-controlled value, as demonstrated by injecting PHP code into info.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artmedic_webdesign:artmedic_newsletter:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A2967BF-81DD-4914-90A4-25128DCD0848"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434738/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18047",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434738/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "artmedic newsletter 4.1.2 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the email parameter to newsletter_log.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artmedic_webdesign:artmedic_newsletter:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2479C28-D8A2-416A-B33D-0B5DEA896BFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20204",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in view.php in phpRaid 2.9.5 allows remote attackers to inject arbitrary web script or HTML via the (1) URL query string and the (2) Sort parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B680ADB-D7C7-40A0-B2F9-9E402166932D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434736/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18042",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434736/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in MediaWiki 1.6.x before r14349 allows remote attackers to inject arbitrary Javascript via unspecified vectors, possibly involving the usage of the | (pipe) character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.5_r14348",
            "matchCriteriaId" : "2AA2CC68-D27E-4087-8888-D6695A052F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48929086-E08E-472D-A503-4CA803A840D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.wikimedia.org/show_bug.cgi?id=6055",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035812.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035814.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nickj.org/MediaWiki",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20189",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/viewvc/mediawiki/trunk/phase3/includes/Sanitizer.php?r1=14349&r2=14348&pathrev=14349",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.wikimedia.org/viewvc/mediawiki?view=rev&revision=14349",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.wikimedia.org/show_bug.cgi?id=6055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035812.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035814.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nickj.org/MediaWiki",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/viewvc/mediawiki/trunk/phase3/includes/Sanitizer.php?r1=14349&r2=14348&pathrev=14349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.wikimedia.org/viewvc/mediawiki?view=rev&revision=14349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the \"User Name\" field on the login prompt."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:client:4.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "ADCDCBA7-0A7E-4CED-91F7-B3DE3F584991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:client:4.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2F68874D-F37B-4C15-B699-B745B9F802A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20194",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434704/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434724/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434704/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434724/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other versions and products, allows remote user-assisted attackers to obtain information such as the installation path by causing exceptions to be thrown and checking the message contents."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0CE9DF-4E6A-4ABE-965F-7C34690ABED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842CBD30-B4BA-4FCF-9152-9DBEBE59857C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D673003C-0491-4C94-8907-5E36BB5EB9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20244",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20256",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434696/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/attachment.cgi?id=164547",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=267645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434696/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/attachment.cgi?id=164547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=267645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:n1_system_manager:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "365A0E3A-BB61-4285-940D-49D6E67A171D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20127",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016119",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102024-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102024-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:russcom_network:russcom.ping:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1A5C3B-38F6-4F6B-B01D-54DBFCD8C183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20236",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434825/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434825/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary SQL commands via the uri parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:webhost_directory:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E53DD23-14A9-46C8-851C-2C1329AA264A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20276",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434912/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434912/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error.  NOTE: this issue might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:webhost_directory:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E53DD23-14A9-46C8-851C-2C1329AA264A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20276",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20278",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434912/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sitepoint.com/forums/showthread.php?t=311969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434912/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sitepoint.com/forums/showthread.php?t=311969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-26T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the \"write a review\" box.  NOTE: since user reviews do not require administrator privileges, and an auto-approve mechanism exists, this issue is a vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:webhost_directory:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E53DD23-14A9-46C8-851C-2C1329AA264A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434912/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sitepoint.com/forums/showthread.php?t=311969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434912/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sitepoint.com/forums/showthread.php?t=311969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1054",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-26T21:06:00.000",
      "lastModified" : "2023-11-07T01:58:30.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-1861.  Reason: This candidate is a reservation duplicate of CVE-2006-1861.  Notes: All CVE users should reference CVE-2006-1861 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-27T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of service (crash) by creating and exiting a large number of tasks, then accessing the /proc entry of a task that is exiting, which causes memory corruption that leads to a failure in the prune_dcache function or a BUG_ON error in include/linux/list.h."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el kernel de Linux 2.6.15 hasta la versión 2.6.17, cuando se está ejecutado en plataformas SMP, permite a usuarios locales provocar una denegación de servicio (caída) creando y finalizando un gran número de tareas, posteriormente accediendo a entrada /proc de una tarea que está finalizando, lo que provoca corrupción de memoria que conduce a un fallo en la función prune_dcache o un error BUG_ON en include/linux/list.h."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=114860432801543&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=114860432801543&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-27T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Symantec Antivirus 10.1 y Client Security 3.1 permite a atacantes remotos ejecutar código de su elección vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844A6963-F60C-4D48-8445-9056C99201D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBD7767-C352-435B-8963-83F723FFD302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCE0C8A-A97C-4DE1-B0EE-3A2D16A34C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D24019B-20F0-4B4D-86A5-9409698E6216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1.394:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6090F86-0B42-403F-9996-9B7670EBAA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF555313-BB5A-4D8A-A3A1-609ABC39F6FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "CAC5389A-8B18-40C4-A3E0-E50B6AA724FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2010:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "275187A5-FB3A-41C2-A6F4-F2DC9D88D0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2020:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "6A220194-CCB1-41F6-9CB0-A79C2E5E36FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2021:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4D3CBEF5-25C6-41E8-97A3-2AA43134E619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "81AE594C-41ED-4FE8-839D-B604AE8DC901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.1.400:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "423C4F6C-4D87-4604-9122-02E2F06FAFB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20318",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016161",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016162",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20060524.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/404910",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435200/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18107",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20060524.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/404910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435200/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-27T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfox_user parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfox:phpfox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C71D9F-2477-4570-AFE0-576BB41134FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20280",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435001/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435887/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435001/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435887/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2453",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-28T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dia:dia:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F7A868-B954-4D6F-9C23-FC11936DCD5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20254",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20339",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20422",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20513",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016203",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-package-announce/2006-May/msg00119.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-security-list/2006-May/msg00099.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0541.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18166",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11600",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/286-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-package-announce/2006-May/msg00119.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/archives/fedora-security-list/2006-May/msg00099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0541.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/286-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1174",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-05-28T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.7",
            "matchCriteriaId" : "AED127ED-19EC-4726-BEE0-54F0D79EB687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2973B149-FE07-4419-93A3-60AA9869A0DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA08859D-4D5B-4B0A-9806-2B32A10B8B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "967E773A-162A-412B-832A-FB8CEFCCD9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B4F1B0-3ECC-4087-88CE-FD5D479891AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E94046-69F7-485B-ADF8-F10619B23E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B4260C-E44F-4D48-9349-BA089F1F1AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:shadow:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A003CA1C-0427-4257-A579-1BFA91A51CCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://cvs.pld.org.pl/shadow/NEWS?rev=1.109",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/20370",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20506",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25267",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25629",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25894",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25896",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26909",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27706",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-249.htm",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-02.xml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/312692",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:090",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0276.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0431.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/468336/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18111",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018221",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2006",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3229",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26958",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1357",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10807",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.pld.org.pl/shadow/NEWS?rev=1.109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/312692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0276.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/468336/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bugs:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=193053\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=229194\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThe risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 which is in maintenance mode.",
        "lastModified" : "2007-09-06T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-29T16:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/39",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues.  For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php\n",
        "lastModified" : "2006-09-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via file descriptions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902B1D47-E1BE-4035-B5AF-65C63D72D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71967055-F995-4C77-B78E-A6D8043B330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F523C8-A910-4CA0-B64E-694C3F790F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A57DF785-03EE-4621-BB68-FF417243431D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9355F79-EA4B-4815-BFF7-4F0828F880FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366259CE-786A-4767-AC73-5A12DB703677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035802A5-95C3-4338-AC5A-9E9094CAF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DE2CDB-9EF9-477C-B4CE-44D5D99BA63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DA5E18-3772-4DAD-B216-4ED479A38CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D22AE44-044F-4FE8-B980-6159446B88B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_delta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30788CA8-BD77-4FEA-ACAA-B3C3A0F2FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D1768F-8337-46CF-97DB-8C9BA121C2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20304",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=420549&group_id=90199",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435135/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18136",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=420549&group_id=90199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435135/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to create or overwrite files in other users' directories by specifying the absolute path of the directory in the infolder parameter and simultaneously specifying the filename in the filepath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902B1D47-E1BE-4035-B5AF-65C63D72D903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71967055-F995-4C77-B78E-A6D8043B330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F523C8-A910-4CA0-B64E-694C3F790F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A57DF785-03EE-4621-BB68-FF417243431D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9355F79-EA4B-4815-BFF7-4F0828F880FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366259CE-786A-4767-AC73-5A12DB703677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035802A5-95C3-4338-AC5A-9E9094CAF2F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0DE2CDB-9EF9-477C-B4CE-44D5D99BA63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DA5E18-3772-4DAD-B216-4ED479A38CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D22AE44-044F-4FE8-B980-6159446B88B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_delta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30788CA8-BD77-4FEA-ACAA-B3C3A0F2FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_gamma:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D1768F-8337-46CF-97DB-8C9BA121C2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20304",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=420549&group_id=90199",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435135/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18139",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=420549&group_id=90199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435135/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neocrome:seditio:102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F38FC7A-AA96-4875-999C-655DDE3AD8B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20307",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://yns.zaxaz.com/advisories/seditio.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://yns.zaxaz.com/advisories/seditio.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as \"<scr<script>ipt>\" in (1) offset and (2) days parameters in (a) tiki-lastchanges.php, the (3) find and (4) offset parameters in (b) tiki-orphan_pages.php, the (5) offset and (6) initial parameters in (c) tiki-listpages.php, and (7) an unspecified field in (d) tiki-remind_password.php; and allow remote authenticated users with admin privileges to inject arbitrary web script or HTML via (8) an unspecified field in a metatags action in (e) tiki-admin.php, the (9) offset parameter in (f) tiki-admin_rssmodules.php, the (10) offset and (11) max parameters in (g) tiki-syslog.php, the (12) numrows parameter in (h) tiki-adminusers.php, (13) an unspecified field in (i) tiki-adminusers.php, (14) an unspecified field in (j) tiki-admin_hotwords.php, unspecified fields in (15) \"Assign new module\" and (16) \"Create new user module\" in (k) tiki-admin_modules.php, (17) an unspecified field in \"Add notification\" in (l) tiki-admin_notifications.php, (18) the offset parameter in (m) tiki-admin_notifications.php, the (19) Name and (20) Dsn fields in (o) tiki-admin_dsn.php, the (21) offset parameter in (p) tiki-admin_content_templates.php, (22) an unspecified field in \"Create new template\" in (q) tiki-admin_content_templates.php, and the (23) offset parameter in (r) tiki-admin_chat.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13501C0-3322-4D0C-8F7F-12535C76CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE04A29-E90B-41E1-A8B4-462B54C079B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2540703B-63B8-41F4-A17A-0274A7DE7E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1489E8DC-11E7-49A3-84FF-909954147D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035EEFAB-B46C-407F-BF8C-B33756D4EEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127349FA-B76D-402A-B688-F2F44024FA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2EA0C8-D400-4981-9675-6A02184117C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB1097C-612D-445C-AB29-DD2C6F21174C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175D43FD-450F-443E-831B-B8091BE7054F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F437662-CD55-477B-9FEE-0CC4E6CB908D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB235741-1FDA-4C90-BD6A-22D18D57D240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C09D81-AA53-4E82-BEA6-D321D95D2E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE1CDD1-27F1-456C-933E-24219E6190CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50BC0034-F043-41EC-AF00-E3DC739A31F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FFFB16-913A-49F4-8AEA-A104EC1D8BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545E77A4-B1E2-43FB-93A9-2BDCD71E809D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306F2A3B-EFFE-49E1-95BC-19F688830DBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20334",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tikiwiki.org/tiki-read_article.php?articleId=131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435127/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436432/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18143",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2024",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tikiwiki.org/tiki-read_article.php?articleId=131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435127/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436432/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative access by setting the loggedIn cookie to \"xY1zZoPQ\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katy_whitton:newscmslite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE9D84-35D0-44ED-A120-47D1C612197D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugreport.ir/index_62.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-332.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435019/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500407/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1993",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugreport.ir/index_62.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-332.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500407/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1, (2) Pretty Guestbook 1, and (3) Smile Guestbook 1 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the pagina parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuttophp:morris_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01305AE6-91E8-4BA3-9051-60F906FEFBB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuttophp:pretty_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A68FDE-DD42-417B-B628-8C60768E45BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuttophp:smile_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6117D079-DDAC-400D-B116-261761F12BD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20320",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20321",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20322",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435171/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435172/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435173/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435171/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435172/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435173/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary SQL commands via the uName parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qjstudios:qjforum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBB6F95-915B-4FC6-86F7-EAB7B044FECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435120/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435120/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsimplechoose:phpsimplechoose:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18582E9F-A09D-4F7B-9AB0-E01D53D7C4D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20306",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435165/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435684/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435165/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435684/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allows remote attackers to inject arbitrary web script or HTML via the WCE parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omegasoft:interneserviceslosungen:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB1294C-9E74-4F26-AD18-3DD537716583"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435109/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435109/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNVERIFIABLE **  NOTE: this issue does not contain any verifiable or actionable details.  Cross-site scripting (XSS) vulnerability in John Frank Asset Manager (AssetMan) 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via \"any of its input.\"  NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors.  Perhaps this should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_frank:asset_manager:2.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F0A740-A51B-4A3E-B7A1-FD4A252D4F55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20285",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435139/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435139/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNVERIFIABLE **  NOTE: this issue does not contain any verifiable or actionable details.  Cross-site scripting (XSS) vulnerability in Marco M. F. De Santis Php-residence 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via \"any of its input.\"  NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors.  Perhaps this should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-residence:php-residence:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF5EB22-65C8-4000-AAF3-06723A87E682"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20311",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435131/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435131/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote attackers to inject arbitrary web script or HTML via the user_error_message parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:circle_r:monster_top_list:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA38B7EF-6E1D-4D68-B155-6BC0DF4F1C2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435113/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435113/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.4_1:sarge1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE110FB0-77EF-40AB-9FD7-6D1410AA1296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37231F4-DEC9-46A7-8686-9B3C710CA396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:6.5_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C9F6F9-04C8-4169-B779-3195E31B8616"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20164",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20283",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_33_awstats.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osreviews.net/reviews/comm/awstats",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/290-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_33_awstats.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osreviews.net/reviews/comm/awstats",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/290-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the _PX_config[manager_path] parameter.  NOTE: this is a different executable and affected version than CVE-2006-0725."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plume-cms:plume_cms:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74437F07-216C-4DE3-8716-51AB78FA43E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20310",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435130/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2014",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435130/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a long A0001 argument that begins with a '\"' (double quote)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Alt-N MDaemon, posiblemente 9.0.1 y versiones anteriores, permite a atacantes remotos ejecutar código arbitrario a través de un argumento A0001 largo que comienza con un '\"' (comillas dobles)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63BE92A3-5320-4E68-89F7-BF977E602FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:2.8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6727183-BD1B-4816-A0B0-3CA24B1F41D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E791DD-1376-4E77-9D7B-C66E88146248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759C3190-DABF-4C54-8D26-A5285883BFA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF752E6A-0AB8-4B82-A895-9AF79B0783FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFA585E-4355-4497-8936-FD63E334B917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6906B4D1-9336-4E52-A1D4-1402F5EF2BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A1816E-0E48-4879-86A4-22E7FCCAC598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B02DB57-1B98-43AF-B400-73019A747C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E724258-DCD1-4F09-AD2F-3880F86FA649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "0906EDEB-A59F-4DDD-8763-AFA9EC78F9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2CFEEA75-350C-47D6-A2D4-8714D1D4907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772A222C-606C-42B5-A523-9584FFB9E0BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B8B55A-93D3-4456-8B84-DA437F7E18FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "EAD8D901-F60B-400B-A51E-0881D0077FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E419B0EF-DB52-43D7-906C-744CEF5D8E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB3DE93-03F4-4543-AF4D-A76C0AA86D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505D587A-DD1A-4C31-9C8E-D407CECF3545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E131AB50-9C43-4AF9-8637-618172FC1769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596930EE-960D-4307-B726-73DEBE5ABF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A221378-1198-4FBA-9857-05BA2E5E4B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A537AF6-0E86-41BD-AA41-B1598DCA01D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5162F06-31BD-4B04-8F60-A4ACBB7E16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCADFC8-99A1-4F7E-96E6-FD6F3F35EA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECE0B12-1F51-49A9-9C66-B7DC94ACE0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9125B2D-3EED-4014-8622-E9EBC5B2C99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA9FB24-DF9E-4A58-9F4B-B1613ADFCC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAC727D-046D-4021-BAE8-6CAD7890FEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B10DB1-1E18-4B58-B1E4-6A09871100CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A828E9-31AF-4199-9642-583830A1F180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F58E3A-8C0C-43C4-BAF3-05DD4DDC81C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437D2888-340C-48AB-815E-C04E5DE44CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46604A07-FBB0-4111-8B1C-2D01086BBB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD17AD0-27FE-49F5-A23D-2DE672D87C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4141E02E-C2DA-42C0-ABAB-62AFE4F869AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AA5447-4879-41A7-8F92-CAB0C3CD5E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9121D0-504E-444B-94C3-0E5C240376C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA25D7ED-BA8E-45E0-9399-B85499EF74D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB0B5F8-F010-4B70-947B-EA28EA38E237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F04FD52-7EA8-430E-86C7-5D3733A449AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFC20A7-14DF-4E00-873B-6F97A10EEA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9AF729-E2FA-4703-86AB-AD7416BD6EBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=114882270912151&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=114882270912151&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016166",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY85517&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY85518&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY88524&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY85517&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY85518&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY88524&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC95BB77-F425-44A8-A958-77070744648A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22935EE2-7E21-43E1-9E01-0D8779371A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A0D865-9EFD-4103-A43D-DAC89AF5F9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CD4938-A7B3-450E-AC8F-08648C41A3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A596800C-B18A-4FC3-88F3-87C125E5275C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64592E8F-2FB8-40BE-B0D0-80A7DBCB7708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2769B12B-42A7-4019-9F70-167061EF74E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869C1D84-2493-4634-8FB9-0F154CD700E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EC94A3E-5F1F-4F64-B711-C052AA97B97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspbb:aspbb:alpha1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8CDC73-D39A-47E4-B2F9-6A94A2DAE9EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435280/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435280/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c) search_price.php, and (d) product_details.php in the cosmicshop directory for CosmicShoppingCart allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, as demonstrated by the (1) query parameter in search.php and the (2) data parameter in search_cat.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmicphp:cosmicshoppingcart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0156980D-2E34-4EA5-8FCD-4EBA630B20D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20272",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1984",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=9058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=9058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cosmicphp:cosmicshoppingcart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0156980D-2E34-4EA5-8FCD-4EBA630B20D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20272",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=9058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/advisories/read/id=9058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vacation_rentals:vacation_rental_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DFAFB1-537A-4D73-BCE2-708ED268D9D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435167/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437938/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435167/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437938/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WikiNi 0.4.2 and earlier allows remote attackers to inject arbitrary HTML and web script by editing a Wiki page to contain the script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikini:wikini:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.2",
            "matchCriteriaId" : "4EF679A0-12D4-4CD8-AF8C-69EE4B7205D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435307/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone14.free.fr/advisories/3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone14.free.fr/advisories/3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the attacker have rights to edit at least one page of the wiki."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsa-3100_airspot_gateway:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47958B99-AF6C-4D33-9626-C9F87D2BC9EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eazel.es/media/advisory003-D-Link-DSA-3100-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435212/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eazel.es/media/advisory003-D-Link-DSA-3100-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435212/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2656",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-05-30T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename.  NOTE: tiffsplit is not setuid.  If there is not a common scenario under which tiffsplit is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el comando tiffsplit en libtiff 3.8.2 y versiones anteriores podría permitir a atacantes ejecutar código arbitrario a través de un nombre de archivo largo. NOTA: tiffsplit no es setuid. Si no hay un escenario común bajo el cual tiffsplit es llamado con argumentos de línea de comando controlados por el atacante, entonces quizá este problema no debería ser incluido en una CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.2",
            "matchCriteriaId" : "36B8B853-0FF0-4E2F-983D-683A0951CEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261FAE51-5207-4136-9FFE-2330A281266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32C83B9-F7DA-450A-A687-9A73734CD712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9485283A-B73E-4567-914A-42A86F5FFCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95892168-0FB6-4E3F-9303-2F9B3CF60D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5021564-5E0A-4DDC-BC68-200B6050043E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C50750-FE1D-42BA-9125-7D8E872AA2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEBA7B-81D5-4148-912B-9AD448BBE741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448555FE-8E91-4EA7-BA05-6915F5508319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC5E2C-B6A6-4999-A1EA-B91DA5C350C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2850FD9-8BE8-410E-8A24-28549DAACEB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=vuln-dev&m=114857412916909&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20501",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20520",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20766",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1091",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:095",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/289-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2006-May/msg00127.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=vuln-dev&m=114857412916909&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/289-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2006-May/msg00127.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue was addressed in libtiff packages as shipped in Red Hat Enterprise Linux 2.1, 3, and 4 via: https://rhn.redhat.com/errata/RHSA-2006-0603.html\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2008-08-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the \"=\" (equals) character, which is not properly handled during encoding."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mta:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.44.2",
            "matchCriteriaId" : "5F80A7EC-ACB8-4768-9132-A8514B317AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mta:0.37.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0869BB9-5308-406D-9107-EFAF25BCF96E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mta:0.38.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF5F93E-53A5-4A27-8563-14C41FA6A6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mta:0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF57BA8C-A955-4C50-B9CF-863CF056E0A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mta:0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59676325-66F3-42EA-935B-1436961E3B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mta:0.43.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A801771F-0CBF-40DC-91F2-D4C885B28FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mta:0.43.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2464DEE-21EF-40B6-A691-6B8A89DED2B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:double_precision_incorporated:courier_mta:0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA66C89A-F87F-4854-A358-2E8377DD431D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.courier-mta.org/beta/patches/verp-fix/README.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/294-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.courier-mta.org/beta/patches/verp-fix/README.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/294-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nDouble Precision Incorporated, Courier MTA, 0.53.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2",
            "matchCriteriaId" : "F39B31DE-357E-49E1-A404-62D1747EBBE5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20525",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20591",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20638",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20791",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21385",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21701",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23939",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1095",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:099",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0500.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436836/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18329",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0381",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-429",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11692",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/291-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436836/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://usn.ubuntu.com/291-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web script or HTML via certain inputs to (1) acc_verify.php or (2) project.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ifusionservices:iflance:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C626A0F4-2509-4FFE-8593-1E7561BB5C93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20282",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435036/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1988",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435036/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password fields, or certain other input text boxes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ifdate.com:ifdate:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "212E8057-805D-4113-9778-FA4A2AC6E13B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20287",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[pear_dir] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-webmail:v-webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.4",
            "matchCriteriaId" : "58439D50-8BC2-4A66-B311-8BFA47297EDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20297",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/30164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/30164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[pear_dir] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v-webmail:v-webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.4",
            "matchCriteriaId" : "58439D50-8BC2-4A66-B311-8BFA47297EDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016160",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/30164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/30164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting a carriage return and PHP code when updating a profile, which is appended after a special comment sequence into files in (1) wp-content/cache/userlogins/ (2) wp-content/cache/users/ which are later included by cache.php, as demonstrated using the displayname argument."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "331D3F1A-3F5D-4B36-8E3F-30DBD7B40479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/wordpress_202_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/wordpress_202_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) modules/credits/business.php, (2) modules/credits/credits.php, or (3) modules/credits/help.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docebolms:docebolms:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612C77B9-7C09-47E2-8F14-16C7F613DD96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20298",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435110/30/4710/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435110/30/4710/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the \"search box\"), (2) the prodid parameter in detail.php, and the (3) cid parameter in products.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:preprojects.com:pre_shopping_mall:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9392CB-2E12-4B51-AABE-3E18305DDA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20295",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435018/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in (1) fastchat.php and (2) fastshow.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarscripts.com:chatpat:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AB8794-B657-46F4-8E54-1CC58A4BD06D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20290",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendarscripts.com:chatpat:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AB8794-B657-46F4-8E54-1CC58A4BD06D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20290",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the (1) listingid parameter to (a) images.php, (b) index_other.php, or (c) request_info.php; (2) propertyid parameter to (d) searchlookup.php, (3) id parameter to (e) images.php, or (4) agentid parameter to (f) request_info.php.  NOTE: some of these issues might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interquest_internet_services:realty_pro_one:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0EE80A-5A9A-49DA-B98A-389560025BF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435012/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.html in Bulletin Board Elite-Board (E-Board) 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-board:elite-board:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7954C7-9D40-4178-A812-6E1B9A84ED99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20289",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435013/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435013/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) frm_id parameter to (a) show_forum.asp, (2) a search field to (b) forum_search.asp, (3) Email address or (4) Password to (c) admin/index.asp, (5) frm_cat_id parameter to (d) browse_forum_cat.asp, or (6) Message Subject or (7) Message Text field to (e) post_message.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tamber_forum:tamber_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.13",
            "matchCriteriaId" : "510CE64D-282B-4A6D-B305-6F304539061F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435125/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435125/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-30T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.3",
            "matchCriteriaId" : "72A91494-4D05-42F0-80F6-9230040ADBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA38F711-1FB7-4E7A-8D42-8B5A713B2FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF67B8C-C987-41DB-A4B2-A82D5624507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD52AFE-0F32-41CE-8A22-55AA3B261646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED11502-50F6-446B-B223-8E2B1B0163CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65952A65-78AC-4239-9D15-BA850AF64598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094040BF-4C59-4266-9683-76C59D332F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02151FE-89D6-4FB5-82E2-50A2F1046341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E1B205-864C-4FAD-8891-12FBAC0E090F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047CFF77-7616-41A2-9879-EA0E33B4922C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B321E2E-4AD3-4236-918A-F87804990FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2232ED2E-0323-4DBB-8540-98BD52750025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895472F7-D0F8-4C6A-95C6-15963652ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FAA03-DD05-472D-9F67-3089262F5E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D35A71-2F85-4F33-9480-81EE3EB0CEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F82ADBA-67A1-47E8-8D09-21138BDE84AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0DFCB9-3033-4509-BEDC-2B032524C4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A5853-5C97-412B-B55B-7430B23565DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D3CCE6-909B-46F4-AD8F-603E433C01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803A29EC-E63B-4F66-93E1-60698EE76011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07593CA3-8583-44FE-82CB-9DB32C988766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.2_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AA2A70-1F8B-4D03-84C6-352AB85F5CD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435288/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435288/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1175",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WeOnlyDo! SFTP (wodSFTP) ActiveX control is marked as safe for scripting, which allows remote attackers to read and write files in arbitrary locations by accessing the control from a web page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weonlydo:weonlydo_sftp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C46B800-8760-4D9F-9D72-F27BD074B309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20361",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/378604",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18192",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2064",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26752",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/20361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/378604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dispatch.cgi/_user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitescape:sitescape_forum:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF856A5D-972F-4477-8EBD-80E9171C7D57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20266",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/br-20060525-00374.html?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/br-20060525-00374.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitescape:sitescape_forum:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF856A5D-972F-4477-8EBD-80E9171C7D57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20266",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/br-20060525-00374.html?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/br-20060525-00374.html?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pre_projects:pre_news_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D01DCAFE-70C1-4769-A41D-ABAC92F3965A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435020/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435020/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the VPN client dialer) in Cisco VPN Client for Windows 4.8.00.* and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes, aka bug ID CSCsd79265."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:2.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "398B68C7-C1DB-4A62-B0A2-89C917768E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:3.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "20C66C87-1367-4440-A2C2-E6B657DA2743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:3.0.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D4BFB291-672C-437E-BBF4-B00D89C11EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:3.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4A270D7C-ACBC-41A4-A606-8A4F35894E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "59938F7D-5F64-4FC0-A5B2-C798AF297130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.1c:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "76060A99-ED0C-4125-B67E-FA8E4F57AAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:3.5.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2288FB91-4607-417D-8658-E1B8090BE40A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:4.7.00.0000:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "2039E7C3-E623-4ADC-B851-55BC33FA760D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:vpn_client:4.8.00.0000:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4C3777CC-C18F-4F93-8DD4-A0A348EDA1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20261",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016156",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a008069a323.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a008069a323.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php4script:az_photo_album_script_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0222CAF-91CB-48AC-AF41-FA7DB1C3A662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435003/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435003/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when register_globals and magic_quotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) index.php and (2) inc-common.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socketmail:socketmail:*:-:lite:*:*:*:*:*",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "B17BB06C-63F0-4A68-86C8-80EB59D62ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socketmail:socketmail:*:-:professional:*:*:*:*:*",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "72476EF6-FE07-42B0-A5A0-7967525DD0FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20273",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls6.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in BE_config.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _PSL[classdir] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:back-end:back-end_cms:0.7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D9B681-2EC1-4262-A3D6-AA00F31340D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in 404.php in open-medium.CMS 0.25 allows remote attackers to execute arbitrary PHP code via a URL in the REDSYS[MYPATH][TEMPLATES] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-medium:open-medium_cms:0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B8F257-5D2B-4CC0-A72D-813C211424FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20301",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF68F9B-BA01-4A3E-999A-5B2638C72593"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20296",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435017/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435017/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BASE_path parameter to (1) base_qry_common.php, (2) base_stat_common.php, and (3) includes/base_include.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A85C8C5-0A44-4F85-8E71-252334A0D664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6594E7A8-E4E4-4637-B6CC-1D21FAB211A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1326FC5-FE73-4489-8A4A-85F3B9904C7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_johnson:basic_analysis_and_security_engine:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C23F76-63F7-4B03-AC57-6817796EF57E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=577228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18298",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1996",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=577228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[AA_INC_PATH] parameter in (1) cached.php3, (2) cron.php3, (3) discussion.php3, (4) filldisc.php3, (5) filler.php3, (6) fillform.php3, (7) go.php3, (8) hiercons.php3, (9) jsview.php3, (10) live_checkbox.php3, (11) offline.php3, (12) post2shtml.php3, (13) search.php3, (14) slice.php3, (15) sql_update.php3, (16) view.php3, (17) multiple files in the (18) admin/ folder, (19) includes folder, and (20) modules/ folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actionapps:actionapps:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCB3A08-0445-4D10-B405-8CE1E54C352D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20299",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address (useremail parameter)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agtc_websolutions:php-agtc_membership_system:1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200C25A8-AF80-448E-B237-8E0922BFD4A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20305",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the employees node (class.employee.inc) in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D5AEF1-38CE-4B89-A15A-89D9BF3BEA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:achievo:achievo:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8633CE2A-7814-4963-BB65-B4499BBA5186"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.achievo.org/show_bug.cgi?id=624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20327",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.achievo.org/download/releasenotes/1_2_1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.achievo.org/show_bug.cgi?id=624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.achievo.org/download/releasenotes/1_2_1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) debut_image parameter in (a) article-album.php3, (2) date parameter in (b) rubrique.php3, and the (3) perso and (4) aide parameters to (c) an unknown script, probably index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eva-web:eva-web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "7EC994AB-3768-4190-9544-AFC16071F9F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/eva-web-212-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/eva-web-212-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers to obtain the full path of the web server via invalid (1) perso or (2) aide parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eva-web:eva-web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "7EC994AB-3768-4190-9544-AFC16071F9F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/eva-web-212-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/eva-web-212-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified \"information leakage\" vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to access arbitrary images, including dynamically generated images, via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amule:amule:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D55923-5811-4DE2-BC6D-27E68CEB1034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20351",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.amule.org/wiki/index.php/Changelog_2.1.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.amule.org/wiki/index.php/Changelog_2.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the full pathname of the file is known.\r\nThis vulnerability is addressed in the following product release:\r\naMule, aMule, 2.1.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to read arbitrary image, HTML, or PHP files via unknown vectors, probably related to directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amule:amule:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D55923-5811-4DE2-BC6D-27E68CEB1034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20351",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.amule.org/wiki/index.php/Changelog_2.1.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18145",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.amule.org/wiki/index.php/Changelog_2.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the full pathname of the file is known.\r\nThis vulnerability is addressed in the following product release:\r\naMule, aMule, 2.1.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a \"..\" in the phpEx parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nivisec:hacks_list:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.20",
            "matchCriteriaId" : "FBEA8796-7FE2-46C0-B3FD-EEA6FC33C6DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nivisec.com/article.php?l=vi&ar=15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=37",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435285/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nivisec.com/article.php?l=vi&ar=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435285/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) form.php, (2) customize.php, and (3) initialize.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6AB470-A16C-4378-B878-EF3ED523392A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435276/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435276/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/upprocess.php in DGNews 1.5 and earlier allows remote attackers to execute arbitrary code by uploading scripts with arbitrary extensions to the img directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dgnews:dgnews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "B582E4EC-05EF-4505-ADA5-C857C50033D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/05/dgnews-v-15-file-upload-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20340",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/05/dgnews-v-15-file-upload-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires access to the administration section."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and the (2) catid parameter in topics.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-content_forums:easy-content_forums:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236A7FAE-560A-4474-98AE-16F64D6DBBDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435140/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) startletter parameter in userview.asp and the (2) forumname parameter in topics.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-content_forums:easy-content_forums:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "236A7FAE-560A-4474-98AE-16F64D6DBBDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435140/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1) layout/professional/functions.php or (2) getimage.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0_sr2",
            "matchCriteriaId" : "64923827-8D06-4489-81D5-DF8BBF56FF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE5B106-CE02-4864-A1FB-B18F66876383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994E2271-DA42-4870-AB31-F3D9A29CFE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.5_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9D0264-484D-4BCF-9250-EB3D3953107F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147BFA8A-ADBF-4673-AA7B-EF595EB61A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E851FB8-7812-47B1-BADD-D2899651C37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB30D22-4DEF-4DF0-AB46-EE7FA992A634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2935349-9CFD-4BF4-8DBE-7713DECF7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2685AAF-C3E4-4C1B-A8BA-CA472B0261B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7364F137-0778-4B63-8422-D1EC162EA506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDD4DA5-7D47-4D99-9F0C-1D0C8358C137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B4CA68-D7F0-442F-AB2B-FD092FDE90F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622E7DFE-186D-4047-B355-0A0A8225BE57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA12BA3-AAED-42D3-965C-85C1D0078044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F1D50F-93C6-4897-A369-7C367B1D544B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A8A7C5-5035-44CF-B688-438AF024CD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A6B63-4AE5-4A4C-A801-E664F155ABB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD54CA0-BEA1-4C43-9DB1-F5F4321CC275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FF2F3B-C4A0-4A67-B27D-90F091E75454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E112CB5B-FBE1-4EF6-927E-96AEEB11C55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF50C1-FB1B-451B-9363-4C1589F075A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C4EF8C-515F-4967-BB39-5DD49E6CD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B324FA71-EEAA-4E52-BF2C-20F3A2240A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00D6C8B-2533-4BC4-93AD-87FFCBDF521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C8A9D-36BC-4C33-8873-9476804F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB261F-59CE-4C0C-91C2-C094CFB97888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CF673C-9C94-4024-8757-573462130EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E811EA8-D4B4-4631-9EA8-E4EB9E845DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41502EF5-BB54-428C-B88B-796C8310B0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C9BD76-B8F4-4774-926D-4FA1CEF9DA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDF54AF-C09D-4DF7-9D86-6C611A3153A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2E36B5-3932-4E71-9FB5-D4BBC3F97820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF72E47-143C-47F4-B54E-7A01951C3957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5CC9A0-0EA9-494B-B726-0E514CADF6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666B3BC5-BCD4-444B-B673-BB0F64B24553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DFD93-BA8A-49BE-9063-E40AC757708A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75D7F33-6DD0-4B15-B953-26F0740C31D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-336.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20316",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.geeklog.net/index.php?topic=Security",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435295/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.geeklog.net/index.php?topic=Security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435295/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nGeeklog, Geeklog, 1.4.0sr3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE5B106-CE02-4864-A1FB-B18F66876383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994E2271-DA42-4870-AB31-F3D9A29CFE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.5_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9D0264-484D-4BCF-9250-EB3D3953107F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147BFA8A-ADBF-4673-AA7B-EF595EB61A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E851FB8-7812-47B1-BADD-D2899651C37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB30D22-4DEF-4DF0-AB46-EE7FA992A634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2935349-9CFD-4BF4-8DBE-7713DECF7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2685AAF-C3E4-4C1B-A8BA-CA472B0261B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7364F137-0778-4B63-8422-D1EC162EA506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDD4DA5-7D47-4D99-9F0C-1D0C8358C137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B4CA68-D7F0-442F-AB2B-FD092FDE90F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622E7DFE-186D-4047-B355-0A0A8225BE57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA12BA3-AAED-42D3-965C-85C1D0078044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F1D50F-93C6-4897-A369-7C367B1D544B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A8A7C5-5035-44CF-B688-438AF024CD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A6B63-4AE5-4A4C-A801-E664F155ABB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD54CA0-BEA1-4C43-9DB1-F5F4321CC275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FF2F3B-C4A0-4A67-B27D-90F091E75454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E112CB5B-FBE1-4EF6-927E-96AEEB11C55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF50C1-FB1B-451B-9363-4C1589F075A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C4EF8C-515F-4967-BB39-5DD49E6CD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B324FA71-EEAA-4E52-BF2C-20F3A2240A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00D6C8B-2533-4BC4-93AD-87FFCBDF521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C8A9D-36BC-4C33-8873-9476804F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB261F-59CE-4C0C-91C2-C094CFB97888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CF673C-9C94-4024-8757-573462130EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E811EA8-D4B4-4631-9EA8-E4EB9E845DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41502EF5-BB54-428C-B88B-796C8310B0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C9BD76-B8F4-4774-926D-4FA1CEF9DA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDF54AF-C09D-4DF7-9D86-6C611A3153A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2E36B5-3932-4E71-9FB5-D4BBC3F97820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF72E47-143C-47F4-B54E-7A01951C3957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5CC9A0-0EA9-494B-B726-0E514CADF6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666B3BC5-BCD4-444B-B673-BB0F64B24553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DFD93-BA8A-49BE-9063-E40AC757708A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E07EB8A-5B67-41B9-8358-1CE59E1B6E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75D7F33-6DD0-4B15-B953-26F0740C31D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-336.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20316",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.geeklog.net/index.php?topic=Security",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435295/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.geeklog.net/index.php?topic=Security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435295/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nGeeklog, Geeklog, 1.4.0sr3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the loginname parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0_sr2",
            "matchCriteriaId" : "64923827-8D06-4489-81D5-DF8BBF56FF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE5B106-CE02-4864-A1FB-B18F66876383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994E2271-DA42-4870-AB31-F3D9A29CFE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.5_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9D0264-484D-4BCF-9250-EB3D3953107F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147BFA8A-ADBF-4673-AA7B-EF595EB61A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E851FB8-7812-47B1-BADD-D2899651C37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB30D22-4DEF-4DF0-AB46-EE7FA992A634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2935349-9CFD-4BF4-8DBE-7713DECF7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2685AAF-C3E4-4C1B-A8BA-CA472B0261B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7364F137-0778-4B63-8422-D1EC162EA506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDD4DA5-7D47-4D99-9F0C-1D0C8358C137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B4CA68-D7F0-442F-AB2B-FD092FDE90F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622E7DFE-186D-4047-B355-0A0A8225BE57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA12BA3-AAED-42D3-965C-85C1D0078044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F1D50F-93C6-4897-A369-7C367B1D544B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A8A7C5-5035-44CF-B688-438AF024CD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A6B63-4AE5-4A4C-A801-E664F155ABB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD54CA0-BEA1-4C43-9DB1-F5F4321CC275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FF2F3B-C4A0-4A67-B27D-90F091E75454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E112CB5B-FBE1-4EF6-927E-96AEEB11C55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF50C1-FB1B-451B-9363-4C1589F075A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C4EF8C-515F-4967-BB39-5DD49E6CD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B324FA71-EEAA-4E52-BF2C-20F3A2240A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00D6C8B-2533-4BC4-93AD-87FFCBDF521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C8A9D-36BC-4C33-8873-9476804F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB261F-59CE-4C0C-91C2-C094CFB97888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CF673C-9C94-4024-8757-573462130EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E811EA8-D4B4-4631-9EA8-E4EB9E845DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41502EF5-BB54-428C-B88B-796C8310B0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C9BD76-B8F4-4774-926D-4FA1CEF9DA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDF54AF-C09D-4DF7-9D86-6C611A3153A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2E36B5-3932-4E71-9FB5-D4BBC3F97820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF72E47-143C-47F4-B54E-7A01951C3957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5CC9A0-0EA9-494B-B726-0E514CADF6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666B3BC5-BCD4-444B-B673-BB0F64B24553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DFD93-BA8A-49BE-9063-E40AC757708A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75D7F33-6DD0-4B15-B953-26F0740C31D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kapda.ir/advisory-336.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20316",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.geeklog.net/index.php?topic=Security",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435295/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18154",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kapda.ir/advisory-336.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.geeklog.net/index.php?topic=Security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435295/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled (for the \"loginname\" parameter).\r\nThis vulnerability is addressed in the following product release:\r\nGeeklog, Geeklog, 1.4.0sr3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0_sr2",
            "matchCriteriaId" : "64923827-8D06-4489-81D5-DF8BBF56FF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE5B106-CE02-4864-A1FB-B18F66876383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994E2271-DA42-4870-AB31-F3D9A29CFE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.5_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9D0264-484D-4BCF-9250-EB3D3953107F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147BFA8A-ADBF-4673-AA7B-EF595EB61A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E851FB8-7812-47B1-BADD-D2899651C37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB30D22-4DEF-4DF0-AB46-EE7FA992A634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2935349-9CFD-4BF4-8DBE-7713DECF7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2685AAF-C3E4-4C1B-A8BA-CA472B0261B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7364F137-0778-4B63-8422-D1EC162EA506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.7_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDD4DA5-7D47-4D99-9F0C-1D0C8358C137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B4CA68-D7F0-442F-AB2B-FD092FDE90F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622E7DFE-186D-4047-B355-0A0A8225BE57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA12BA3-AAED-42D3-965C-85C1D0078044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F1D50F-93C6-4897-A369-7C367B1D544B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A8A7C5-5035-44CF-B688-438AF024CD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A6B63-4AE5-4A4C-A801-E664F155ABB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD54CA0-BEA1-4C43-9DB1-F5F4321CC275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.8_1_sr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8FF2F3B-C4A0-4A67-B27D-90F091E75454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E112CB5B-FBE1-4EF6-927E-96AEEB11C55F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF50C1-FB1B-451B-9363-4C1589F075A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C4EF8C-515F-4967-BB39-5DD49E6CD197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B324FA71-EEAA-4E52-BF2C-20F3A2240A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00D6C8B-2533-4BC4-93AD-87FFCBDF521A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794C8A9D-36BC-4C33-8873-9476804F00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFB261F-59CE-4C0C-91C2-C094CFB97888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.9_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CF673C-9C94-4024-8757-573462130EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E811EA8-D4B4-4631-9EA8-E4EB9E845DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41502EF5-BB54-428C-B88B-796C8310B0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24C9BD76-B8F4-4774-926D-4FA1CEF9DA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.10_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDF54AF-C09D-4DF7-9D86-6C611A3153A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2E36B5-3932-4E71-9FB5-D4BBC3F97820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9A0E7-7383-4B2C-AAD8-2FED5B86A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6B8B4-88A2-45A3-BD2E-6C0D103CB25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF72E47-143C-47F4-B54E-7A01951C3957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11_sr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA5CC9A0-0EA9-494B-B726-0E514CADF6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666B3BC5-BCD4-444B-B673-BB0F64B24553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DFD93-BA8A-49BE-9063-E40AC757708A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75D7F33-6DD0-4B15-B953-26F0740C31D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20316",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/index.php?topic=Security",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/index.php?topic=Security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER['REMOTE_ADDR']."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F05A1F-2227-4166-807B-1BDE2EA8F245"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/wordpress_202_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/wordpress_202_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1515",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-05-31T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the addnewword function in typespeed 0.4.4 and earlier might allow remote attackers to execute arbitrary code via unknown vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C74DC3-3A64-4FF2-B4F7-DFDBE79D7A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC6BDB2-BE84-46BD-80B3-320A62096C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0F8605-2F1D-425B-A15B-6F35C8AF9BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A823A68-C1EC-42E5-B295-14E7991A37F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAB84DD-DCA2-4D6D-9B1A-0487E6C0AF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "885C698B-11AF-432F-8728-3E05E922BC64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35209F02-76FD-4ABC-9C95-267E038C74C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D1F6D5-020C-4983-A9B9-99E014FA02CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31ABD58E-2CF3-4548-9EFB-3A151ECB2EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A682F057-9681-4587-936F-74ED28A41473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB432863-55FF-4844-BC63-373B7AF2B556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typespeed:typespeed:0.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CD4273-330C-4B92-A92F-56CE8BD14452"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20379",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20393",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20708",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1084",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-20.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18194",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2087",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in cleartext, which allows remote attackers to read sensitive vulnerability information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:c5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1BF9078-E7D0-4EF1-B63A-9B1B05329635"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/135529",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/921017",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6RCB",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6RJY",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/135529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/921017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6RCB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6RJY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vulnerabilities and security issues have been fixed in C5 EVM version 2.8.1."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified denial of service via a large number of forged client registration messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:c5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1BF9078-E7D0-4EF1-B63A-9B1B05329635"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/207161",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QANQU",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/207161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QANQU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vulnerabilities and security issues have been fixed in C5 EVM version 2.8.1."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause a denial of service via forged \"session start\" messages that cause AVR to connect to arbitrary hosts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.0",
            "matchCriteriaId" : "DF9CE168-2F62-4D6C-80F2-20E05FA70377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/487617",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QANUZ",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/487617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QANUZ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vulnerabilities and security issues have been fixed in C5 EVM version 2.8.1."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F5D184-8F4D-483C-8A1A-D398D9CA1333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/207337",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAPAL",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/207337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAPAL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vulnerabilities and security issues have been fixed in C5 EVM version 2.8.1."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F5D184-8F4D-483C-8A1A-D398D9CA1333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/227929",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/873409",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAK6D",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/227929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/873409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAK6D",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 2.8.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) execute arbitrary code on a client or (2) forge messages to the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F5D184-8F4D-483C-8A1A-D398D9CA1333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/288121",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/919345",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6RYL",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QANK7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/288121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/919345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6RYL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QANK7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 2.8.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers with the key to decrypt communications."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F5D184-8F4D-483C-8A1A-D398D9CA1333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/566553",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAQK9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/566553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAQK9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to 2.8.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F5D184-8F4D-483C-8A1A-D398D9CA1333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/346377",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAQN6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/346377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAQN6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to 2.8.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows remote attackers to modify and replay messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F5D184-8F4D-483C-8A1A-D398D9CA1333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/353769",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/456729",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6S8D",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAQFH",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/353769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/456729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6S8D",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAQFH",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 2.8.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:c5_enterprise_vulnerability_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30254D64-022C-4D7B-A276-B9DC905AAFC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/353945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6JLSP7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/353945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6JLSP7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:c5_enterprise_vulnerability_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30254D64-022C-4D7B-A276-B9DC905AAFC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/635721",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6SDL",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/635721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6Q6SDL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:c5_enterprise_vulnerability_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30254D64-022C-4D7B-A276-B9DC905AAFC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/397417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QANYE",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/397417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QANYE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:c5_enterprise_vulnerability_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30254D64-022C-4D7B-A276-B9DC905AAFC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584329",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAP4D",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/584329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAP4D",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-05-31T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via modified pathnames, possibly due to a directory traversal issue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secure_elements:c5_enterprise_vulnerability_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30254D64-022C-4D7B-A276-B9DC905AAFC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/764025",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/912217",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAJFA",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAPC5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/764025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/912217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAJFA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/WDON-6QAPC5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrated by using a stored procedure that provides the username and cleartext password of every account."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiwa:financials:6.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9148205-9D84-491F-861E-30E25D8DAAD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20342",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435352/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435352/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiwa:financials:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.14",
            "matchCriteriaId" : "0A580F97-B9DB-484C-A1F8-3A83FE7223D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20342",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435352/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435352/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:variomat:variomat:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB151D40-37FA-419E-BBC4-F0A083F25B16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435290/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435290/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in news.php in VARIOMAT allows remote attackers to inject arbitrary HTML or web script via the subcat parameter.  NOTE: this issue might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:variomat:variomat:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB151D40-37FA-419E-BBC4-F0A083F25B16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435290/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435290/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:out_of_the_trees_web_design:selectapix:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1427FE-450B-441B-93AA-C0C32ACC1D38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that contains a large number of nested marquee tags.  NOTE: a followup post indicated that the initial report could not be verified."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/435373/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435411/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435882/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436268/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435373/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435882/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other administrators via the \"Admin note\" feature, a different vulnerability than CVE-2006-2227."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A94FF3-C732-4552-A32B-53C4739F7E52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2006/May/0408.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/advisories/Advisory-22.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/May/0408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.neosecurityteam.net/advisories/Advisory-22.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2439",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zipcentral:zipcentral:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.01",
            "matchCriteriaId" : "80C5A24E-E713-4EF2-A03D-1663B1A6BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20179",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-35/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016176",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/25830",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435416/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18160",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2049",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26737",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-35/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435416/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RedCarpet command-line client (rug) does not verify SSL certificates from a server, which allows remote attackers to read network traffic and execute commands via a man-in-the-middle (MITM) attack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "SUSE has released an advisory (SUSE-SA:2006:029) including fixes to address this issue. Please see the referenced advisory for more information."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:eggblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "C8DBA1CF-D287-45DE-AFE5-DBF12A8E6C3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20352",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=36",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=36",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435284/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435300/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435284/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has released version 3.0.7 of eggblog to address this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the config[fsBase] parameter in (1) drucken.php, (2) drucken2.php, (3) email_an_benutzer.php, (4) rechnung.php, (5) suche/search.php and (6) adminbereich/admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastpublish:fastpublish_cms:1.6.9.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB33DA0D-2317-4CFE-A5AB-BEDAAA5CAEED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20346",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:eggblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.6",
            "matchCriteriaId" : "C8DBA1CF-D287-45DE-AFE5-DBF12A8E6C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:eggblog:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0512EBD8-44A0-4DF5-8DF9-725216C269F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:eggblog:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F4A30F-A4A2-4DED-B288-28D8F84380DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=36",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435284/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435300/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435284/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nEpic Designs, eggblog, 3.0.7"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jan_chmelik:photoalbum_bandw:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283737B6-26DE-42BF-8C14-54251A14EACF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jan_chmelik:photoalbum_bandw:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283737B6-26DE-42BF-8C14-54251A14EACF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT) 11012004_ver2f, when register_globals is enabled, allows remote attackers to include arbitrary files via the GLOBALS[CLASS_PATH] parameter.  NOTE: this issue might be resultant from a global overwrite vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hot_open_tickets:hot_open_tickets:2f_2004-11-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73ED74B2-8FB6-4C5F-B60C-8AD10FC2F951"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) e_mesaj_yas.asp, (b) edi_haber.asp, and (c) haber_devam.asp; (2) hid parameter in (d) yazdir.asp and (e) yorum.asp, and the (3) e parameter in (f) arsiv.asp.  NOTE: with administrator credentials, additional vectors exist including (4) yid parameter to (g) admin/y_admin.asp, (5) bid parameter to (h) admin/reklam_detay.asp, hid parameter to (i) admin/detay_yorum.asp and (j) admin/haber_sil.asp, (6) kid parameter to (k) admin/kategori_d.asp, (7) tur parameter to (l) admin/haber_ekle.asp, (8) s parameter to (m) admin/e_mesaj_yaz.asp, and id parameter to (n) admin/admin_sil.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigma_haber:enigma_haber:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3",
            "matchCriteriaId" : "03F786A5-3FE4-4D23-94BC-19DFE6C74D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigma_haber:enigma_haber:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BE9019-2DC7-4BE2-9A46-7FE21F41A892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20357",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016171",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=34",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=34",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435282/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18148",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435282/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) yas_1, (2) yas_2, and (3) yas_3 parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-nuke:mini-nuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "FD848851-1BF7-4CDB-B503-5691F3AE359C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016170",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435279/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18126",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435279/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-nuke:mini-nuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "FD848851-1BF7-4CDB-B503-5691F3AE359C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435279/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435279/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by the attacker."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mini-nuke:mini-nuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "FD848851-1BF7-4CDB-B503-5691F3AE359C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435279/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435279/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity MOD Plus (Amod) 1.1.0, as used with phpBB when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: This is a similar vulnerability to CVE-2006-2507."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activity_mod_plus:activity_mod_plus:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9490479-531D-4C9C-A4F3-5E5F20EA6C08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0709.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpbb-tweaks.com/topics.html-p-17623#17623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20354",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=38",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=38",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435298/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0709.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://phpbb-tweaks.com/topics.html-p-17623#17623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435298/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in blend_data/blend_common.php in Blend Portal 1.2.0, as used with phpBB when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: This is a similar vulnerability to CVE-2006-2507."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb-portal:blend_portal:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FC2A86-0C20-47EB-ACFF-2830CBCD7125"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phpbb-tweaks.com/topics.html-p-17623#17623",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20350",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=41",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=41",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435289/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435298/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpbb-tweaks.com/topics.html-p-17623#17623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435289/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435298/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary groups, including the administrative group, via a modified groupid parameter when creating a user via the addDB action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukedit:nukedit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.6",
            "matchCriteriaId" : "C43D4940-7E1F-4C5F-8A80-B2C6EE51EF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukedit:nukedit:4.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D34433-B5C7-49FB-9256-F851EDA0535C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukedit:nukedit:4.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5582561B-CCBB-4DDF-86AF-F5726C3D6674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukedit:nukedit:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AE0BBA-DA07-4EE5-A872-78AC9A3A89EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nukedit:nukedit:4.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C141F9F8-ADD5-4294-861B-5133EF43CC99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20348",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-337.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/attach-1661-nukedit.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435311/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-337.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/attach-1661-nukedit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435311/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.2",
            "matchCriteriaId" : "82E341BE-F5BE-4294-9C9C-530CFC5CC07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange:0.8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA5BD5C-8ACE-42CB-AC1E-78F5E9F7DCC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.golem.de/0605/45407.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.open-xchange.org/bugzilla/show_bug.cgi?id=2815",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435198/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.golem.de/0605/45407.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.open-xchange.org/bugzilla/show_bug.cgi?id=2815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435198/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Exploit only works on Open Source versions of this product."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the tinybb_footers parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:tinybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "77EF67C3-38CA-485C-AA6D-5886C6389C8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20356",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016172",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435281/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/487311/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435281/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/487311/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b) login.php, and other unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:tinybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "77EF67C3-38CA-485C-AA6D-5886C6389C8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20356",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016172",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435281/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435281/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed in an error message, and other unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epic_designs:tinybb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "77EF67C3-38CA-485C-AA6D-5886C6389C8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016172",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=33",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435281/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?getxpl=33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435281/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D0FD99-066F-4161-9524-01DD01F31527"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/65357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20140",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435790/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/65357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435790/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nDrupal, Drupal, 4.6.7\r\nDrupal, Drupal, 4.7.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D0FD99-066F-4161-9524-01DD01F31527"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/65409",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20140",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435794/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/65409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435794/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"mod_mime\" module is installed in Apache, and that a \" .htaccess\" file has not been used to restrict access to the directory.\r\nThis vulnerability is addressed in the following product releases:\r\nDrupal, Drupal, 4.7.1 \r\nDrupal, Drupal, 4.6.7"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facile_interactive_web:facile_interactive_web:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784BD4E3-A2E1-4FDB-9B89-DA140E4FB3DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facile_interactive_web:facile_interactive_web:0.8.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F281E0-167E-45C2-90CF-6E31720F0079"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=35",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=35",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435283/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435283/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) pathfile parameter in (a) p-editpage.php and (b) p-editbox.php, and the (2) mytheme and (3) myskin parameters in multiple \"p-themes\" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facile_interactive_web:facile_interactive_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.5",
            "matchCriteriaId" : "AC5BCC6E-A012-473C-AB9D-CCCAE84614BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facile_interactive_web:facile_interactive_web:0.8.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F281E0-167E-45C2-90CF-6E31720F0079"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=35",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=35",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435283/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435283/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in index.php, and the (2) mytheme and (3) myskin parameters in multiple \"p-themes\" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao.  NOTE: vectors 2 and 3 might be resultant from file inclusion issues."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facile_interactive_web:facile_interactive_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.5",
            "matchCriteriaId" : "AC5BCC6E-A012-473C-AB9D-CCCAE84614BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facile_interactive_web:facile_interactive_web:0.8.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F281E0-167E-45C2-90CF-6E31720F0079"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=35",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=35",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435283/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18151",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?getxpl=35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435283/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitrary files or execute PHP code via a .. (dot dot) sequence and trailing null (%00) byte in the subsite parameter in a showsubsite todo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fredi_bach:phpmydesktop_arcade:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_final",
            "matchCriteriaId" : "DCBA57CE-C657-4865-870E-7228F42342E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20373",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016180",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435365/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435365/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary SQL commands via multiple vectors, as demonstrated by the (1) type parameter in adminfunctions.php and the (2) catalogue_id parameter in editcatalogue.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_searchable_image_catalogue:open_searchable_image_catalogue:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0.0",
            "matchCriteriaId" : "38CE020E-969C-4F9D-A45C-8B2C5E20DBE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20341",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/core.php?r1=477&r2=631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435380/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/core.php?r1=477&r2=631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435380/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to Version 0.7.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the (1) txtCustomField and (2) CustomFieldID array parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_searchable_image_catalogue:open_searchable_image_catalogue:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0.0",
            "matchCriteriaId" : "38CE020E-969C-4F9D-A45C-8B2C5E20DBE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20341",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435380/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435380/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 0.7.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary web scripts or HTML via failed SQL queries, which is reflected in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_searchable_image_catalogue:open_searchable_image_catalogue:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0.0",
            "matchCriteriaId" : "38CE020E-969C-4F9D-A45C-8B2C5E20DBE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/core.php?r1=477&r2=631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435380/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/core.php?r1=477&r2=631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435380/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 0.7.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary web scripts or HTML via the item_list parameter in search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_searchable_image_catalogue:open_searchable_image_catalogue:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0.0",
            "matchCriteriaId" : "38CE020E-969C-4F9D-A45C-8B2C5E20DBE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435380/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435380/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 0.7.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet) password."
      }, {
        "lang" : "es",
        "value" : "El RedCarpet /etc/Ximian/rcd.conf, archivo de configuración en Novell Linux Desktop 9 y SUSE SLES 9 tiene permisos de lectura en todo el mundo, lo que permite a los atacantes obtener el rc (RedCarpet) contraseña."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2753",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-01T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6AAD13-3CA1-4543-834B-39FB53D4462D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBEDF5A-5205-4012-B9B8-0FA304E7119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC969A5-52CC-44F2-A929-DE559A5D7624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E063D-355D-4A5A-A05F-36BF582DE36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24BD3CF-0047-47F8-8B13-E2A6348E3924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C06765-D153-4D4D-B8CD-DB2E386E082B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E942FA-A458-4607-B48D-FCA112AFF1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E241159-FAA4-4DCF-AB68-BE36DF95D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6995B6-B594-454B-BD26-EACFB8241DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4F891-2A03-45A8-A49C-7F8B8F7D8407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E62AC4-954E-476C-98BE-C138E328AE7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.mysql.com/announce/364",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20365",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20489",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20531",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20541",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20562",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20625",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20712",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016216",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-13.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0544.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18219",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0034/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-288-3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2105",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26875",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10312",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/303-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.mysql.com/announce/364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0544.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-288-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/303-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-01T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2F45B8-B9FB-4D43-B2DD-98413F5F2B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DCE7803-E652-4A17-8EEB-B91C81CF48E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5CB439-5F0B-40CF-8564-6875CAC74FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5E524E-1B71-46B5-A14E-C2342851C0FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE103338-9AE7-4230-A8B2-09273004B4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12621DED-ABF1-47A7-961C-E6DE1F6302AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8026929-4845-46E4-A6F8-E60CA498201B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE01BD68-D6DC-4220-A3F0-71961CEA205F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DE3F16-E171-4FA3-9B00-3F944A4E7604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F7B718-0E5C-4900-A5DE-D59D37EC79D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8805A0-F543-450D-82E9-EE923904E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58779045-578C-41D5-9CAE-D6F48C91654C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c.diff?r1=1.21&r2=1.22&hideattic=1&sortbydate=0&f=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c?hideattic=1&sortbydate=0#rev1.22",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openldap.org/software/release/changes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.008-openldap.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436674/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/305-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c.diff?r1=1.21&r2=1.22&hideattic=1&sortbydate=0&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c?hideattic=1&sortbydate=0#rev1.22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openldap.org/software/release/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.008-openldap.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436674/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/305-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue is not exploitable as the status file is only written to and read by the slurpd process.  Therefore this is not a vulnerability that affects Red Hat Enterprise Linux 2.1, 3, or 4.\n",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2308",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-02T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY or (6) APPEND commands."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etype:eserv:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8071783F-930B-41C1-9284-290314BDB568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etype:eserv:3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A76EA1C-D6C0-4AA3-91FD-2FF4301304B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20059",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-37/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1006",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.eserv.ru/ru/news/news_detail.php?ID=235",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435415/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18179",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2066",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26738",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-37/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eserv.ru/ru/news/news_detail.php?ID=235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435415/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2309",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-02T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etype:eserv:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8071783F-930B-41C1-9284-290314BDB568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etype:eserv:3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A76EA1C-D6C0-4AA3-91FD-2FF4301304B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20059",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-37/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1006",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.eserv.ru/ru/news/news_detail.php?ID=235",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435415/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18179",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2066",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26741",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-37/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eserv.ru/ru/news/news_detail.php?ID=235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435415/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2654",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via \"..\\\\\" sequences.  NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "67126F28-EB7D-4941-B37C-5D924F47A073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A612F6-E4EB-4E34-8F55-79E16C74758E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "5C19B266-8FE7-49ED-8678-2D522257491D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "15C4D826-A419-45F5-B91C-1445DB480916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9F2B04-A1F2-4788-A53D-C8274A758DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD85EB2-09BA-46A2-8F67-8398567C3E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5309ED-D84F-4F52-9864-5B0FEEEE5022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD73CDB-94C5-4DBF-8B4C-DD3E4E399445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BC012-ADE4-468F-9A25-261CD8055694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20390",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016194",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/25851",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18202",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26860",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/20390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2655",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6428EB-5E1A-41CB-979C-4C9402251D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCA9879-C9F5-475A-8EC9-04D151001C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "0A94132F-4C47-49CC-B03C-8756613E9A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*",
            "matchCriteriaId" : "46A60ED5-1D92-4B40-956F-D1801CAB9039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*",
            "matchCriteriaId" : "3F629879-66F0-427B-86D8-D740E0E3F6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*",
            "matchCriteriaId" : "C89129C5-A1DB-4018-B43A-C60C8E650080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4416CBA-76B9-4051-B015-F1BE89517309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "8C64EE9C-18E1-49C6-96DE-7E6F1607C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "231B70A8-890A-4790-A33A-64228656BF0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20389",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016193",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.osvdb.org/25852",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18204",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26792",
        "source" : "secteam@freebsd.org"
      }, {
        "url" : "http://secunia.com/advisories/20389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD52AFE-0F32-41CE-8A22-55AA3B261646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:5.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED11502-50F6-446B-B223-8E2B1B0163CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65952A65-78AC-4239-9D15-BA850AF64598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094040BF-4C59-4266-9683-76C59D332F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02151FE-89D6-4FB5-82E2-50A2F1046341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E1B205-864C-4FAD-8891-12FBAC0E090F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047CFF77-7616-41A2-9879-EA0E33B4922C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B321E2E-4AD3-4236-918A-F87804990FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2232ED2E-0323-4DBB-8540-98BD52750025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895472F7-D0F8-4C6A-95C6-15963652ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FAA03-DD05-472D-9F67-3089262F5E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D35A71-2F85-4F33-9480-81EE3EB0CEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F82ADBA-67A1-47E8-8D09-21138BDE84AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0DFCB9-3033-4509-BEDC-2B032524C4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124A5853-5C97-412B-B55B-7430B23565DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66D3CCE6-909B-46F4-AD8F-603E433C01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803A29EC-E63B-4F66-93E1-60698EE76011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07593CA3-8583-44FE-82CB-9DB32C988766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.2_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AA2A70-1F8B-4D03-84C6-352AB85F5CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD5A8F6-8B50-4B2D-A3DA-A0141EFE55A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435288/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435296/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18152",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435288/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eitsop My Web Server 1.0 allows remote attackers to cause a denial of service (application crash) via a long GET request.  NOTE: CVE analysis suggests that this is a different product, and therefore a different vulnerability, than CVE-2002-1897."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eitsop:my_web_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618B20D-1ADC-4D30-B224-AE2AC7616C82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0722.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/May/0563.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/May/0601.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20335",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0722.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/May/0563.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/May/0601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a) index.php; (2) forumID parameter in index.php, (b) newtopic.php, and (c) reply.php; and (3) ID parameter to (d) edit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmunk_scripts:chipmunk_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB809CC-9FED-4ADE-B1DA-F0F5FC3EA596"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/50345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435196/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435306/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/50345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435196/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435306/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL.  NOTE: this might be the same issue as CVE-2005-3747."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetty:jetty:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C81179-6BE5-4F96-A596-BF0161F662C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016168",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetty:jetty:6.0_beta_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5C6628-3A52-4A85-B65C-101CED1F72A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016168",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:warpspeed:4nforum:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A312F0-F6B4-42D1-BDA8-258EB3926BC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/31059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435363/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/31059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435363/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3/PRP, HITSENSER3/PUP, HITSENSER3/STP, and HITSENSER3/EUP allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE58645-4492-46CD-98C7-4AEC194A82A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser3:eup:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B652843-ADD6-463E-9285-32892DCE73DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser3:prp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37945A33-70FA-420F-B3E3-6D6173E8F294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser3:pup:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E2CC76-389A-4A4E-8D27-28B357198ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:hitsenser3:stp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B966F7E1-DFE7-4F3A-B977-0FAD82296586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20347",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-011_e/index-e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-011_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar:webcalendar:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BC98A1-5D3F-435D-A604-3F4CA9E13C74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20367",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436263/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436263/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  It is possible that this is primary to CVE-2006-2678."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pre_projects:pre_news_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D01DCAFE-70C1-4769-A41D-ABAC92F3965A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20284",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/493369/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/497185/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/497219/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/5803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/493369/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/497185/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/497219/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/43070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/5803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an IMG tag in a comment field to (1) guestwrite.php or (2) guestbook.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xander_ladage:guestbookxl:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F57698D0-00A7-45FE-AD28-4DAC84185B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0526.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0526.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in news_information.php in Interlink Advantage allows remote attackers to inject arbitrary web script or HTML via the flag parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interlink_advantage:interlink_advantage:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F181A418-4F31-4EA0-B920-06F04AF12380"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0395.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000804.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0395.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000804.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB051A5C-5F66-4732-949A-48B0FDE4AFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435709/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2124",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435709/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED471260-0272-431F-A91E-AC2883D92497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63D18070-EC48-4904-9AE0-558F7F3B869D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/891204",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435492/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435609/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435616/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18198",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/891204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/25949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435492/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435609/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435616/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the default_path parameter in (1) error.php, (2) index.php, and (3) classes/main_class.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ottoman:ottoman:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE61EBA8-6D26-4CBA-9CEF-B8D651E1B831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20399",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18208",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2073",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) system_path parameter in a large number of files in the (a) app/edocument/, (b) app/eproject/, (c) app/erek/, and (d) extension/ directories, and the (2) GLOBALS[system_path] parameter in (e) extension/sitemap/sitemap.datatype.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipw_systems:metajour:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D63D8799-66EF-49DF-849D-165FB1D67B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18211",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass \"uricontent\" rules via a carriage return (\\r) after the URL and before the HTTP declaration."
      }, {
        "lang" : "es",
        "value" : "El preprocesador HTTP Inspect (http_inspect) en Snort 2.4.0 hasta la versión 2.4.4 permite a atacantes remotos eludir reglas \"uricontent\" a través de un retorno de carro (\\r) después de la URL y antes de la declaración HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB10D25-F039-498D-880B-ACA29AF2E990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C4A2D0-E47D-419B-98F2-8FB14A097DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07636BAF-C6CE-4452-B0BF-3A032D53B2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660AF80B-1512-4CD0-89B2-93658C0A12B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcefire:snort:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4A28FF-1E4F-42D0-8EA8-B23CDCDE6780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=snort-devel&m=114909074311462&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20413",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20766",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.demarc.com/support/downloads/patch_20060531",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25837",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435600/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435734/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435797/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435872/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18200",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.snort.org/pub-bin/snortnews.cgi#431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2119",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=snort-devel&m=114909074311462&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.demarc.com/support/downloads/patch_20060531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/25837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435600/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435797/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435872/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.snort.org/pub-bin/snortnews.cgi#431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nSnort, 2.4.4 source with uricontent patch"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an index of the \"file\" array parameter, as demonstrated by file[0]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pppblog:pppblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.8",
            "matchCriteriaId" : "1B543AD6-CA1E-4A77-B6C9-53E691EAABDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pppblog_038_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20375",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435406/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/pppblog_038_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435406/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitrary posts via a modified delID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hogstorps:hogstorp_guestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5981883-DF1A-48A5-91CB-EA5694768CD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/HTGuestBook2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18205",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/HTGuestBook2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hogstorps:hogstorp_guestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5981883-DF1A-48A5-91CB-EA5694768CD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hogstorps:hogstorp_guestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5981883-DF1A-48A5-91CB-EA5694768CD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T10:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_phrase parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qontentone:qontentone_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C7B87B2-F021-4D43-8D60-2CF882D891DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0685.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20392",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435409/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0685.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435409/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.1",
            "matchCriteriaId" : "A08EC913-1AD0-46C6-9D8F-05C04B3AC74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/243153",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-35.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/243153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-35.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Mozilla, Thunderbird versions are only vulnerable if you turn on JavaScript in mail.\r\nThis vulnerability is addressed in the following product release:\r\nMozilla, Firefox, 1.5.0.4\r\nMozilla, Thunderbird, 1.5.0.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0618BD26-0EF5-4774-9131-B5ABD4CD302A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604DAE-DF63-413C-9F49-FFC8E84699F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE6185-09F4-48E3-9742-F9D8030B5774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E565E5-286D-4A68-B085-5659DFE59A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102800-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/575969",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-37.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102800-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/575969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-37.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nMozilla, Firefox, 1.5.0.4\r\nMozilla, Thunderbird, 1.5.0.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "5832619D-0D24-45AB-90ED-74FC96CF8436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/237257",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-43.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/237257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-43.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nMozilla, Firefox, 1.5.0.4\r\nMozilla, SeaMonkey, 1.0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "B80D96C6-E20A-48C4-B9E3-2452B9742F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/421529",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-38.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/421529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-38.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.4\r\n  Thunderbird 1.5.0.4\r\n  SeaMonkey 1.0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) \"Content-implemented tree views,\" (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2A68B4-9101-4AC5-9E82-EEB5A5405541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DDB53E-7A12-4A08-8999-DB68E6DF901E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514EDE8-7C78-4C72-A313-E0915D89E4EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5263F879-9B90-4582-B677-F133DEBE5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C256B73C-9ABC-43D4-8C57-09161BC9F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200387-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/466673",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-32.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200387-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/466673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.4\r\n  Thunderbird 1.5.0.4\r\n  SeaMonkey 1.0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via \"jsstr tagify,\" which leads to memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "B80D96C6-E20A-48C4-B9E3-2452B9742F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200387-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/466673",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-32.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200387-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/466673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-153A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.4\r\n  Thunderbird 1.5.0.4\r\n  SeaMonkey 1.0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "BAAAA476-C9BC-4058-AD12-61047E4ECEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "B80D96C6-E20A-48C4-B9E3-2452B9742F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20394",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-40.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-40.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.4\r\n  Thunderbird 1.5.0.4\r\n  SeaMonkey 1.0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "BAAAA476-C9BC-4058-AD12-61047E4ECEC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-41.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-41.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.4\r\n  SeaMonkey 1.0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "B80D96C6-E20A-48C4-B9E3-2452B9742F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31074",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-42.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2094/references",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/35379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-42.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2094/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Fixed in: Firefox 1.5.0.4\r\n  Thunderbird 1.5.0.4\r\n  SeaMonkey 1.0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the \"Manual Install\" button, then using nested javascript: URLs.  NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-36.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-36.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a \"View Image\" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting \"Show only this frame\" on a frame whose SRC attribute contains a Javascript URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-34.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-34.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "5879A639-89D1-4D9C-9D97-DDA6AB862271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.3",
            "matchCriteriaId" : "B80D96C6-E20A-48C4-B9E3-2452B9742F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-33.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-33.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T20:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055D1044-9FC5-45AA-8407-649E96C5AFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D56153-E20A-46D8-859E-A51E5C03D674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C51A6F4-F88F-4BF2-BF71-5DC48559C085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFC390CB-774C-47BE-95C3-059943A9E645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "379F6A73-B45F-4094-8167-4E929FFB1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DE7AC-553B-4524-8B33-5605518449EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B02389-0DCD-45BC-A09F-CB6B75940616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-31.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-31.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_35_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435795/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/297-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/323-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2788",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-02T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=321598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0578.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=321598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/296-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when \"load images if sender in addressbook\" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted \"From\" header that triggers an assert error in camel-internet-address.c when a null pointer is used."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CEE0340-36EA-477D-9928-6894B53F0802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C456D757-63DC-4881-AA9E-84C13B1AE9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28A92EC-24AB-471A-9E23-DE8493B50AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2128A01C-A2AA-4E11-94D6-E361486BBFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6337DBEC-591E-4D33-ABA0-D761237C4FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53804AD-1B87-4ED2-82BA-7F2DC518D9B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7160595D-FB7B-45F9-85BD-5767B08F4855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB5EA9F-C405-4FCD-8BFA-71BC58E007AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=309453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=311440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=309453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=311440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue does not affect the versions of Evolution as distributed with Red Hat Enterprise Linux.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-02T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A package component in Sun Storage Automated Diagnostic Environment (StorADE) 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:storage_automated_diagnostic_environment:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E62F94-D06D-46E2-AD04-B9D496DA53F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102305-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102305-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nSun, Storage Automated Diagnostic Environment, 2.4 (for Solaris 8, 9 and 10) with patch 117654-60 or later."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows remote attackers to read arbitrary files via \"..\" sequences in the function parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net_art_media:iboutique.mall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483F6DF5-ECDF-49CB-9FCE-BB1522307105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435164/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435164/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380709B2-5458-46B9-8B23-9F53A15462E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0760.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435368/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0760.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435368/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspsitem:aspsitem:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "55A6FE99-081A-419C-8306-C2AF5FF54FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspsitem:aspsitem:1.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38751E3-7A64-4AB5-BFF7-9D84D5254B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20355",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=39",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435287/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435287/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspsitem:aspsitem:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "55A6FE99-081A-419C-8306-C2AF5FF54FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspsitem:aspsitem:1.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38751E3-7A64-4AB5-BFF7-9D84D5254B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20355",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=39",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435287/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435287/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in XiTi Tracking Script 6 and 7 RC allow remote attackers to inject arbitrary web script or HTML via (1) the xtref parameter in xiti.js and (2) an HTTP Referer header field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiti:xiti_tracking_script:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A554F1C-9DAB-41C5-9752-A9259AF7CA95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiti:xiti_tracking_script:7_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D284DB56-0605-4EE1-B8D8-0857B9517E4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20363",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter, which is reflected in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:new-place:captivate:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95413A7F-99FD-4F96-BF02-C8E82B0EF610"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0413.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18072",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0413.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) CalendarDetailsID parameter in (a) month.php, (b) day.php, and (c) delCalendar.php; (2) ID parameter in (d) event.php; (3) AdminUserID parameter in (e) delAdmin.php; (4) EventLocationID parameter in (f) delAddress.php; and (5) LocationID parameter in (g) delCategory.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA34851-6B34-4555-8988-D377EA20F3A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) LoName parameter in (a) week.php and (b) month.php and (2) AddressLink parameter in (c) event.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcommunitycalendar:phpcommunitycalendar:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA34851-6B34-4555-8988-D377EA20F3A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/31691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in content_footer.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the print_url variable.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7",
            "matchCriteriaId" : "48B7BB99-5A05-4D6C-AD18-8682FFDACBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7652E44-B9A8-470D-928A-370A4B543060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6C4C75-D481-4B53-B94B-C92B8EFCC4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C0CB57-09D3-4694-A12C-28135CD34AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279254C3-7424-460A-A220-B983ABA0FC63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C0A93D-4B2C-4E52-B7F7-3AD5E069D0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D3ECDC-D2D1-479E-BC92-1479EB09683D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6_pre-beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1E4D8C-6B92-4F94-BA51-4D058D2E0F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20391",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the user is running a browser that has not URL-encoded the request (e.g. Internet Explorer)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u_a or (2) u_s parameters.  NOTE: this might be resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unak:unak_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5_rc2",
            "matchCriteriaId" : "6B470A15-090C-4263-ADD2-F8452C81239C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/unak-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20410",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/unak-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) u_a or (2) u_s parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unak:unak_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5_rc2",
            "matchCriteriaId" : "6B470A15-090C-4263-ADD2-F8452C81239C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/unak-cms-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20410",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/unak-cms-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el HTTP Plugin (xineplug_inp_http.so) para xine-lib 1.1.1 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una respuesta larga de un servidor HTTP, según lo demostrado usando gxine 0.5.6."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:gxine:0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB1CC9F-3531-47B8-8638-734BF697F235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A905719D-4520-4374-B3A7-55034728B85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2899EF34-824B-4893-8636-64A83EC5885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB10333-6C25-4359-BB3F-D76468170825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2377493B-8CC0-414B-AA5F-B7777C852195"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20369",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18187",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/295-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/295-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) id parameter to index.php, (2) search field (possibly the s parameter), or (3) comment field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_manualmaker:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CFA4CA-AA98-46FA-B90C-85AEAF1BF556"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20453",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435717/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18244",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2138",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435717/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cfm in Goss Intelligent Content Management (iCM) 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goss:icm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "24B520A1-3C13-400D-AC11-6C56EDF79A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20372",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-03T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13831AA-4393-4BB3-BBE5-8E50E2F940FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/vbulletin-3.0.10-sql-inj.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18197",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/vbulletin-3.0.10-sql-inj.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denial of service (CPU consumption) via a long argument to the MAIL command."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:james:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46288D7B-23FB-440D-8533-26870E081E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv31-y3dips-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435278/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv31-y3dips-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435278/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "\"James\" is an acronym for the product Java Mail Enterprise Server."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspwebsoft:speedy_asp_discussion_forum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665C762D-8E21-4148-BBB6-FEC82B35B7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435209/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18170",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435209/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear) allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra \"iframe\" tagname within that element, followed by a double \">\", which might bypass cleansing operations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lycos:htmlgear_guestgear:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7046D95-9B2B-407F-B058-3E3BB4D3DCB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435220/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435220/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) count parameter, and possibly the (2) next, (3) Year_the_news, and (4) mo parameters.  NOTE: the year and month vectors are already covered by CVE-2006-0333."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ar-blog:ar-blog:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05417521-7DFF-4A40-B218-313FE2FF3121"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435205/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435205/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) toprated.php and (2) newcards.php.  NOTE: the card_id vector is already covered by CVE-2006-1230."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:belchior_foundry:vcard:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7189E766-AFA4-4302-92CB-05A67E3BCDFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435310/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435310/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the babInstallPath parameter in (1) index.php, (2) topman.php, (3) approb.php, (4) vacadmb.php, (5) vacadma.php, (6) vacadm.php, (7) statart.php, (8) search.php, (9) posts.php, (10) options.php, (11) login.php, (12) frchart.php, (13) flbchart.php, (14) fileman.php, (15) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional unspecified PHP scripts.  NOTE: the utilit.php vector is already covered by CVE-2005-1964."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cantico:ovidentia:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CC9901-6F06-4D6B-9456-888F937FC7D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435590/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456893/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459572/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435590/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456893/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459572/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the (1) name (aka nick), (2) email, and (3) comment boxes; and via the (4) id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dominios_europa:picrate:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24060CAA-E31E-4CB0-92D7-162E993E2287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435599/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435599/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in easy-scart.cgi in iShopCart allows remote attackers to read arbitrary files via a .. (dot dot) in the query string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishopcart:ishopcart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE3FC80F-40DC-4FDF-AEBA-5E71F39C2ACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435597/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18223",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435597/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing \"Submit\" in an sslinvoice action, and allow remote attackers to have an unknown impact via a large amount of posted data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ishopcart:ishopcart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE3FC80F-40DC-4FDF-AEBA-5E71F39C2ACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435597/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18222",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435597/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_simpleboard), as used in Mambo and Joomla!, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in \"post ne topic\" in the Frontend, (2) the Title (aka Community-Title) field in Simpleboard Configuration in the Backend Admin Panel, and the (3) Name (aka Forum-Title) and (4) Name (aka Category-Title) fields in Simpleboard Administration in the Backend Admin Panel.  NOTE: some sources have stated that the sb_authorname parameter is affected, but it is unclear which field is related to it."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:two_shoes_mambo_factory:simpleboard:1.1.0_stable:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A81493-3283-4174-9247-1C6904582DCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046484.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20409",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435615/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046484.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435615/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the product is used in Mambo or Joomla!."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in coolphp magazine allow remote attackers to inject arbitrary web script or HTML via the (1) op and (2) nick parameters, and possibly the (3) 0000, (4) userinfo, (5) comp_der, (6) encuestas, and (7) pagina parameters.  NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability. If it is site-specific, then it should not be included in CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolphp:coolphp_magazine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E768531-A0C5-4FF0-B228-3BA6D5F585BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435309/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435309/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in bolum.php in tekno.Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tekno.portal:tekno.portal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A19AAA-24D3-43F3-BA53-B7E9E1C89D94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18216",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/Tekno.Portal-0601-sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/Tekno.Portal-0601-sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to execute arbitrary PHP code via a URL in the CONF[local_path] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cameron_mckay:informium:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8830AA1-61D9-4240-9C55-82524755089D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18249",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the c_node[class_path] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barnraiser:igloo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.9",
            "matchCriteriaId" : "6CD99F35-2BE3-4714-AA20-553B3A4FC7F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18250",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an IMG element."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotwebscripts:weblog_oggi:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE49C26B-505D-4AE9-A009-772FEDF901A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435713/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435713/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1) artid parameter in art.php and the (2) catname parameter in cat.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:pro_publish:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F9F7A07-563A-49EB-A3BF-36C12A8B8E52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://soot.shabgard.org/bugs/propublish.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435787/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://soot.shabgard.org/bugs/propublish.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435787/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfairguy:codeavalanche_freeforum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B1EEDF-398D-4591-A324-0955E14FB5E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/CAForum.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435613/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/CAForum.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435613/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Katrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) admin/scart.mdb and possibly (2) admin/scart97.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a.shopkart:a.shopkart:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882C8DBA-B8FA-4359-8095-CB7FFBF62438"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1009549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435746/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/15599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1009549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435746/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/15599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Logicalware MailManager before 2.0.10 does not remove 0xc8 0x27 (0xc8 followed by a single-quote character) from the data stream to the server, which allows remote attackers to modify data and gain administrative access when PostgreSQL is used, aka \"bug #1494281 - Postgres encoding security hole.\"  NOTE: while this issue involves PostgreSQL, it is specific to MailManager's interface to PostgreSQL and is therefore a different vulnerability than CVE-2006-2313 and CVE-2006-2314."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04A166D-BF58-47C5-ADD9-8275F97CA945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D67DCB4C-8119-4EBC-93F8-C37167AACDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BF9CC3-409D-42CE-8CE2-8C327943AD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE679C87-970F-4FFA-89C3-EAA68C018796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC66718-53CD-4461-9F91-16E4740090CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8577AF02-96FD-4DF5-B03D-52505FD65951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69290F19-3B02-4B1A-AE24-C5FD8D0BF56F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0102097C-FB3D-4DB6-B617-5588D2CCC4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A0E5EF-AC18-495B-851C-0B787962A354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB82ABE-3065-417C-A066-2D702DA239BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C457346-E816-4D4A-B917-F28EC01CE726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicalware:mailmanager:2.0_r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA612BE-7EB7-4B61-9ACB-08CDFC3CD349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=85788&release_id=419822",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/mailmanager/MailManager/branches/RELENG_2_1/sql/__init__.py?r1=3019&r2=3063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=85788&release_id=419822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/mailmanager/MailManager/branches/RELENG_2_1/sql/__init__.py?r1=3019&r2=3063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel does not automatically synchronize the PHP open_basedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to bypass open_basedir restrictions and access other virtual hosts via a PHP script that uses a main server URL (such as ~username) that is blocked by the user's own open_basedir directive, but not the main server's open_basedir directive."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA10E29-1DDD-44D8-A7D9-74BE0315CE4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0402.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/31835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0402.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/31835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a query string or a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplib_team:phplib:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745AFDDD-1CAF-44DB-98BD-7426296CCF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplib_team:phplib:7.4_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6577E076-58F8-49F9-B907-72A2A28004FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16902",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016123",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=31885&release_id=396091",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00107-03052006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23466",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16801",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=31885&release_id=396091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00107-03052006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/23466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/16801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the \"Search for pattern\" field, when the settings specify only \"Search in Detailed description\" and \"Search also in ISBN.\"  NOTE: the vendor disputed this issue in a comment on the original researcher's blog, saying \"the bug does not impose any security threat and remote attackers can't add, modify, or delete information in the back-end database by sending specially-crafted SQL statements to the search.php script using various search parameters.\" As of 20060605, the original blog entry is unavailable, although ISS also reports the same dispute.  CVE has not been able to investigate this issue further, although the researcher sometimes makes inaccurate claims"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:4.1.0_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263B887A-330F-42CF-BA93-439E1154919C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:gold_4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA586ED-C395-44F9-AFC0-210C53872D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:pro_4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8B67CF-A311-4649-B7D1-E4DE7A2D980E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/x-cart-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/x-cart-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbb_root_path parameter to the admin scripts (1) index.php, (2) admin_ug_auth.php, (3) admin_board.php, (4) admin_disallow.php, (5) admin_forumauth.php, (6) admin_groups.php, (7) admin_ranks.php, (8) admin_styles.php, (9) admin_user_ban.php, (10) admin_words.php, (11) admin_avatar.php, (12) admin_db_utilities.php, (13) admin_forum_prune.php, (14) admin_forums.php, (15) admin_mass_email.php, (16) admin_smilies.php, (17) admin_ug_auth.php, and (18) admin_users.php, which overwrites $phpbb_root_path when the import_request_variables function is executed after $phpbb_root_path has been initialized to a static value."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-nuke:ev:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3F18CD-579F-4055-B267-0A839F44FB8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435407/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435611/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435705/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435407/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435611/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435705/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated users to execute arbitrary code via the configuration for tibhawkhma."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:hawk:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F540B195-58CD-4491-9D4F-9BCB87F696AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:hawk_monitoring_agent:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B63E05C-0726-4C19-A80E-A2CFDA8FA887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:runtime_agent:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF12C0E-8768-4A03-B56B-D635076B01C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/620516",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tibco.com/resources/mk/hawk_security_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/620516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tibco.com/resources/mk/hawk_security_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-05T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:hawk:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85CA6D7-B286-4CC0-A05F-01EEFC653780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:rendezvous:7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B20531C-A4CB-4196-AC66-C485CB618858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:runtime_agent:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF12C0E-8768-4A03-B56B-D635076B01C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20452",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/999884",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tibco.com/resources/mk/rendezvous_security_advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/999884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tibco.com/resources/mk/rendezvous_security_advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote attackers to execute arbitrary code by uploading a file with multiple extensions, a variant of CVE-2006-2743."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC016B5-A4C2-4A78-B830-C041C8BAAD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D0FD99-066F-4161-9524-01DD01F31527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F8FEEF-6857-4DC8-9D0D-76D801D0E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/files/sa-2006-007/advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/66763",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435792/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/files/sa-2006-007/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/66763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435792/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC016B5-A4C2-4A78-B830-C041C8BAAD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D0FD99-066F-4161-9524-01DD01F31527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F8FEEF-6857-4DC8-9D0D-76D801D0E914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/files/sa-2006-007/advisory.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/66763",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435792/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/files/sa-2006-007/advisory.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/66763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435792/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web script or HTML via inputs that are not properly validated when the page title is output, possibly involving the $names variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B99C22-9A8C-43F3-9AD8-D901D07D5FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EC4ECE-6719-4C54-B150-017ACB32E644"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/files/sa-2006-008/4.6.7.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/66767",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20412",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435793/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/files/sa-2006-008/4.6.7.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://drupal.org/node/66767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435793/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnopaste:gnopaste:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11C3B2E-9D05-46AA-A87A-F871000BDC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnopaste:gnopaste:0.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424414A3-3E2C-45A2-BFEC-B7CC55D7CCC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=421183&group_id=166450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18180",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=576672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=421183&group_id=166450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in add.php and (2) lessid parameter in show.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arabless:saphplesson:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC6C9F0-BB82-4B2D-9690-01C975299A8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435202/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/472798/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435202/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/472798/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pineapple_technologies:lore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.6",
            "matchCriteriaId" : "C2903BA3-1491-4C6D-B39A-FE5AD65AFC97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/lore-156-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20385",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/lore-156-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the \"Sign Our GuestBook\" page, probably the x_Comments parameter to guestbookadd.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_dreams:techno_dreams_guest_book:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7042B5A-DC2D-4B6C-997B-F57F2994FDDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/TDGuestBook.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/TDGuestBook.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors.  NOTE: By default, the connections are only allowed from the local host."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:6.40:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "375B5B66-822B-4142-BAA3-0928DE7A8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05453A15-69B7-40AD-B14E-D00432DC4344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54C74DD-DDF7-4747-8A59-F67114412BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:internet_gatekeeper:6.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "905F63E8-4535-4353-A911-FDC8616F118A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20407",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016197",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-3.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-3.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to a fixed version or apply hotfix."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webwork:webwork:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "531F146B-C22E-4577-B17A-35987C64DC51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=421453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=421453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 2.2.1.\r\nhttp://sourceforge.net/project/showfiles.php?group_id=93112"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) \"url links\" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.6",
            "matchCriteriaId" : "7B5BA5BF-4641-46B5-9413-A77D612D1D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBCD728C-520B-4B33-95D7-C0D707C9B242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37757C05-8BDD-4C3F-9AA2-42D82E144804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFDB074-6C50-4B59-8FA9-17888551AE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DCC295-2936-434F-972F-2A88FB39669C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6EBCCD-40A4-4FD1-B8EC-A5CC1EA93FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B98DC-FDA0-4876-8730-354615D90928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F85DBC-9447-4826-BB17-6C19EDBBB581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD57B98-0EC2-4AFA-BE94-1774B98781A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E38076A-69A6-42D0-A563-9A01F979CD5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1FDC77-46E2-45DA-A08F-7134B0F550B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D649269D-7AB9-4791-8BE6-CF29CF553103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5C169E-480C-4208-8627-894F10C2FFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B142168-A959-4593-9910-D50E738B0AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4D6FF4-E09A-4369-A17A-99375006E927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B6CC82-DA0C-4951-AACF-FA5474F7243E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A679D6-5261-4351-BD09-8975BAA44927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4FC7BC-0253-4A44-925E-57289B7BB944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E80F47F-D848-4FE9-9030-AFDF992F31B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578735E1-72AC-4607-ADB2-FBAEE7B90087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728FE60F-DC52-46B0-B718-4E7F1535AA1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20386",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pmwiki.org/wiki/PmWiki/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pmwiki.org/wiki/PmWiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nPmWiki, PmWiki, 2.1.7"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) menu.php, (2) profile.php, (3) users.php, (4) cache_mngt.php, and (5) gallery_functions.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:associated:associated_cms:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FE1022-09B6-4D04-9C52-FAEF4EDC5737"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=577084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18220",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=577084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter.  NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled.  Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE.  However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.6",
            "matchCriteriaId" : "72558D26-AFC8-450A-9642-7A657119DED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBF40C5-6272-427C-97A1-3CE3B1D47B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6733B8C-5A9E-45CE-8938-F39A69EB0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6591E5-5F36-4663-85A6-9D870FD49FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D062B70A-E5FF-403B-8BD1-777D6462B7CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED3CC3-E0A8-4C20-9EF7-405CD32E9EF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20406",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://squirrelmail.cvs.sourceforge.net/squirrelmail/squirrelmail/functions/global.php?r1=1.27.2.16&r2=1.27.2.17&view=patch&pathrev=SM-1_4-STABLE",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0547.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435605/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-06-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://squirrelmail.cvs.sourceforge.net/squirrelmail/squirrelmail/functions/global.php?r1=1.27.2.16&r2=1.27.2.17&view=patch&pathrev=SM-1_4-STABLE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0547.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435605/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled and \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the (1) REX[INCLUDE_PATH] parameter in (a) addons/import_export/pages/index.inc.php and (b) pages/community.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redaxo:redaxo:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B9FE8D-A268-4D48-9D09-13B1255DD48D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435733/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435733/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REX[INCLUDE_PATH] parameter to (1) simple_user/pages/index.inc.php and (2) stats/pages/index.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redaxo:redaxo:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D88DBD0-94E0-4405-8785-4B6C8F0D271F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435733/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435733/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REX[INCLUDE_PATH] parameter to image_resize/pages/index.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redaxo:redaxo:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D88DBD0-94E0-4405-8785-4B6C8F0D271F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redaxo:redaxo:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8641096F-CB4D-4EEC-9F2B-72AD585B2EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435733/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435733/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visiongate:visiongate_portal_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1B38D7-AAE4-471D-9D10-7289266AADC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:full_revolution:aspweblinks:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117A5FA3-8E9F-4872-AB52-E1707C89232F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20419",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435735/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435735/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified txtAdministrativePassword field."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:full_revolution:aspweblinks:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117A5FA3-8E9F-4872-AB52-E1707C89232F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/435735/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435735/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attackers to execute arbitrary PHP code via a URL in the bhconfig[bhfilepath] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_delta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30788CA8-BD77-4FEA-ACAA-B3C3A0F2FDD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andrew_godwin:bytehoard:2.1_epsilon:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E5BF16-CCF2-446E-B540-B1532F669424"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20400",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435728/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435728/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_labware:labwiki:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100E8D7B-04B4-4EF6-B418-52664E00B8AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/labwiki-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20417",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/labwiki-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, which are not properly handled when the client is using Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3862952F-9DE1-471A-A895-A1AFCA3C40F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FFB14E-3C84-4AAE-A04D-221DCDE0F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AA0527-4CB6-48BE-AA09-82952570369D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2397636431/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20418",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=422371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2397636431/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=422371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter in (1) index.php, (2) feedback.php, and (3) printfriendly.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotwidget:dotwidget_cms:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A76B77-953C-4886-B12C-B9B490DDA3E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls7.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=25982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18258",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls7.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/25981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=25982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abarcar:abarcar_realty_portal:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE14B3E1-74AA-4E49-A010-B988564A113B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/abarcar_sql_poc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20504",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/Mdocument929.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18218",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/abarcar_sql_poc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/Mdocument929.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibwd:ibwd_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D72F5D6-CBE4-4A4D-9EE9-1AFBCC195AFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/iBWD_poc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18256",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/iBWD_poc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xuebook:xuebook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABE3059-81F7-4E11-BB05-4DD010D1C858"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/xueBook_poc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18262",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/xueBook_poc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with \"Users\" group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activestate:activeperl:5.8.8.817:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F634EA7E-8B8F-49CE-B0E6-6F9A329B1B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a ViewArticle action (viewarticleaction.class.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lifetype:lifetype:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1AC32F8-BA04-4607-8186-9A777560E03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lifetype:lifetype:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BB71F3-1B32-4CDF-84FB-F97F925D8D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lifetype:lifetype:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC57F5-A442-4AAE-9E0C-8AAF1813B06F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20460",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lifetype.net/blog.php/lifetype_development_journal/2006/06/04/important_security_upgrade_lifetype_1.0.5_released",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435874/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18264",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lifetype.net/blog.php/lifetype_development_journal/2006/06/04/important_security_upgrade_lifetype_1.0.5_released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435874/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:locazo:locazolist_classifieds:1.03c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770C6824-36CE-4A9C-9B7C-5DE89D0632B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:locazo:locazolist_classifieds:1.04d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C87BA8C-F375-4623-8948-DC1BD3222756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:locazo:locazolist_classifieds:1.05e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "415EA629-C8BF-4958-BBF3-731F57E4304F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20462",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435986/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18254",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435986/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mybloggie_root_path parameter to (1) admin.php or (2) scode.php. NOTE: this issue has been disputed in multiple third party followups, which say that the MyBloggie source code does not demonstrate the issue, so it might be the result of another module.  CVE analysis as of 20060605 agrees with the dispute.  In addition, scode.php is not part of the MyBloggie distribution"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6763A-BD4B-4A6B-8AF3-04B4BCEC4FDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435789/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435866/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436124/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435789/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436124/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) inc/logincheck.inc.php, (2) inc/adminheader.inc.php, (3) inc/global.php, or (4) inc/mainheader.inc.php.  NOTE: some of these vectors were also reported for 3.0 in a separate disclosure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspot:webspotblogging:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D607881-196A-49E5-B931-DE297E481453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspot:webspotblogging:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D00DD8-033B-4855-BCFD-638D34AB4845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arfis.wordpress.com/2007/09/14/rfi-02-webspotblogging/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447001/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447576/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2127",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://arfis.wordpress.com/2007/09/14/rfi-02-webspotblogging/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447001/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447576/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particle_soft:particle_wiki:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46B000D-E5C1-411B-A01F-3C70D3480A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/particle-wiki-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/particle-wiki-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in viewimage.php in Particle Gallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the imageid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particle_soft:particle_gallery:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B43D1A-8EE4-4227-9BC6-63CADEFEDA28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/particle-gallery-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20427",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/particle-gallery-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the classes_dir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.3",
            "matchCriteriaId" : "D5C8E8E4-4BA0-4C46-96C7-61A9C15CED38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cs-cart:cs-cart:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA28C65-C87E-47B9-AEB2-A2007851A2DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20440",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000824.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18263",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000824.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) APP[path][applications] parameter to (a) Bs_Faq.class.php, (2) APP[path][core] parameter to (b) fileBrowserInner.php, (c) file.php, and (d) viewer.php, and (e) Bs_ImageArchive.class.php, (3) GLOBALS[APP][path][core] parameter to (f) Bs_Ml_User.class.php, or (4) APP[path][plugins] parameter to (g) Bs_Wse_Profile.class.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blueshoes:blueshoes_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "ECC4913A-F48B-4587-BF2A-8E28709B58A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blueshoes:blueshoes_framework:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20CB43FD-F4E0-45AA-9BEF-217F3F4739DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20438",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.blueshoes.org/en/news/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18261",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.blueshoes.org/en/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_global\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.  NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable.  It is possible that this is a site-specific vulnerability, or an issue in a mod"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE04D5FE-021A-4E97-9166-8F7484F4C5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AAEB34-A2E5-43C9-9EA5-DF8A6C848ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/435869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435978/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435995/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436118/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435978/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435995/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436118/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blog_dc_path parameter, which passes file_exists() and is_dir() tests on PHP 5."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94896556-5D43-4C54-A49C-301511B69EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7B92DB-62E4-4F4F-BC57-2C5F646C13CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49EEF727-A23D-47AE-BE4E-238290246BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F6A6A-717B-4B94-B4D0-26C2BAC1E66D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/dotclear_124_php5_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20437",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435873/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18259",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/dotclear_124_php5_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435873/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolforum:coolforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.3_beta",
            "matchCriteriaId" : "5DA9ED3A-FFA7-4E75-8A88-7369ABD904F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mgsdl.free.fr/advisories/coolforum083ba.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016218",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435862/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mgsdl.free.fr/advisories/coolforum083ba.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435862/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the includePath cookie to (1) auth/extauth/drivers/mambo.inc.php or (2) auth/extauth/drivers/postnuke.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D5CC64-234C-4519-B902-381A023B83CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20434",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0:*:home:*:*:*:*:*",
            "matchCriteriaId" : "DE5EAE42-1058-449D-8830-CA9A9A01E6D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "24228672-5193-455F-ABF1-691B06F57380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6:*:home:*:*:*:*:*",
            "matchCriteriaId" : "398B8552-4D95-47A5-A359-4EB721EB3C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "BC40D41E-8360-43B2-90DA-3A1DDC2EB223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.603:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "B8EC9D1E-B4C7-4294-BC5D-49281066E59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.652:*:home:*:*:*:*:*",
            "matchCriteriaId" : "B49FBBAE-2432-4A8D-B73C-D89C6B1735B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.652:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "F88AEF6D-9D20-4366-BD67-4931FD4DDDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.655:*:home:*:*:*:*:*",
            "matchCriteriaId" : "FDDAB8E0-F2CD-4CAA-B87E-C1D283EA6DF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.665:*:home:*:*:*:*:*",
            "matchCriteriaId" : "49A1FDB9-20DE-4E8E-BE33-2AF061C7953E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.665:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "8A291DD4-BA4B-46D2-AB0D-27C9789AF25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.691:*:home:*:*:*:*:*",
            "matchCriteriaId" : "2E2660C6-CE3D-4FDF-B68A-801134F22861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.691:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "70A6A1A8-3E9D-4EC9-A721-D0E0162DB5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.7.827:*:home:*:*:*:*:*",
            "matchCriteriaId" : "83CE0924-F43D-444B-99E2-E3BCA5AD6E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.7.827:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "7B97604C-4665-4E6C-8453-4890B6D8D8CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20387",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.avast.com/eng/av4_revision_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18238",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.avast.com/eng/av4_revision_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelligent_solutions:asp_discussion_forum:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA5AAD26-BDFC-4C11-81AE-F4791E2D89D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/ASPDisc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20425",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/ASPDisc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter.  NOTE: CVE disputes this issue, since $script_path is set to a constant value"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyboards:cyboards_php_lite:1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB65D1D9-B298-477E-B78D-94FC6A3EA230"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-April/001510.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435977/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18272",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-April/001510.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435977/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArr[pathtodir] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rumble:rumble:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5711BC5D-97BB-4D37-961D-9FE798CD308E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000815.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000819.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435974/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000815.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000819.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435974/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enigma_haber:enigma_haber:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BE9019-2DC7-4BE2-9A46-7FE21F41A892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/enigmahaber-4.2-xss.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18226",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/enigmahaber-4.2-xss.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-06T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a \"Security Leak to lock in HTML-Code,\" possibly due to a cross-site scripting (XSS) vulnerability involving comments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osads_alliance_database:osads_alliance_database:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF39097-39DF-4F37-A650-28F4CE5D5F28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osads_alliance_database:osads_alliance_database:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A6AE3D-ECEC-42E7-8E52-1F7A30D3BF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osads_alliance_database:osads_alliance_database:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45299E47-1CCC-4C97-8D09-89480A9D3A1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osads.sourceforge.net/viewtopic.php?t=3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20441",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=422081",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18280",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osads.sourceforge.net/viewtopic.php?t=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=422081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2447",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-06T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spamassassin:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED86528-F90B-45FA-B21F-8D572C77A4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spamassassin:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CC8292-C195-4966-B980-FF0D9A10053D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spamassassin:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547BE8A6-DAF3-40CE-BCD0-692250F9121B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20430",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20443",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20482",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20531",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20566",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20692",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016235",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1090",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.3-available%21-t1736096.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0543.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436288/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18290",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0034/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2148",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.3-available%21-t1736096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0543.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436288/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0034/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svc_download command with compressed data that triggers the overflow during expansion."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.32c",
            "matchCriteriaId" : "96AC2E47-7CA3-4F0D-A258-D987B3B93582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/q3cbof-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20401",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435963/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/q3cbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435963/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cat.php in PHP Pro Publish 2.0 allows remote attackers to inject arbitrary web script or HTML via the catname parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_pro_publish:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "BB1D60B6-8209-400F-926A-948953BFF950"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20444",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP files via the include_prefix parameter in (1) inc/dbase.php, (2) inc/config.php, (3) inc/common.php, and (4) inc/function.php.  NOTE: it has been reported that the inc directory is protected by a .htaccess file, so this issue only applies in certain environments or configurations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangwan_kim:bookmark4u:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "7FB342A5-910A-4FEB-8F21-6329BA1886FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436027/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436027/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via \"complex curly syntax\" that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "release_2006-06-04",
            "matchCriteriaId" : "89666BD0-A3FB-463F-B905-9B7D69E61187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EDDA58-22F6-456A-986D-6A58FD818F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C907D889-8DD7-4542-A74E-C318271E5812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E98CDA-E813-427A-944A-2A768F075021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E589DA1C-7428-48A3-A115-3168F99584E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B197CF8-3729-414F-8BAA-BC709DEAA140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5470BA9-F1F1-484B-B4D2-328D98483D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D11132-69EC-40DD-9D62-CC2B7DF7C344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFDB3E-AB07-4E4C-A065-617A39505EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-10-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD529E-86A6-43A0-AF97-ADD7C8C2BAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2330E8-22BA-45AD-841B-4230CEED6A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD67EB1-A54F-44CC-ACE6-3D5ADA3F473F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47324B2B-AA17-4714-9DFC-FC5C0CF9D452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14882F1-2073-4DF4-8ECD-D4B9C39EAA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE154F-A880-4053-AA65-C02DD9AA1BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151742B9-2357-4A12-B839-09ADDF30E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0296920B-64B6-4492-8B54-D11F8CFA7F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E00178-D993-479A-BBC8-8AD9BDF69129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-05-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFB944D-FA24-4B9C-8543-656CFDB6163A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11872728-EE8D-4E4B-9E2F-C658905B5045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F542C2-7808-42AD-9A20-85BBBFD27DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4277D9B-E1FF-4285-A766-993B1C38CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A781BA-0949-456E-A529-9CA157CD3F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EE1AA-8C74-48F7-8E7D-9668933C7D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.splitbrain.org/index.php?do=details&id=823",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046602.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20429",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20669",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_042006.119.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.splitbrain.org/index.php?do=details&id=823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046602.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_042006.119.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alex:news-engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "8D6D765E-99D0-4437-A280-B6E0CD206B2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20469",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the (1) url and (2) author fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyblosxom:pyblosxom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "8CC7C882-6B7C-40CC-9ABB-C636C4B1C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyblosxom:pyblosxom:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "070BF172-51FA-401D-9F8D-414F4ABF2375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20436",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=422015",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=422015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is present only in the Contributed Packages of this product."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the da_path parameter in the (1) auth.cookie.inc.php, (2) auth.header.inc.php, or (3) auth.sessions.inc.php scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dreamcost:dreamaccount:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "B7F1CDE0-7FF4-484C-B4E3-446E54829807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20468",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls8.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435991/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436134/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls8.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435991/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436134/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) GBOOK_UNAME, (2) GBOOK_EMAIL, (3) GBOOK_CITY, (4) GBOOK_COU, (5) GBOOK_WWW, and (6) GBOOK_MESS form fields."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspscriptz:aspscriptz_guest_book:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "912A08A0-4D9A-42F5-80C8-AA519104CCFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/ASzGB.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/ASzGB.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kke_info_media:kmita_faq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD21CF7-6EA6-46F2-93D4-D8AD663F4DDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20471",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435982/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435982/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kke_info_media:kmita_faq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD21CF7-6EA6-46F2-93D4-D8AD663F4DDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20471",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435982/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435982/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in view.php and the (2) fSearchableText parameter in /search/simpleSearch.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knowledgetree:knowledgetree:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78052D24-AF33-4961-9640-43778B91E89D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain the full installation path via a crafted fDocumentId parameter, which displays the path in the resulting error message.  NOTE: this might be resultant from another vulnerability, since this vector also produces XSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jam_warehouse:knowledgetree_open_source:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1F8CD-2E9E-425B-A986-F9537378C3C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en myNewsletter 1.1.2 y anteriores versiones lo que permite a atacantes remotos ejecutar comandos arbitrarios a través del parámetro UserName en (1) validatelogin.asp o (2) adminlogin.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspburst:mynewsletter:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B7A49C-D61E-49BD-AF61-3A328E6C9D37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20423",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-340.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436018/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in _wk/wk_lang.php in Wikiwig 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WK[wkPath] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikiwig:wikiwig:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B62A895-B6E3-4B6F-BE62-B4017B75D581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikiwig:wikiwig:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B559D54-80DC-40F3-A16F-7BC4EB1E6A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL commands, and leverage them to gain administrator privileges, via the (1) category or (2) archivedate parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5_rc1",
            "matchCriteriaId" : "906F63D3-B0AB-4B8C-9E2C-D53974CA74C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pixelpost_15rc12_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016217",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435856/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/pixelpost_15rc12_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435856/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the _SESSION[\"pixelpost_admin\"] parameter to 1 in calls to admin scripts such as admin/view_info.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED272BA3-D912-4E50-846C-26F9C25EBB78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pixelpost_15rc12_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016217",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435856/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/pixelpost_15rc12_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435856/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script via the loginmessage parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelpost:pixelpost:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED272BA3-D912-4E50-846C-26F9C25EBB78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pixelpost_15rc12_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435856/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/pixelpost_15rc12_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435856/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML and web script via the message parameter in a login action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gantty:gantty:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E101A0-1BA5-4F96-92F8-53804095B1AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436125/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18296",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436125/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gantty:gantty:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E101A0-1BA5-4F96-92F8-53804095B1AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436125/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18296",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436125/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.8",
            "matchCriteriaId" : "9189789A-4D83-4C47-8890-A437AE39A0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:mozilla_suite:1.7.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0CE9DF-4E6A-4ABE-965F-7C34690ABED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "BB0F8C75-4934-453B-B502-8D0B6E9873EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "FDB53CEA-68CC-44DA-B61F-7E0126FD3DD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2007-02/0166.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2007-02/0187.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lcamtuf.coredump.cx/focusbug/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.virus.org/full-disclosure-0702/msg00225.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20442",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20470",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20472",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27298",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27335",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27383",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27414",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1018837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/blog/browser-focus-rip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2007/mfsa2007-32.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_57_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482876/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482925/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482932/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.thanhngan.org/fflinuxversion.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-536-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2160",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2162",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2163",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2164",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3544",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=370092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=56236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/535-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2007-02/0166.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2007-02/0187.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lcamtuf.coredump.cx/focusbug/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.virus.org/full-disclosure-0702/msg00225.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1018837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gnucitizen.org/blog/browser-focus-rip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2007/mfsa2007-32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_57_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482876/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482925/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482932/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.thanhngan.org/fflinuxversion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-536-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=290478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=370092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=56236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/535-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EAF847-B64C-4C12-8BF2-631F61B0618E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EF3827-9C87-4043-B10A-1D6AFCB64F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B1EDE8-940E-47C1-9CDA-C6BBE1BB9A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4554900-E09D-4D9D-99D4-FE5FDB3CDE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93EB0312-A147-4307-9491-46AEC2EC727C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48929086-E08E-472D-A503-4CA803A840D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.5_r14348:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B4D1E6-9EFE-4608-9A97-8119822A9F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98675FD-C9EA-49AB-BA9F-2CF5898203C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.wikipedia.org/pipermail/mediawiki-announce/2006-June/000048.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20458",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/viewvc/mediawiki/tags/REL1_6_7/phase3/RELEASE-NOTES",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.wikipedia.org/pipermail/mediawiki-announce/2006-June/000048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://svn.wikimedia.org/viewvc/mediawiki/tags/REL1_6_7/phase3/RELEASE-NOTES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkboard:funkboard:cf0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7AF2027-19F8-4400-9592-FF4DD0452C8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20433",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.funkboard.co.uk/forum/thread.php?id=302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435987/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.funkboard.co.uk/forum/thread.php?id=302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435987/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web script via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkboard:funkboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.71",
            "matchCriteriaId" : "0948840C-A22C-414E-A686-BA0006018564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkboard:funkboard:0.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0149A1F-2109-4947-B99F-83D6D3546AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkboard:funkboard:0.66f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0222D3-39B8-4678-B2ED-D857E7ED5175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funkboard:funkboard:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8038C2FE-2612-498A-8BCC-C94AAD502E16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.funkboard.co.uk/forum/thread.php?id=302",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.funkboard.co.uk/forum/thread.php?id=302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via truncated IAX 2 (IAX2) video frames, which bypasses a length check and leads to a buffer overflow involving negative length check.  NOTE: the vendor advisory claims that only a DoS is possible, but the original researcher is reliable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C60C04-EF59-4F5C-96E5-A6E693EA9A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3636BB44-DF4D-40AB-8EBB-1EC5D911E4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B3C254-29D9-4911-89A9-AC0CD9EB13F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8679FD-B2E5-46F6-B20C-F109B9706C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4042CC21-F3CB-4C77-9E60-AF8AA9A191C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656168D-7D6A-4E84-9196-A8B170E1F7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C619138A-557F-419E-9832-D0FB0E9042C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6656EA0-4D4F-4251-A30F-48375C5CE3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAD9104-BA4A-478F-9B56-195E0F9A7DF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20497",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20658",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21222",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016236",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.asterisk.org/node/95",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436127/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436671/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18295",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.asterisk.org/node/95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436127/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436671/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nAsterisk, Asterisk, 1.2.9 \r\nAsterisk, Asterisk, 1.0.11"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading a file with multiple extensions into the WebLink directory."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:estsoft:internetdisk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AAC7E8-DFB2-4C10-8014-32D726F160DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436001/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18279",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436001/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nESTsoft, InternetDISK, (version released 2006.04.20)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T16:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.01:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "B054A26A-7414-41B2-A46D-49E798D7A346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_xp_professional_64bit:*:*:*:*:*",
            "matchCriteriaId" : "8EF317BB-E63A-4A60-A2E1-6797A402D88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "B1D7486F-1B6C-4705-B73C-F763F36F5150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_98_se:*:*:*:*:*",
            "matchCriteriaId" : "6DBFDCF4-ACC7-4196-BA4D-2A35FAA5E1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_millennium:*:*:*:*:*",
            "matchCriteriaId" : "5E49636B-A425-4595-9663-A22A9F7C7D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_xpsp1:*:*:*:*:*",
            "matchCriteriaId" : "FCFF1342-8AD8-4003-81AA-09DB4A12EEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEABB0B-61EF-44E1-8673-F4B5A99A4164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium:*:*:*:*:*:*",
            "matchCriteriaId" : "181D0FA2-79E1-4422-9810-D7A557805872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:canon:network_camera_server_vb101:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EBD1BF-DEE2-4047-A8B4-3A816FC80003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20449",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2161",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-07T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dwl-2100ap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10na",
            "matchCriteriaId" : "566D394F-C763-48B1-A351-2A5A54FFC454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/projects/router-hacking-challenge/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.intruders.com.br/adv0206en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.intruders.org.br/adv0206en.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436281/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18299",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gnucitizen.org/projects/router-hacking-challenge/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intruders.com.br/adv0206en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.intruders.org.br/adv0206en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436281/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1173",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-06-07T23:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.13.6",
            "matchCriteriaId" : "8D42D00B-42EC-4AEC-98FE-6B321206E121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A1136-074A-460D-9794-DDD530626800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A9602B-8E5A-4BF4-81F5-D1152D09FCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD0B100-D822-4EBF-8EC9-ADAB8141116B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196D77DF-E6D4-46D0-BC2C-8804A587CA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B743E5A3-6B15-4877-9424-A1F1A4214B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A60742-7815-4658-A6F7-147AA48C24B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1A24F2-9C6B-4DF0-AB04-55D051812DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120271B8-08A9-4C21-A108-0DA61095A006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA859AF-4E4E-4077-8E98-523E617A1DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9791650-C367-43B6-A0F4-5BB56CE10778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8340DDA8-77DD-4AEB-B267-F86F64A851B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DCBBEE-1DF0-40FE-B755-1FC35CF16788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581626E7-47B5-4819-B34F-B6DFD07A12F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BBE9A4A-8AB9-4A97-A106-970FEB08952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B754AD41-90A0-4382-B599-E41289C690A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*",
            "matchCriteriaId" : "BD99394C-5408-4A01-8D4E-417FFFFDE9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB59A24-87DE-4CAD-A2BA-AFCC0B2A55B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*",
            "matchCriteriaId" : "97D641EF-0B69-45A1-B85E-3C9C93AB9D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "8972211B-6A5B-4095-9CBB-CEF4C23C9C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81A2AD-90A0-4B97-86A3-92690A0FCA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F74BA-2B71-435E-92B8-9DEADB3311A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581E5904-1A2B-49FF-BE3F-D42019AD816B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CC4C83-4FB9-4344-AFCB-C260659F81DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF763B4-58E3-4868-8C92-47DE3E4E5F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4FCB77-7FAC-4A4B-851C-2F352B44D3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEB3923-8F4B-4523-84F9-17D1CFA37F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58CD19B4-4BFD-4DE8-B21F-6B6CDE6793C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B82BBB7-CD72-4A33-97D4-B1E51A595323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1D6A40-5DD1-481C-AF85-85705FCE3680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7125C4-64AF-4A3B-BBD6-1A56660A2D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83AE5BA5-09FF-4AF8-B4E8-4D372A208E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E0D099-C149-4923-A06C-200A23CEA943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B75BCD-9187-4DB0-903D-5F73429AEE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631A40C3-4266-4516-A586-8341D2C01270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DB5E2A-0E79-45DF-BD85-FD216A970771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D20FAC60-445E-4847-B5DE-8ACDDA55E1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9962F81C-A08C-4F8E-A07C-4F4B5C441EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:8.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38C234D-EF75-4A96-A0FD-E1DDDADAC1BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:17.sendmail.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060601-01-P",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0006.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/15779",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20473",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20641",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20650",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20651",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20654",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20673",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20675",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20679",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20683",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20684",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20694",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20726",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21042",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21160",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21327",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21612",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21647",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016295",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.631382",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102460-1",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-148.htm",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY85415&apar=only",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY85930&apar=only",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1155",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-5.shtml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-18.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-19.xml",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/146718",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:104",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sendmail2",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.osvdb.org/26197",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0515.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437928/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438241/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438330/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440744/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442939/100/0/threaded",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18433",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2189",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2351",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2388",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2389",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2390",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2798",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3135",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27128",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-526",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11253",
        "source" : "cret@cert.org"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:17.sendmail.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060601-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/15779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.631382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102460-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-148.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY85415&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY85930&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-5.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/146718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sendmail2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0515.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437928/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438330/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440744/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442939/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-08T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via \"..\" sequences in an HTTP request.  NOTE: it is not clear whether this issue is legitimate, as the original researcher seems unsure."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particle_soft:particle_links:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C225393-3514-4216-9D91-F0C50727ADB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/436112/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436112/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-08T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particle_soft:particle_links:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C225393-3514-4216-9D91-F0C50727ADB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20491",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436112/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436112/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-08T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particle_soft:particle_links:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C225393-3514-4216-9D91-F0C50727ADB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20491",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436112/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436112/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-08T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) page_footer.php and (2) page_header.php, which displays the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particle_soft:particle_links:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C225393-3514-4216-9D91-F0C50727ADB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20491",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436112/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436112/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-08T16:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_boutell:graphics_draw_library:2.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CC657F-BE10-44F2-ACAB-C31893D1F448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20500",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_31_php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18294",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/298-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_31_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/298-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2193",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-08T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.2",
            "matchCriteriaId" : "36B8B853-0FF0-4E2F-983D-683A0951CEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261FAE51-5207-4136-9FFE-2330A281266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32C83B9-F7DA-450A-A687-9A73734CD712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9485283A-B73E-4567-914A-42A86F5FFCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95892168-0FB6-4E3F-9303-2F9B3CF60D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5021564-5E0A-4DDC-BC68-200B6050043E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C50750-FE1D-42BA-9125-7D8E872AA2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEBA7B-81D5-4148-912B-9AD448BBE741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448555FE-8E91-4EA7-BA05-6915F5508319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC5E2C-B6A6-4999-A1EA-B91DA5C350C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2850FD9-8BE8-410E-8A24-28549DAACEB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370355",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1196",
        "source" : "security@debian.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20488",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20501",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20520",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20693",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20766",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21002",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/31670",
        "source" : "security@debian.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-03.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1091",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:102",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0848.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18331",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2197",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26991",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9788",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/289-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.remotesensing.org/show_bug.cgi?id=1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0848.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/289-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue does not affect Red Hat Enterprise Linux 2.1 and 3\n\nThis issue was addressed in Red Hat Enterprise Linux 4 via: https://rhn.redhat.com/errata/RHSA-2008-0848.html\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2008-09-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via crafted inputs that trigger memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:netmeeting:3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251998AE-7E0D-443F-8006-F5FCF688DA36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046636.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hexview.com/docs/20060606-1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436285/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046636.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hexview.com/docs/20060606-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436285/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.5",
            "matchCriteriaId" : "36D20D59-FF31-4B4C-8BAA-4A1DAD1E0704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D0F0F9-09D2-4789-9BAB-411A91C88631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0931C414-F6FE-4727-8672-AA2D3861E29E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7898451-CE65-4D65-B466-59C6BD64FDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1FF24D-03E5-4058-857C-3F13204CE5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46696D01-FB72-4073-9C9F-254A18882454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1238E1-EC16-4990-998E-FC326C354F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E2AF3A-C7A7-46ED-8713-D35227E52065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1AC9051-FD50-4A3B-B101-7D2370B01E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA29C52-E039-4829-AA4A-782A73BFC249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed:sylpheed:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E785E2D1-432D-4D6A-AFB8-953C114DC6C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed-claws:sylpheed-claws:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "26E2C5DE-E793-47EF-ABAE-4C53A9396C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed-claws:sylpheed-claws:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF47A61-63FA-4695-A6B8-E6252205026E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed-claws:sylpheed-claws:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941EDB98-28E5-4263-B429-5FD6DAA4A95D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed-claws:sylpheed-claws:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F7290C-E2BE-4A98-A5C1-40A29C76D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylpheed-claws:sylpheed-claws:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB139F9D-F308-40B2-9ECA-435216309D3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20476",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20577",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sylpheed.good-day.net/en/news.html%5C",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sylpheed.good-day.net/en/news.html%5C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nSylpheed-Claws, Sylpheed-Claws, 2.2.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2452",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the \"face browser\" feature is enabled, allows local users to access the \"Configure Login Manager\" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7756E66E-2296-4B20-ABC0-B1A2ACF2657B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B935ABD7-CCDF-4A23-8899-4243D66E9486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70640B9F-4EAA-4513-80E4-9DD4A862F27D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gdm:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6CC80-BC52-4B39-9424-E96DDA03666E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=343476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20552",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20627",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:100",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436428",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18332",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2239",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27018",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/293-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=343476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/293-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2912",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the (1) albumID parameter to (a) view_album.php or (b) index.php, (2) imageID parameter to (c) popup.php, or (3) username and (4) password parameters to (d) admin/member.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:out_of_the_trees_web_design:selectapix:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059797BA-CEEE-4D0F-ACDE-6BF141D40825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20134",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-39/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016256",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26243",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26244",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26245",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26246",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436637/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18349",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2232",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27013",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-39/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436637/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2913",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HTML via the albumID parameter to (1) popup.php and (2) view_album.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:out_of_the_trees_web_design:selectapix:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059797BA-CEEE-4D0F-ACDE-6BF141D40825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20134",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-39/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26247",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26248",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18349",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2232",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27012",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-39/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmpro_team:clan_manager_pro:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B5399F-C7D0-41DC-B47C-AA19F619E686"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20480",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sx02.coresec.de/advisories/149.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sx02.coresec.de/advisories/149.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PHP code via a URL in the (1) g_pcltar_lib_dir parameter in (a) pcltar.lib.php when register_globals is enabled, and (2) listconfigfile[] parameter in (b) galsecurity.lib.php and (c) galimage.lib.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miraks:miraksgalerie:2.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9F7A55-F812-4429-B3D5-1CBF4E193215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20475",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436333/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iax_net_read function in the iaxclient open source library, as used in multiple products including (a) LoudHush 1.3.6, (b) IDE FISK 1.35 and earlier, (c) Kiax 0.8.5 and earlier, (d) DIAX, (e) Ziaxphone, (f) IAX Phone, (g) X-lite, (h) MediaX, (i) Extreme Networks ePhone, and (j) iaxComm before 1.2.0, allows remote attackers to execute arbitrary code via crafted IAX 2 (IAX2) packets with truncated (1) full frames or (2) mini-frames, which are detected in a length check but still processed, leading to buffer overflows related to negative length values."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loudhush:loudhush:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D16B7697-4C22-4C41-8BB5-7F532BF089C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iaxclient.sourceforge.net/iaxcomm/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20466",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20560",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20567",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20623",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20900",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=423099&group_id=131960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/common/showdoc.php?idx=548&idxseccion=10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-30.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.loudhush.ro/changelog.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436638/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18307",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2180",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2284",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2285",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://iaxclient.sourceforge.net/iaxcomm/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=423099&group_id=131960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/common/showdoc.php?idx=548&idxseccion=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-30.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.loudhush.ro/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436638/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "AEF3C101-6223-458C-8D07-4D2326AE071C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC13E68-0A17-466B-91A0-8BC41F6F85A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_siparator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "D58CA9DC-48C1-4075-9C59-1422ED4C4CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_siparator:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A442F5B-5A1A-4CD0-B693-851FFB917E5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20479",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ingate.com/relnote-441.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ingate.com/relnote-441.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to \"XSS exploits\" in administrator functionality."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.4",
            "matchCriteriaId" : "B85077F8-D213-4942-9B02-69BC9465FCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:ingate_firewall:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1559E6-E7B6-4B5B-8841-CF502E05BA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:siparator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.4",
            "matchCriteriaId" : "37F083E1-9FA4-4A5A-BBAD-3C422E930752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ingate:siparator:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C98D55-9DB1-47EC-9734-BBE8E892B4EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20479",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ingate.com/relnote-441.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ingate.com/relnote-441.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.1.1.1077:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDF759C-0AAE-4760-B829-13F055AD290C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046646.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046649.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20483",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046646.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046649.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_subject and (2) msg_body parameters.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfairguy:codeavalanche_freeforum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B1EEDF-398D-4591-A324-0955E14FB5E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20411",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter in (1) dialogs/img.php and (2) dialogs/td.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms-bandits:cms-bandits:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1162D728-D441-4674-9A54-2702925E7B42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20507",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436430/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436430/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[fileroot] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openemr:openemr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.1",
            "matchCriteriaId" : "E4D9B71B-9DE4-47B3-A9E4-5D06B93A45E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-09T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain access, even if access is denied."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:grid_engine:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AE9E9D-462D-426E-A6C5-274DF7407ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:n1_grid_engine:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CB1FFB-0D29-4214-BA95-CFDC3B3515AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20518",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102321-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102321-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages.  NOTE: the details for this issue are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi-rescue:webform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "D68E852B-AE77-4659-A004-E799FB90E03D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2339570254/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20515",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060216124645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2339570254/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060216124645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nCGI-RESCUE, WebFORM, 4.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages.  NOTE: the details for this issue are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi-rescue:form2mail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "F05BB431-A549-48D4-B143-CB697C4B95EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2339570254/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20515",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060216124645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18434",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2339570254/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060216124645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the user profile change functionality in DokuWiki, when Access Control Lists are enabled, allows remote authenticated users to read unauthorized files via unknown attack vectors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "release_2006-03-09",
            "matchCriteriaId" : "CC7FA4BC-8AAC-401E-AAF9-AD82A846DDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EDDA58-22F6-456A-986D-6A58FD818F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C907D889-8DD7-4542-A74E-C318271E5812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E98CDA-E813-427A-944A-2A768F075021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E589DA1C-7428-48A3-A115-3168F99584E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B197CF8-3729-414F-8BAA-BC709DEAA140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5470BA9-F1F1-484B-B4D2-328D98483D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D11132-69EC-40DD-9D62-CC2B7DF7C344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFDB3E-AB07-4E4C-A065-617A39505EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-10-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD529E-86A6-43A0-AF97-ADD7C8C2BAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2330E8-22BA-45AD-841B-4230CEED6A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD67EB1-A54F-44CC-ACE6-3D5ADA3F473F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47324B2B-AA17-4714-9DFC-FC5C0CF9D452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14882F1-2073-4DF4-8ECD-D4B9C39EAA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE154F-A880-4053-AA65-C02DD9AA1BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151742B9-2357-4A12-B839-09ADDF30E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0296920B-64B6-4492-8B54-D11F8CFA7F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E00178-D993-479A-BBC8-8AD9BDF69129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-05-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFB944D-FA24-4B9C-8543-656CFDB6163A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11872728-EE8D-4E4B-9E2F-C658905B5045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F542C2-7808-42AD-9A20-85BBBFD27DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4277D9B-E1FF-4285-A766-993B1C38CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A781BA-0949-456E-A529-9CA157CD3F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EE1AA-8C74-48F7-8E7D-9668933C7D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.splitbrain.org/?do=details&id=825",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20478",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2172",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.splitbrain.org/?do=details&id=825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This affects only users who have Access Control Lists enabled (off by default) and who have restricted the READ permission for certain pages for logged in users.\r\nThis vulnerability is addressed in the following product release:\r\nAndreas Gohr, DokuWiki, Release 2006-03-09b"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmx_forum:dmx_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1a",
            "matchCriteriaId" : "BB0C9EA4-BC96-48B7-B232-36F7C08A0405"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20450",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmx_forum:dmx_forum:2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDFD972-CF70-4648-9863-5469363F2FD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20450",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alan_ward:a-cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "99A3E345-C3AB-47EF-B5E2-4ED2E308C7CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20508",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1005171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5JP081F8AY.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436257/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/5597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1005171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5JP081F8AY.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436257/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/5597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMyBB, MyBB, 1.1.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) header.php, (2) contact.php, or (3) forum_extender.php, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npds:npds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10",
            "matchCriteriaId" : "61A0C857-DE3B-479F-8229-B63E2CEE454D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npds:npds:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D565FC-1787-4076-8C5F-265D6BFF9D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/npds510.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436442/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2233",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/npds510.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436442/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the (1) Titlesitename or (2) sitename parameter to (a) header.php, (3) nuke_url parameter to (b) meta/meta.php, (4) forum parameter to (c) viewforum.php, (5) post_id, (6) forum, (7) topic, or (8) arbre parameter to (d) editpost.php, or (9) uname or (10) email parameter to (e) user.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npds:npds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10",
            "matchCriteriaId" : "61A0C857-DE3B-479F-8229-B63E2CEE454D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npds:npds:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6D565FC-1787-4076-8C5F-265D6BFF9D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npds:npds:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D63132-CB80-46B8-A225-D05818EC437A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/npds510.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436442/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2233",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/npds510.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436442/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) Default_Theme parameter to header.php or (2) ModPath parameter to modules/cluster-paradise/cluster-E.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net_portal_dynamic_system:net_portal_dynamic_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10",
            "matchCriteriaId" : "FB849DB3-2146-426E-A4BA-B58E80B12010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/npds510.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436442/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/npds510.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436442/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the sqlType parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:primoris_software:officeflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "8AD3E110-5699-495A-B326-49717E8B9FBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/officeflow-26-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/officeflow-26-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in files.asp in OfficeFlow 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the Project parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:primoris_software:officeflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "8AD3E110-5699-495A-B326-49717E8B9FBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/officeflow-26-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/officeflow-26-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage parameter to (a) edtalbum.asp, or the (3) cat or (4) albumid parameter to (b) album.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaphotoservice:kaphotoservice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "21EDCC2D-993E-4548-8339-67F4E51D5740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/kaphotoservice-75-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20521",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/kaphotoservice-75-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchword parameter to search.php or (2) siteurl parameter to add.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skoom:i.list:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5_beta",
            "matchCriteriaId" : "EC52B121-742A-4702-B629-AF06010AC7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls10.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the banurl parameter to add.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skoom:i.list:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5_beta",
            "matchCriteriaId" : "EC52B121-742A-4702-B629-AF06010AC7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. (dot dot) in a (1) .rar, (2) .tar, (3) .jar, or (4) .gz file.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filzip:filzip:3.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A3840E-148B-4959-9991-DC6E2603ED8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20543",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBAEA3C3-D65B-47B6-9A1B-CE18F7C86771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBCC803-6F31-4CA5-B8AF-42AA370E0CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB43A6B-03DE-4D60-AB41-87E419F82582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D54E309-5D2F-4C3C-835B-7653D86E25F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4027A962-81FD-472F-80CD-B1C3BABF3555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4396E99-B5C8-4914-A3DB-76E22A10AE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D89B42F-7738-47EE-871A-FE16C53BCD81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4EF4E8-F8A9-40C4-9F89-8C64A8CF2625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31D3D44-EC0B-4502-A1FA-3AE2BF4D4254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E3811E-DE0F-4AEB-A0C8-4115E9188A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-343.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436702/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-343.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436702/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/joomla.php in Joomla! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436707/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436707/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MKD command.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aclogic:cesarftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99g",
            "matchCriteriaId" : "0CD50B42-EA2A-40A3-A96F-D3FD18EA4865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20574",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxfam_australia:emergencies_personnel_information_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2002-09-23",
            "matchCriteriaId" : "76D61782-264B-4ECE-8ABA-F1E11BA566FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Suchergebnisse.asp in Cabacos Web CMS 3.8.498 and earlier allows remote attackers to inject arbitrary web script or HTML via the suchtext parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:it-direkt:cabacos_web_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.498",
            "matchCriteriaId" : "E602B126-1D07-4966-8C82-C06114777241"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls13.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436704/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls13.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436704/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager (aka Xtreme Downloads) 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) download.php, (2) manager.php, (3) admin/scripts/category.php, (4) includes/add_allow.php, (5) admin/index.php, and (6) admin/admin/login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xtreme_scripts:download_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C02531D-19D3-4AC0-AA5D-DFF2C24D0C28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26644",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26645",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26646",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436104/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436107/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436104/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436107/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the target parameter in index.php and (2) the \"input box.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particle_soft:particle_whois:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9A904C-C580-43EA-AFAE-1940EDDF1ADA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20490",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436113/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436113/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML via a BR element with an extraneous IMG tag and a STYLE attribute that contains \"/**/\" comment sequences, which bypasses the XSS protection scheme."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:particle_soft:particle_wiki:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46B000D-E5C1-411B-A01F-3C70D3480A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436121/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436121/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Syworks SafeNET allows local users to bypass restrictions on network resource consumption by editing the policy.dat file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syworks:safenet:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A793B6-B03D-41C8-AE40-1C4EB08E399A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in PHP Labware LabWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input box (query parameter)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_labware:labwiki:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100E8D7B-04B4-4EF6-B418-52664E00B8AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000845.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435981/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000845.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/435981/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the input box in quickchat.php, and possibly other manipulations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:l0j1k:tinymuw:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA32328-04C3-4150-9C82-65EECDAA4D23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436640/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436640/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "videoPage.php in L0j1k tinyMuw 0.1.0 allows remote attackers to obtain sensitive information via a certain id parameter, probably with an invalid value, which reveals the path in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:l0j1k:tinymuw:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA32328-04C3-4150-9C82-65EECDAA4D23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436640/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436640/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the recv_packet function in 0verkill 0.16 allows remote attackers to cause a denial of service (daemon crash) via a UDP packet with fewer than 12 bytes, which results in a long length value to the crc32 function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:overkill:overkill:0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3FF951-EDC3-4D1A-9106-9FB3B70794E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20551",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436659/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18353",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436659/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in vs_resource.php in Arantius Vice Stats 0.5b and 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arantius:vice_stats:0.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5ECDCB-4EFB-4CAC-B6A9-ECAE6DC527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arantius:vice_stats:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D892F40F-5EE0-4326-B179-5B48C43ECD40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20512",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arantius.com/topic/vice+stats",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000848.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436290/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arantius.com/topic/vice+stats",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000848.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436290/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) catid and (2) cid parameter.  NOTE: this might be a duplicate of CVE-2005-4009.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_lite:calendar_express:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997E9458-4347-4C79-859B-EF803CFDBA8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436334/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18314",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2220",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436334/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errCode and (2) uid parameter in (a) default.asp and (3) dname parameter in (b) /admin/dns.asp and (c) /additional/regdomain_done.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emailarchitect:email_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.5",
            "matchCriteriaId" : "23E47C14-A51A-453E-91CF-FCB5506030D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20516",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016237",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in pblguestbook.php in PBL Guestbook 1.31 allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of IMG tags in the (1) name, (2) email, and (3) website parameter, which bypasses XSS protection mechanisms that check for SCRIPT tags but not IMG.  NOTE: portions of this description's details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pbl_guestbook:pbl_guestbook:1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5B3074-E91D-420C-AB33-8399A7E31266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436408/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436408/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA317DD-C804-4349-9BDC-B23FAE493516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DFCDB9A-E808-4EC2-A377-CF17C0B6AFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3BB681-16F8-441F-912C-9488791A6420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709BC7EC-6EAB-4880-B210-F6E154FF7CB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C614B6-4BC6-4F77-8D4E-9EBDC69B396C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D1312-5285-4D6C-AAD3-2465527F6796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=32333.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20465",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=423104&group_id=89658",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=32333.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=423104&group_id=89658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the img parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mafia_moblog:mafia_moblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6m1",
            "matchCriteriaId" : "0E8E9F26-16C7-436E-9B94-8B0C5DCB4184"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20529",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436410/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2249",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436410/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to (1) big.php and (2) upgrade.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mafia_moblog:mafia_moblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6m1",
            "matchCriteriaId" : "0E8E9F26-16C7-436E-9B94-8B0C5DCB4184"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20529",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436410/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436410/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter in forum.php, which is not properly handled in block_forum_topics.php, and (2) item_id parameter in reviews.php, which is not properly handled in block_reviews.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viart:shop:2.5.5_free:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B9ADB8-02C8-4FD7-8A78-ABC96F711B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20538",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000846.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.codetosell.com/downloads/xss_fix.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436415/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000846.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.codetosell.com/downloads/xss_fix.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436415/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viart_ltd:viart_shop_free:2.5.5_enterprise:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3959A7-44B6-4057-A2B6-F299A29D6502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viart_ltd:viart_shop_free:2.5.5_light:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8E4ED2-FE58-43F6-ADB9-16F87DBC70C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viart_ltd:viart_shop_free:2.5.5_standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0377F9-8540-45DD-B4DA-29F5592E44B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000846.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.codetosell.com/downloads/xss_fix.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000846.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.codetosell.com/downloads/xss_fix.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-12T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in vs_search.php in Arantius Vice Stats before 1.0.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors, a different issue than CVE-2006-2972."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arantius:vice_stats:0.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A62A869-2FB5-4179-A982-8645FA4728CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arantius:vice_stats:0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C2BC5F-0D21-464F-8323-BC6FB98DE437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arantius:vice_stats:0.4.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A482E0-F247-4BB5-B6D3-26A3317DE5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arantius:vice_stats:0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BE62C4-5F2A-4815-A24C-2942C2E23FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arantius:vice_stats:0.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5ECDCB-4EFB-4CAC-B6A9-ECAE6DC527D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arantius:vice_stats:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D892F40F-5EE0-4326-B179-5B48C43ECD40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.arantius.com/topic/vice+stats",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000848.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arantius.com/topic/vice+stats",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000848.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2908",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The domecode function in inc/functions_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a preg_replace function call with a /e (executable) modifier."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20371",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-40/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1086",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016270",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.514.es/download/mybibi.pl",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26216",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436767/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437509/100/100/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18396",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2288",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27046",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-40/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.514.es/download/mybibi.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436767/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437509/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in (1) footer.php and (2) admin/footer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprise_payroll_systems:enterprise_payroll_systems:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D63DEA54-F638-4D83-B53B-3C8A310623E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprise_payroll_systems:enterprise_payroll_systems:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576A11F5-C07E-470C-A8E1-5E47FD791109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprise_payroll_systems:enterprise_payroll_systems:1.01_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095C9F79-3EA9-4415-B65E-B5E9C194B727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20522",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in cal.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprise_payroll_systems:enterprise_payroll_systems:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D63DEA54-F638-4D83-B53B-3C8A310623E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprise_payroll_systems:enterprise_payroll_systems:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576A11F5-C07E-470C-A8E1-5E47FD791109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprise_payroll_systems:enterprise_payroll_systems:1.01_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095C9F79-3EA9-4415-B65E-B5E9C194B727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/26418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLE_URL parameter.  NOTE: it is possible that this issue is resultant from SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:integramod:integramod:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC62A1A-0236-46E0-8754-67A0A5AE8CB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20528",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436457/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436457/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded \"'\" characters in the STYLE_URL parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:integramod:integramod:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "05900509-6718-4E70-AF96-A19AB3FAB882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000847.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436457/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000847.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436457/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baby_katie_media:very_simple_car_lister:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E82F44A-D3A9-476D-9F0D-11C69A220B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baby_katie_media:very_simple_realty_lister:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B310186-6AEE-4527-BABF-02F05C9D3F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436411/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) voteid, and (3) vfiel parameters to (a) index.php, and via the (4) nick, (5) email, (6) city, (7) messen, and (8) message form field parameters to (b) add.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dominios_europa:picrate:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24060CAA-E31E-4CB0-92D7-162E993E2287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20414/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20414/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a browse action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chemical_dictionary:chemical_dictionary:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4382C1-013F-4BE0-AB3D-4E4A3EC7255C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20540",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436412/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436412/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iisworks:listpics:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3",
            "matchCriteriaId" : "9C2985D1-CB49-412E-8D17-B847E73D7084"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/asp-listpics-43-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20517",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/asp-listpics-43-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanillasoft:vanillasoft_helpdesk:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7CB26BF-2FE8-40F2-BA72-87282FC6D823"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/vanillasoft-helpdesk-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20544",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/vanillasoft-helpdesk-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ringlink 3.2 allow remote attackers to inject arbitrary web script or HTML via a JavaScript URI in the SRC attribute of an IMG element, and possibly other manipulations, in the ringid parameter in (1) next.cgi, (2) stats.cgi, or (3) list.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ringlink:ringlink:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F418CD-1E3C-4AFB-8DD6-9E6E2F27086C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20590",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436690/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436690/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the key_m parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_photo_scrapbook:my_photo_scrapbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "01B8C3F6-787E-46AD-ACCB-CD62251E22A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20554",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in (1) Displayview.asp and (2) Details_Photo_bv.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_photo_scrapbook:my_photo_scrapbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "01B8C3F6-787E-46AD-ACCB-CD62251E22A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20554",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) url fields, and (4) text field (content parameter)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:christian_becher:phazizguestbook:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCC3535-21BB-49E5-96E1-E1555161EF5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436602/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2421",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436602/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the INCDIR parameter in (1) include/nav.php and (2) include/lang.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webprojectdb:webprojectdb:0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2A7648-E10F-431D-ACF5-8931C8193D2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dir[data] parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lovecompass:aepartner:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35592E89-1534-4A4E-A13E-857CDE2622EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ZMS 2.9 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en ZMS 2.9 y versiones anteriores, cuando register_globals está activado, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro raw en el campo de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zms_publishing:zms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.2",
            "matchCriteriaId" : "9AA27EC2-37B2-4441-B5DC-BBA3BF12CC9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20585",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls12.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436703/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls12.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436703/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad incluida en el archivo remoto PHP en board/post.php en free QBoard 1.1 y versiones anteriores permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro qb_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_qboard:free_qboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DE640F9-5C01-431A-A141-B286F9E763C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in OkScripts QuickLinks 1.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:okscripts:quicklinks:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26074D1A-714C-4CAD-9EC8-94EE809764A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20594",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkArticles 1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:okscripts:okarticles:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF0D350-EC79-4650-8F02-79483D506316"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20593",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter.  NOTE: this might be resultant from another vulnerability, since the XSS is reflected in an error message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:okscripts:okmall:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C439C7-F05F-48AC-A1E5-179B7B066854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_ad-manager:easy_ad-manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF97BC6-BB89-4223-B3ED-3554731F8283"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436413",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18339",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message.  NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting (XSS).  NOTE: on 20060829, the vendor notified CVE that this issue has been fixed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_ad-manager:easy_ad-manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF97BC6-BB89-4223-B3ED-3554731F8283"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436413",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in player.php and (2) keyword parameter when performing a search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptsez:ez_ringtone_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C6442F-9DAA-4768-BC37-7D77CBEE7E84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20530",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436424",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allow context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted JPEG file that exceeds the intended memory limits."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:media-libs_jpeg:6b:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "270095EA-4F09-40D0-AEF6-346D4B2344FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:media-libs_jpeg:6b:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E05154-651A-4803-82C1-4B47C3638C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:media-libs_jpeg:6b:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "8F65B8A1-58DC-4B18-88EB-6D07324E7ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:media-libs_jpeg:6b:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "82A41614-8C8B-4F17-8A43-2FB3371E34DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:media-libs_jpeg:6b:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87E31E-8765-44BF-8552-163356EDA1CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BA336-5538-4972-9271-383A0EC9378E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=130889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20563",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-11.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=130889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this a security issue.  It is expected behavior that a large input file will cause the processing program to use a large amount of memory.",
        "lastModified" : "2006-08-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ifoto:ifoto:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5176EA-1C05-4256-B0BE-A00901B09772"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20619",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436599/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436774/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18391",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436599/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436774/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en SHOUTcast 1.9.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los campos DJ (1) Description, (2) URL, (3) Genre, (4) AIM y (5) ICQ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8F6BDC78-C016-43CA-A0FC-D3872F4A3874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.3:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "440E9595-71EE-42B5-8F81-3C63AC2040ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:freebsd:*:*:*:*:*",
            "matchCriteriaId" : "E508D922-3817-4BD3-A4D5-B6981F10BDFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C08E8A3C-A83F-4339-AC5B-B8EC896B70A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "4A842C27-A792-4483-92EF-7CD08507C246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B703039B-1EC8-41D2-8365-CA7359BFDFE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "EE770672-FF5D-41F7-A1CF-35811EF8098C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.2:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "7C138869-BAFB-49EF-A6F9-F3F70D0A4D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5199CE97-4B9A-4515-979F-7629F7E24842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "7A4E885A-D64C-41E6-8F79-3569C7E95642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "BC4BF564-908B-4996-A3AF-0D73C2C80283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "57E21195-8378-48D2-B337-BCFF2822A4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.5:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "F0893B1F-D8E5-4980-A524-4639325DA101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.5:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "6906F523-05B2-48C5-82F9-CE4520F3BF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=114980135615062&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20524",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200607-05.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114980135615062&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200607-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T10:02:00.000",
      "lastModified" : "2023-11-07T01:58:56.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2904.  Reason: This candidate is a duplicate of CVE-2006-2904.  Notes: All CVE users should reference CVE-2006-2904 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2376",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) or EMF image with a sum of entries in the vertext counts array and number of polygons that triggers a heap-based buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20631",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1094",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016286",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/909508",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26431",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436950/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18322",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2324",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-026",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26815",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/909508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436950/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2937B3-D034-400E-84F5-33833CE3764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&rev=1.1247.2.920.2.134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436785/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&rev=1.1247.2.920.2.134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436785/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This is not an issue that affects users of Red Hat Enterprise Linux.  \nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=196255",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0022",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E392539-ABF6-4B5C-AEC3-C54B51E0DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D64E16F-0E13-4679-A68D-66866A77149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "16844C40-F012-4C19-9028-D05014EBF7D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "5843C1AA-953B-4CC1-9B1B-AF9969BB1A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711D9CC0-31B8-4511-A9F3-CA328A02ED84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "054BA29C-3320-475D-95AE-996BAA04D464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DC15E7-F1C3-42D0-AE3E-DDF6300FCD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34C63AE5-4584-4A51-B20D-36FA6DE01C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A83E4CC-3182-465A-BE82-619445B23EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EACB44AC-9433-4D28-9EC4-1F6857C3A57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "1778A4FF-FF69-403C-A607-6777AE685A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "794FCFBF-2D55-4ECE-825E-180616DB35FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20633",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016287",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/190089",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26435",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18382",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-028",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26784",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1069",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1836",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1984",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/190089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0025",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C28602CC-7866-4C30-B518-055923599A18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20626",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016284",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=406",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/608020",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26430",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18385",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2322",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-024",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26788",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1230",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1729",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1805",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1807",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1820",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1974",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/608020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1193",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to \"HTML parsing.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "34300FD4-EC3B-4206-B6C0-1345F17EC5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "47132D0D-7691-40A3-A4BF-37D2ACE580C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "E88E31D4-1120-4A18-BA65-E2C96B35E599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046892.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20634",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016280",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/138188",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26441",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.sec-consult.com/fileadmin/Advisories/20060613-0_owa_xss_noexploit.txt",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18381",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-029",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25550",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1070",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1161",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1315",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046892.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/138188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.sec-consult.com/fileadmin/Advisories/20060613-0_owa_xss_noexploit.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1303",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "9F9AE3DB-EB7C-4B17-AF7A-CD8FC3C77070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*",
            "matchCriteriaId" : "151FE30E-9320-495C-84AD-60893FAED223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "5805FB74-2AD6-4919-BAAE-D995CA2650A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*",
            "matchCriteriaId" : "0D328337-A2FE-4E2E-8A8D-C170DC0A88E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26442",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437041/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18328",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-018.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26774",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1135",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1767",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1830",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1928",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1973",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2017",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437041/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1313",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will \"release objects early\" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D8321-EB2F-4626-A16B-F3C2B771EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3538DA2-B040-426D-9ADC-7C5BE9C2D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F633513-6E9A-4F2D-964A-6AFDE5307AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED8947F-2490-41CA-A7B3-2C93D69C3F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3EB90-92C9-4B69-B58C-087D382DC579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AF27C8-C2FA-477D-8332-B96277530B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1CE6C6-6E6E-4C4E-A7B1-DC6651864298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4E9E190B-A109-4177-A5B5-7BD32573762E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA733AD2-D948-46A0-A063-D29081A56F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20620",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016283",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/390044",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26434",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18359",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2321",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26805",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/390044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2370",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted \"RPC related requests,\" aka the \"RRAS Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D8321-EB2F-4626-A16B-F3C2B771EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3538DA2-B040-426D-9ADC-7C5BE9C2D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F633513-6E9A-4F2D-964A-6AFDE5307AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED8947F-2490-41CA-A7B3-2C93D69C3F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3EB90-92C9-4B69-B58C-087D382DC579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AF27C8-C2FA-477D-8332-B96277530B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1CE6C6-6E6E-4C4E-A7B1-DC6651864298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4E9E190B-A109-4177-A5B5-7BD32573762E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20630",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016285",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/631516",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26437",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2323",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26812",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1587",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1720",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1741",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1823",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1936",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2061",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/631516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2371",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted \"RPC related requests,\" that lead to registry corruption and stack corruption, aka the \"RASMAN Registry Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D8321-EB2F-4626-A16B-F3C2B771EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3538DA2-B040-426D-9ADC-7C5BE9C2D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F633513-6E9A-4F2D-964A-6AFDE5307AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED8947F-2490-41CA-A7B3-2C93D69C3F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3EB90-92C9-4B69-B58C-087D382DC579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AF27C8-C2FA-477D-8332-B96277530B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1CE6C6-6E6E-4C4E-A7B1-DC6651864298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4E9E190B-A109-4177-A5B5-7BD32573762E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20630",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1096",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016285",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/814644",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26436",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436977/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18358",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2323",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26814",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1674",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1846",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1851",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1857",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1907",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1983",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/814644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436977/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2373",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the \"SMB Driver Elevation of Privilege Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EAA5F2-20F2-4BE1-A41E-5FAFE69015C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "72CC2D03-538A-4603-B4FF-C6930F9D7E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "F8B8E932-AA36-416B-88F5-C0AC6FF3D1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:-:*:*:professional:*:x64:*",
            "matchCriteriaId" : "4902A7BD-0645-4CAC-8EA8-24BD2D8B893A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2572F7E5-75A3-4C11-866B-A4E9ADBD8D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20635",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016288",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=408",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26440",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18356",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2327",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26828",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1137",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1730",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1792",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1904",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1942",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2007",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2374",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the \"SMB Invalid Handle Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA86830-BEA8-4943-83EA-C267FA534223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:itanium:*",
            "matchCriteriaId" : "E3E1FBA6-FB99-4592-B903-77AE29B656F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C553A447-16F7-4FDF-A957-6A9CE936D765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0607E7-B416-4AF8-ADF6-6E503627DD29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:itanium:*",
            "matchCriteriaId" : "4696823D-CB98-4DCC-B1F6-31FEAB3D25C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:*",
            "matchCriteriaId" : "18420EC8-633E-4AED-B33F-5A3C673C396D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2572F7E5-75A3-4C11-866B-A4E9ADBD8D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20635",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016288",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409",
        "source" : "secure@microsoft.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.osvdb.org/26439",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18357",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2327",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26830",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1841",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2030",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2060",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.osvdb.org/26439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2378",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D8321-EB2F-4626-A16B-F3C2B771EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3538DA2-B040-426D-9ADC-7C5BE9C2D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F633513-6E9A-4F2D-964A-6AFDE5307AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED8947F-2490-41CA-A7B3-2C93D69C3F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3EB90-92C9-4B69-B58C-087D382DC579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AF27C8-C2FA-477D-8332-B96277530B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1CE6C6-6E6E-4C4E-A7B1-DC6651864298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4E9E190B-A109-4177-A5B5-7BD32573762E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20605",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016292",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/923236",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26432",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18394",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2320",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26809",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/923236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2379",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "matchCriteriaId" : "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*",
            "matchCriteriaId" : "35346A7B-2CB5-446D-B0C3-1F21D71A746D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "064F4E76-1B89-4FA5-97ED-64624285C014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
            "matchCriteriaId" : "089A953C-8446-4E6F-B506-430C38DF37B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EA262C44-C0E6-493A-B8E5-4D26E4013226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*",
            "matchCriteriaId" : "416F06DD-980E-4A54-822D-CBA499FD1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "F66DC6FF-2B3D-4718-838F-9E055E89961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
            "matchCriteriaId" : "656AE014-AEEC-46E8-A696-61FEA7932F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*",
            "matchCriteriaId" : "A08D0EA1-DA1B-4C52-883A-3F156F032517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "DA267420-56C5-4697-B0AA-52932F78B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
            "matchCriteriaId" : "93BA426E-DD51-44AC-BE78-3164670FF9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "224F8968-9F4C-4727-AAA3-61F5578EF54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*",
            "matchCriteriaId" : "02BE9817-E1AE-4619-8302-CA7AA4167F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "363E3895-A19B-42EC-B479-765168DC0B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
            "matchCriteriaId" : "FBBBF25A-709B-4716-9894-AD82180091AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "407DA6E8-0832-49FE-AE14-35C104C237EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*",
            "matchCriteriaId" : "88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "81B7961D-151D-4773-80CB-CCD0456BFEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
            "matchCriteriaId" : "82781A72-A34F-4668-9EE8-C203B04E3367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*",
            "matchCriteriaId" : "12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "B5CAF64E-98AA-4813-A2A2-5AC3387CF230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
            "matchCriteriaId" : "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "BCC5E316-FB61-408B-BAA2-7FE03D581250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*",
            "matchCriteriaId" : "EDDD8DA8-D074-4543-AEDF-F856B5567F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "CA7BA525-6DB8-4444-934A-932AFED69816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
            "matchCriteriaId" : "90CFA69B-7814-4F97-A14D-D76310065CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "2FECD4B0-23A0-4C0B-9888-D28A5941D848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*",
            "matchCriteriaId" : "AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20639",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016290",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/46702",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/722753",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26433",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438482/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438609/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18374",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2329",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-032",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26834",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1483",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1585",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1712",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1776",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1787",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2018",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/46702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/722753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438482/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438609/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2380",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the \"RPC Mutual Authentication Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20637",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016289",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26438",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18389",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2328",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26836",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2382",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka \"HTML Decoding Memory Corruption Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/136849",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26443",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436985/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18309",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-017.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26766",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1414",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1621",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1752",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1862",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1906",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1931",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/136849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2383",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via \"unexpected data\" related to \"parameter validation\" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a way that enables the code execution."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/417585",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26444",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18303",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26768",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1821",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1891",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1924",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1944",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1949",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2009",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/417585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-164A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2384",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the \"Address Bar Spoofing Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "18C773CC-4611-4CDC-B8B6-C0AC7265F0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/26445",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18321",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26777",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1478",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1567",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1646",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1686",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1775",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1788",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2385",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-06-13T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption when it is saved as a multipart HTML (.mht) file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Internet Explorer 5.01 SP4 y 6 SP1 y anteriores permite a atacantes asistidos por el usuario ejecutar código de forma arbitraria a través de una página web manipulada que dispara una corrupción de memoria cuando se guarda como un archivo multipart HTML (.mht)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/26446",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18320",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26782",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1167",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1423",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1609",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1665",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1911",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1916",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to inject arbitrary HTML or web script via the (1) tf_lang, (2) tf_name, (3) tf_user, (4) tf_lastname, (5) tf_contact, (6) tf_datebefore, and (7) tf_dateafter parameters to files such as (a) publication/publication_index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de XSS en Open Business Management (OBM) 1.0.3 pl1 permite a atacantes remotos inyectar script web o HTML arbitrario a través de parámetros (1) tf_lang, (2) tf_name, (3) tf_user, (4) tf_lastname, (5) tf_contact, (6) tf_datebefore, y (7) tf_dateafter a archivos como (a) publication/publication_index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, y (e) company/company_index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aliacom:open_business_management:1.0.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AACE76F4-48B9-438C-B465-8A48CC8B436B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26198",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26199",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26200",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18348",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-13T22:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the (1) new_order and (2) order_dir parameters to (a) index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php, and the (3) entity and (4) tf_dateafter parameter to company/company_index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aliacom:open_business_management:1.0.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AACE76F4-48B9-438C-B465-8A48CC8B436B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26204",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26205",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26206",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26207",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18348",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-14T15:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de argumento en WinSCP 3.8.1 build 328 permite a atacantes remotos subir o descargar archivos arbitrarios a través de espacios codificados y caracteres de comillas dobles en un URI scp o sftp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winscp:winscp:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9F9BEF-14B6-429B-915F-45958C568F76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046810.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20575",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://winscp.net/eng/docs/history#3.8.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/912588",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18384",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2289",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27075",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046810.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://winscp.net/eng/docs/history#3.8.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/912588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to \"certain characters in session names,\" including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities.  NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name()."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.2",
            "matchCriteriaId" : "08986528-0CAA-4508-9DCE-03535841F87E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0736.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19927",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23247",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_3.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0669.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0682.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17843",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0736.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_3.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0669.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0682.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.2",
            "matchCriteriaId" : "B08B1B99-9163-4757-A4B6-10B047CBB39A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B3138-3DCC-4682-B9A8-920E1110700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901229DD-61B9-4121-9249-55CBA58D8EC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19927",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21031",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21202",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21723",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_31_php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_34_php4.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_3.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0567.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0568.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442437/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/320-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0549.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_31_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_34_php4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_3.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0567.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0568.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442437/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/320-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-14T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la funcionalidad de extensión de sesión en PHP anterior a la versión 5.1.3 tiene un impacto y vectores de ataque desconocidos, relacionados con una corrupción de memoria dinámica."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.2",
            "matchCriteriaId" : "08986528-0CAA-4508-9DCE-03535841F87E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19927",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_3.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_3.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Unknown: CVE-2006-3018 has been assigned to an issue in PHP where the cause and fix are unknown, and the impact cannot be verified. The source of the CVE assignment was a single line statement in the PHP 5.1.3 release announcement, http://www.php.net/release_5_1_3.php, reading: &quot;Fixed a heap corruption inside the session extension.&quot;  Of the changes made to the session extension between releases 5.1.2 and 5.1.3, none would fix a bug matching this description by our analysis.\n",
        "lastModified" : "2006-09-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2195",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en horde 3 (horde3) anterior a v3.1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) templates/problem/problem.inc y (2) test.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.9",
            "matchCriteriaId" : "80E9DE66-064E-4872-AF40-2CC71507399A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF82BE80-C62C-4E1A-8AB9-5773E49142B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DEABE1-B6C4-4C6F-A098-D5BC9F3C65A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E486E1-3BC7-444A-8BBB-6571CCF44E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8E2B1E-C3C7-466D-982C-36FC51D0BE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E3B91F-F391-4126-832C-C5582F5D6FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2912428D-9A74-48C2-8866-669355CAB535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A17589E-AAD1-432A-A5E3-623A8EF66572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA1F0BF-6F17-4062-86B0-83EEDA5EAC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505DFF07-4F63-4A0E-87E4-DC899F345307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B313A4C-12CE-4CA9-8036-26580152AE7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=136830",
        "source" : "security@debian.org"
      }, {
        "url" : "http://cvs.horde.org/diff.php?f=horde%2Ftest.php&r1=1.145&r2=1.146",
        "source" : "security@debian.org"
      }, {
        "url" : "http://cvs.horde.org/diff.php?r1=2.25&r2=2.26&f=horde%2Ftemplates%2Fproblem%2Fproblem.inc",
        "source" : "security@debian.org"
      }, {
        "url" : "http://overlays.gentoo.org/dev/chtekk/browser/horde/www-apps/horde/files/horde-3.1.1-xss.diff?rev=4&format=txt",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20661",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20672",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20750",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20849",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1016310",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1098",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1099",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-28.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/26513",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/26514",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18436",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2356",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27168",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=136830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.horde.org/diff.php?f=horde%2Ftest.php&r1=1.145&r2=1.146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.horde.org/diff.php?r1=2.25&r2=2.26&f=horde%2Ftemplates%2Fproblem%2Fproblem.inc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://overlays.gentoo.org/dev/chtekk/browser/horde/www-apps/horde/files/horde-3.1.1-xss.diff?rev=4&format=txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-28.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nHorde, Horde, 3.1.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2197",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en WV2 anterior a v0.2.3 podría permitir a atacantes dependientes de contexto para ejecutar código arbitrario a través de un documento de Microsoft Word."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wvware:wv2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.3",
            "matchCriteriaId" : "3D9ECBF1-45ED-42AF-8854-6BA2D685D85D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wvware:wv2:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB2FAA-427C-4313-B7AF-31829E58C367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20665",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20688",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20689",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20826",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20844",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016313",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1100",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:109",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18437",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2350",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27184",
        "source" : "security@debian.org"
      }, {
        "url" : "https://usn.ubuntu.com/300-1/",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/300-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nDebian, wv2, 0.2.2-1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2449",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login."
      }, {
        "lang" : "es",
        "value" : "KDE Display Manager (KDM) en KDE v3.2.0 a v3.5.3 permite a usuarios locales leer archivos de su elección mediante un ataque de enlaces simbólicos relaciado con el tipo de sesión elegido en el inicio de sesión\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F69843-978D-4686-BC5B-1D09DA4A21BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEE0AED-7918-41E9-A902-AC4070E03132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E19472-47B4-4398-A188-CA5A5D3E7060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17407A2-089E-43A5-9BD5-EFF966F5CC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4B436D-8D6A-473E-B707-26147208808B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E26B353-4985-4116-B97A-5767CDC732F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442021C9-BE4D-4BC9-8114-8BEFA9EC1232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7036AE90-C7E0-48CE-805D-3F1E04852675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D49AE92-BA00-4A8E-BBFE-1BE994CFA3CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29911CA1-ECFD-476F-8C85-EA0C6C143DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17CEFEB-9166-4426-92E1-D8F61D5F5D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C992C7-E81D-443B-ACE8-B92F8A36C1FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAC287B-1AB4-43F3-AC26-EDA689A004B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20602",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20660",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20674",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20702",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20785",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20869",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20890",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21662",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016297",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.444467",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1156",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-23.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060614-1.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:105",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:106",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_39_kdm.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26511",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0548.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437133/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437322/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18431",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2355",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/301-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.444467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060614-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_39_kdm.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0548.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437322/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/301-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Vendor links provide patches for each version affected."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges."
      }, {
        "lang" : "es",
        "value" : "artswrapper en aRts, cuando se ejecuta como root sobre linux 2.6.0 o versiones posteriores, no valida la variable setuid de retorno de la llamada  a la función, lo que permite a usuarios locales ganar privilegios de root al provocar un fallo sobre setuid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-273"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:arts:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA4B1F0-C924-4308-862F-0FE65D7BAB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:arts:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2D979D-0731-4CE3-9D16-22EF314884A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "matchCriteriaId" : "DC4FB0A3-C8CC-4AB5-8A9D-EF370368B1EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dot.kde.org/1150310128/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://mail.gnome.org/archives/beast/2006-December/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/20677",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20786",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20827",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20868",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25032",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25059",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200704-22.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016298",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060614-2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:107",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/26506",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437362/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18429",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/23697",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2357",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0409",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27221",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dot.kde.org/1150310128/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://mail.gnome.org/archives/beast/2006-December/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/20677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200704-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kde.org/info/security/advisory-20060614-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/26506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437362/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/23697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "Product is only vulnerable when running setuid root on Linux 2.6.0 or later versions.\nVendor links provide patches for each affected version.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  We do not ship aRts as setuid root on Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMS_INCLUDEPATH parameter to files in parser/include/ including (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php.  NOTE: the class.cache_phpcms.php vector was also reported to affect 1.1.7."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos PHP en phpCMS v1.2.1pl2 permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro PHPCMS_INCLUDEPATH en los ficheros incluidos en parser/include/ (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, y (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, y (10) parser/parser.php. NOTA: El vector class.cache_phpcms.php también fue reportado afectando a v1.1.7."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcms:phpcms:1.2.1_p12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC32A40-EAEC-458E-8A35-C4BCEADFA1BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20573",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436893/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/455302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2302",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436893/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/455302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) image and (2) PublisedDate parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en FullPhoto.asp WS-Album v1.1 permite a atacantes remotos ejecutar secuencias de comandos web o HTML a través del parámetro (1) image o (2) PublishedDate."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planete_afrique:ws-album:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "AC8E1AAF-3E11-4231-B927-86B267AF823B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ws-album-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20537",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000860.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ws-album-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000860.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) n and (2) d parameters in (a) login.asp and the d parameter in (b) igallery.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en BlueCollar i-Gallery v4.1 PLUS y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámemtros (1) n y (2) d en (a) login.asp y el parámetro d en (b) igallery.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue-collar_productions:i-gallery:*:*:plus:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "5049721E-DFBC-42A6-935A-FE72C1C47B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue-collar_productions:i-gallery:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA950E69-EBF8-43F3-A6CC-C0709CB4DCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue-collar_productions:i-gallery:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF7DB08-0BA9-4F77-B074-D622DE993211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/i-gallery-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20610",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/i-gallery-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in zoom.php in fipsGallery 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en zoom.php en fipsGallery v1.5 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fipsasp:fipsgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "DCBD422E-04AF-4E6B-9148-73F9B01C7BB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/fipsgallery-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20559",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/fipsgallery-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) block parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en thumbnails.asp en Uphotogallery Uapplication v1.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) s y (2) block."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uapplication:uphotogallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "6371C29C-9811-4DB7-A9DF-C584EC697E28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/uphotogallery-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20606",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/uphotogallery-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in EvGenius Counter 3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) monthly.php and (2) daily.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en EvGenius Counter v3.4 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro page en (1) monthly.php y (2) daily.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evgenius:evgenius_counter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4",
            "matchCriteriaId" : "8579C11A-014B-4AC0-8736-6AC6F8EB23EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/evgenius-counter-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/evgenius-counter-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucid_designs:lucid_calendar:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78913FE-1D9F-409B-A41E-2A8834A32179"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Lucid Designs, Lucid Calendar, 0.22 is unsupported.  A new, supported version of this product will be released in the near future."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage parameter in view_gallery.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ClickGallery v5.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) el parámetro gallery_id en gallery.asp y (2) el parámetro parentcurrentpage en view_gallery.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clicktech:clickgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "5BA3FA23-2040-4353-BC08-6571228D6433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/clickgallery-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20614",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/clickgallery-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) CAT_ID parameter in (a) subphotos.asp and (b) subLevel2.asp, the (2) AL_ID parameter in (c) photo.asp, and the (3) SUB_ID parameter in (d) subLevel2.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Enthrallwebe ePhotos v2.2 y anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de parámetros (1) CAT_ID en (a) subphotos.asp y (b) subLevel2.asp, el parámetro (2) AL_ID en (c) photo.asp, y el parámetro (3) SUB_ID en (d) subLevel2.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enthrallweb:ephotos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "4B8C5C95-665C-4D92-AA4E-22761C6390E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ephotos-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20609",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23525",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21742",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/5160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ephotos-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/5160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva 2.0.8a Build 237 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en stat_modules/users_age/module.php en Minerva v2.0.8a Build 237 y anteriores que permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minerva:minerva:2.0.8a_build_237:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA04302A-4FAB-49E6-BB2C-41F60B9A07FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20536",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000863.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000863.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en default.asp de ClickTech Clickcart 6.0 y anteriores permite a atacantes remotos inyectar web script arbitrario o HTML a través del parámetro cat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clicktech:clickcart:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A190DD-F722-421D-80B3-69B1ABCDAC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/clickcart-60-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/clickcart-60-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DwZone Shopping Cart 1.1.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ToCategory and (2) FromCategory parameters to (a) ProductDetailsForm.asp and (3) UserName and (4) Password parameters to (b) LogIn/VerifyUserLog.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dwzone:dwzone_shopping_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "EBDB224F-92F7-4C8F-8A59-9B21039B2762"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/dwzone-shopping-cart-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/dwzone-shopping-cart-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.asp in fipsCMS 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) w, (2) phcat, (3) dayid, and (4) calw parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades XSS en index.asp en fipsCMS v4.5 y anteriores permite a atacantes remotos inyectar secuencias de comandos web y HTML arbitrarias a través de los parámetros (1) w, (2) phcat, (3) dayid y (4) calw."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fipsasp:fipscms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "ACE65BDB-6A1C-4D52-B1B4-D07EBBAAAE63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/fipscms-v45-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20617",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/fipscms-v45-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 (trial), allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total parameters in (a) displaypic.asp, and the (3) catname parameter in (b) displaythumbs.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pensacola_web_designs:xtreme_asp_photo_gallery:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A157BE62-A5C4-405D-8BDF-C335FCD8C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pensacola_web_designs:xtreme_asp_photo_gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2B8AA8-FBD3-45D2-8132-C6BAD9C77BCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/xtreme-asp-photo-gallery-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20604",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/xtreme-asp-photo-gallery-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MyScrapbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input box in singlepage.php when submitting scrapbook pages."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad cross-site scripting (XSS) en MyScrapbook 3.1 permite a atacantes remotos inyectar scripts web o HTML de forma arbitraria a través de un input box en singlepage.php cuando se envían páginas scrapbook."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscrapbook:myscrapbook:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF90C1C2-0E1C-4386-B56E-0D7506C494B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20599",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436792/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18398",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436792/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyScrapbook 3.1 allows remote attackers to obtain sensitive information via a direct request to files in the txt-db-api directory such as txt-db-api/sql.php, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "MyScrapbook 3.1 permite a atacantes remotos obtener información sensible a través de peticiones directas a archivos en el directorio txt-db-api, tal como txt-db-api/sql.php, lo que revela el directorio en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscrapbook:myscrapbook:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF90C1C2-0E1C-4386-B56E-0D7506C494B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20599",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436792/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436792/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in addwords.php in MyScrapbook 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) comment parameters.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscrapbook:myscrapbook:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF90C1C2-0E1C-4386-B56E-0D7506C494B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/2311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) imgdir parameter in (a) index.php, and the (2) w, (3) h, and (4) t parameters in (b) popup.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades cross-site scripting (XSS) en 35mmslidegallery 6.0 permite a atacantes remotos inyectar script web o HTML de forma arbitraria a través (1) del parámetro imgdir en (a) index.php, y los parámetros (2) w, (3) h y (4) t en (b) popup.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andy_mack:35mmslidegallery:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B1FFCAC-5652-46BB-8617-AE5A336EA903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20652",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436959/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18414",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436959/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, (3) article, (4) bio, and (5) name parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades cross-site scripting (XSS) en publish.php en ST AdManager Lite permite a atacantes remotos inyectar scripts web o HTML de forma arbitraria a través de los parámetros (1) title, (2) description, (3) article, (4) bio, y (5) name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:site_trade:st_admanager_lite:v1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7135FA28-3EDF-42F2-9DC8-089B71410895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20598",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436657/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436657/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Room Rent allows remote attackers to inject arbitrary web script or HTML via the sel_menu parameter.  NOTE: the vendor notified CVE on 20060823 that \"All issues concerning this script and others at cescripts.com have been addressed and fixed.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad cross-site scripting (XSS) en index.php en Cescripts Realty Room Rent que permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro sel_menu. NOTA: El fabricante notifica en CVE 20060823 que \"Todos los problemas relacionado con este y otros en cescripts.com han sido tratados y corregidos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cescripts:realty_room_rent:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A245D-004D-48BF-BDBD-A8C9CB41CA0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20586",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000983.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436805",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444136/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000983.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444136/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Home Rent allows remote attackers to inject arbitrary web script or HTML via the sel_menu parameter.  NOTE: the vendor notified CVE on 20060823 that \"All issues concerning this script and others at cescripts.com have been addressed and fixed.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-site scripting (XSS) en index.php de Cescripts Realty Home Rent permite a atacantes remotos inyectar scripts web arbitrarios a través del parámetro sel_menu. NOTA: El fabricante  notifica en CVE 20060823 : \"Todos los problemas relacionado con este y otros en cescripts.com han sido tratados y corregidos\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cescripts:realty_home_rent:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C9BCF3-3B38-474E-8F0F-14E8ED81B185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20584",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000983.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436805",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444136/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000983.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444136/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter.  NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amr_talkbox:amr_talkbox:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CA767E-4914-424A-8DCC-E9B81BD6006A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436993/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437266/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436993/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437266/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Ltwcalendar/calendar.php in Codewalkers Ltwcalendar 4.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ltw_config[include_dir] parameter. NOTE: CVE disputes this claim, since the $ltw_config[include_dir] variable is defined as a static value in an include file before it is referenced in an include() statement"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codewalkers:ltwcalendar:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F14FBF-66CB-45C4-A516-08C91CF4B734"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000866.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436996/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000866.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436996/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-15T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) go_info[isp][classes_root] parameter in (a) server.inc.php, and the (2) go_info[server][classes_root] parameter in (b) app.inc.php, (c) login.php, and (d) trylogin.php.  NOTE: this issue has been disputed by the vendor, who states that the original researcher \"reviewed the installation tarball that is not identical with the resulting system after installtion.  The file, where the $go_info array is declared ... is created by the installer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "527BD26D-5EA0-4BE7-8443-5F519F8C86EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437117/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437415/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18441",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437117/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437415/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2909",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an (1) ACE, (2) RAR, or (3) ZIP archive, which is triggered when the user moves the mouse over the archive."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la extensión (zipinfo.dll) en PicoZip v4.01 permite a atacantes remotos ejecutar código de su elección mediante un nombre de archivo largo en un archivo (1) ACE, (2) RAR, o (3) ZIP, lo que se activa cuando el usuario mueve el puntero del ratón sobre el archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:picozip:picozip:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1232483B-6B8E-41F6-AFFA-BA62E70CC453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20481",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-42/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1104",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016308",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26447",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.picozip.com/changelog.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437103/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437450/100/100/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18425",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2330",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27096",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-42/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.picozip.com/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437103/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437450/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.cfm in CreaFrameXe (CFXe) CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the voltext_suche parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en search.cfm en CreaFrameXe (CFXe) CMS v2.0 y anteriores que permite a atacantes remotos inyectar código web o html de su elección a través del parámetro voltext_suche."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cfxe-cms:cfxe-cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "AF7A144A-3F79-401E-AD4D-CF8DD62E9199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0149.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls14.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0149.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls14.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in LogiSphere 1.6.0 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected in an error page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en LogiSphere v1.6.0 y anteriores que permite a atacantes remotos inyectar código web o html de su elección,lo que provoca la aparición de una página de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logisphere:logisphere:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1BCB44-0C09-4A69-8862-72634436BA6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20578",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26324",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in manage_songs.php in Foing 0.7.0e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the foing_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de fichero en manage_songs.php en Foing v0.7.0e que permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro foing_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teake_nutma:foing:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.0e",
            "matchCriteriaId" : "D8B122C5-DF22-4E57-A419-3F2BEE5510F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/436793/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436793/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la característica de acceso como administrador en Subtext v1.5, en una configuración multiblog, que permite a administradores remotos de un blog acceder a otro blog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:subtext:subtext:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4E3300-A38B-47F5-90A7-77BB0581F933"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=423716",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=423716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en TikiWiki v1.9.3.2 y versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores de ataque desconocidos"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3.1",
            "matchCriteriaId" : "49A0C8D7-1F01-45BB-A752-09B668B265D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13501C0-3322-4D0C-8F7F-12535C76CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE04A29-E90B-41E1-A8B4-462B54C079B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2540703B-63B8-41F4-A17A-0274A7DE7E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1489E8DC-11E7-49A3-84FF-909954147D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035EEFAB-B46C-407F-BF8C-B33756D4EEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127349FA-B76D-402A-B688-F2F44024FA11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20648",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20850",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=64258&release_id=423840",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-29.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437017/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=64258&release_id=423840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-29.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437017/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en TikiWiki v1.9.3.2 y posiblemente en versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3.1",
            "matchCriteriaId" : "49A0C8D7-1F01-45BB-A752-09B668B265D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13501C0-3322-4D0C-8F7F-12535C76CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE04A29-E90B-41E1-A8B4-462B54C079B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2540703B-63B8-41F4-A17A-0274A7DE7E63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1489E8DC-11E7-49A3-84FF-909954147D01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035EEFAB-B46C-407F-BF8C-B33756D4EEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127349FA-B76D-402A-B688-F2F44024FA11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-29.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437017/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-29.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437017/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) address1, (3) address2, (4) county, (5) postcode, (6) email, (7) phone, or (8) mobile parameters to booking2.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en booking3.php en Mole Group Ticket Booking Script permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de parámetros (1) name, (2) address1, (3) address2, (4) county, (5) postcode, (6) email, (7) phone, o (8) mobil en booking2.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mole_group_ticket_booking_script:mole_group_ticket_booking_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C262A1BE-0D12-43FB-BFF4-56E5B9AD438A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0111.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000868.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0111.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000868.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a ..  (dot dot) sequence and trailing null (%00) byte in the template parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en detail.php en SixCMS v6.0, y otras versiones anteriores a v6.0.6patch2, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) y el byte de arrastre nulo (%00) en el parámetro template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_offene_systeme_gmbh:sixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "8F5D75BB-F73C-45BC-BD75-868DB1AE1D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls17.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437047/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437639/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls17.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437047/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437639/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de comandos en sitios cruzados (Cross-site scripting (XSS)) en list.php en SixCMS v6.0 y versiones anteriores a v6.0.6patch2, permite a atacantes remotos inyectar código script o HTML a través del parámetro de la página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_offene_systeme_gmbh:sixcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "8F5D75BB-F73C-45BC-BD75-868DB1AE1D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20655",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls17.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437047/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437639/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18393",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls17.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437047/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437639/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enanbled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the (1) event_id parameter to view-event-details.php or (2) select_events parameter to event-registration.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de comandos en sitios cruzados (Cross-site scripting (XSS)) en el Registro de Eventos (Event Registration) que permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) event_id para ver-evento-details.php o (2) el parámetro select_events para evento-registration.php. NOTA: la procedencia de esta información es desconocida, los detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cescripts:event_registration_2checkout:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B5C80B-A01C-4751-BE63-2E0E6E03C408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cescripts:event_registration_corporate:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490F2820-AD52-4455-B0D9-ACC0AE3EC991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cescripts:event_registration_paypal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775FB1E4-5935-4A6C-B8D6-9639DF315E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cescripts:event_registration_rsvp:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA96B86-D2D8-402D-87F0-B7FCA0F58059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20640",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter.  NOTE: this issue has been disputed by the vendor, who states \"common.php is checked on the very first line of non-comment code that it is not being called directly. It has been this way in all 5.x version of Phorum.\"  CVE analysis concurs with the vendor"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** PHP vulnerabilidad de inclusión de archivo remoto en common.php en Phorum v5.1.13 y anteriores permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro Phorum [http_path]. NOTA: este problema ha sido discutido por el vendedor, quien afirma que \"common.php se comprueba en la primera línea de código no comment-que no se está llamando directamente Ha sido así en todas las versiones 5.x de Phorum.\" CVE análisis coincide con el vendedor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.13",
            "matchCriteriaId" : "F19AEEA5-7EF8-4D53-828D-A123F310987E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D7E47E-10F5-4F50-8940-951B2C0011CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16042FAE-7370-425C-8810-4F9363B7CAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A25A6F-62CA-4C76-9D4C-821B1E15FB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6247DB0C-37B6-44EF-8B92-8CFCDA537039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C46298C-2492-4102-A264-E2A1D45AD423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2AD59F-42DF-407A-8FCA-E6E0067A2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E1044B-2101-4719-8749-17DD22F46055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E17261-A010-4929-99E5-A2511F205B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A461E2EB-9964-44DE-9C25-562D239201F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB6A4EC-D351-4EF8-8C6A-294A47DDCCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B10230A-7D72-418E-8A29-E9F20762C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368C8142-836A-4FDB-9CD8-385FE06B9A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1470761E-DA6E-4D2A-B226-1ED782FB3654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB3ED23-821D-42FA-A24F-F2EDDA43D7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BA8736-5998-42E0-81E4-76E3669F8112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9811C9-EE92-4115-B81F-7A3030390BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A196AD2-7E48-40F4-923E-437FA76C97D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D147F0-FF83-4FF4-AEF1-71366E874876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D87C46-D9EC-418B-9C8C-71E7149C72D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F6BE0A-7E2F-457D-B4BA-6BAE1B44E7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C990B390-4768-41B0-BB8B-A56C2524623F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6650BE9D-5F4B-4B22-BD7E-ABCC067D5455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E0CA9-F6D4-4DD3-A3EA-F3A40965261B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F67B233-3087-43E6-94F2-5DF39FAA36B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7725AEF3-1C47-46B4-A35E-97152A84E731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F6C52C-F602-4C2A-8C8F-4A19DA41186F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F290E5-6508-4F62-8572-31B33750D341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D941B5F-B704-4596-8739-BFE34225DBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF13359B-162A-41DF-BB4F-DDD6CA2752F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1AE057-A85C-49D9-981A-3314BD945D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC1F375-34EF-4FEC-B0F4-6A081B6A3B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A31EA2D-2B01-4928-9B3E-9D666FD2758B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CFDB0B-6FBD-49F3-8238-81E92661297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1655572D-7D56-4D9D-9E0F-A67DF23FC934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387E0B83-B240-4922-8C57-CE0CDB000888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02321D7-2F3E-40F9-9A76-CFF339C93199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B908D49-F64A-488F-95F3-163AB9DAB02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF0655C-7C83-4363-A444-993B35D7A7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F8F544-1B09-4B22-B1F3-2CD1E8D7AECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACC6DD4-384B-44DE-9BC7-6F1DD374E6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.17a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D184385A-763A-4971-8051-20564D020787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B508F8-CFCC-4841-BF70-1ABB28EB1ABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437988/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16977",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437988/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in VBZooM 1.11 allow remote attackers to execute arbitrary SQL commands via the (1) sobjectID or (2) MAINID parameters to (a) show.php or (3) MainID parameter to (b) subject.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en VBZooM 1.11 permite a atacantes remotos ejecutar comandos SQL a través de los sobjectID (1) o (2) los parámetros MAINID a (a) show.php o (3) los parámetros MainID a (b) subject.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC56F3-CA23-4875-99E7-8317617DA419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/436938/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436940/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18403",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436940/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in VBZooM 1.02 allow remote attackers to execute arbitrary SQL commands via the (1) QuranID, (2) ShowByQuranID, or (3) Action parameters to meaning.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en VBZooM 1.02 permite a atacantes remotos ejecutar comandos SQL a través de la QuranID (1), ShowByQuranID (2), o (3) los parámetros de acción a meaning.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FAD15E-D275-44F0-AFE3-B2F10733436A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/436939/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18403",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436939/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in language.php in VBZooM 1.01 allows remote attackers to execute arbitrary SQL commands via the Action parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en language.php en VBZooM 1.01 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro Action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFA7E32-74EA-49A0-BD4A-C506BFE42CBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/436946/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18403",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436946/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-16T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in NetworkManager daemon for DHCP (dhcdbd) allows remote attackers to cause a denial of service (crash) via certain invalid DHCP responses that trigger memory corruption."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en NetworkManager demonio para DHCP (dhcdbd) permite a atacantes remotos provocar una denegación de servicio (caída) a través de ciertas respuestas no válidas DHCP que daños en la memoria de disparo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:dhcdbd:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8194605D-44C7-4975-9DD9-809D2538C6F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:dhcdbd:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC588DEC-2859-4719-AE5A-0A2C63D210D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/299-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/299-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-17T13:18:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors.  NOTE: this is a different vulnerability than CVE-2006-3086."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Excel v2000 hasta la v2004 que permite a usuarios atacantes ejecutar código de su elección a través de vectores desconocidos. NOTA: esta es una vulnerabilidad diferente de CVE-2006-3086."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.securiteam.com/?p=451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/06/16/436174.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/802324",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437636/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437936/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-167A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2361",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.securiteam.com/?p=451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/06/16/436174.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/802324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437636/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-167A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via the (1) login parameter in (a) client/stats.php and (b) admin/stats.php, or the (2) pass parameter in client/stats.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en phpBannerExchange antes de v2.0 Update 6 permite a atacantes remotos ejecutar comandos SQL a través del parámetro (1) login en (a) client/stats.php y (b) admin/stats.php, o (2) el parámetro pass en client/stats.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BC70C5-F71C-4A3D-9ADC-A05F07F17E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6A8825-0E98-437B-9624-C9F659176A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D97DE9-F264-46C1-A5F6-A2BDC24518D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E28E1-0BDD-40C3-82C1-0B00EC2077DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF685B7-8CBA-487E-8A56-113C898ECD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27292330-05A4-4ACA-AF99-2DBDA0D58A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046954.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-004.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437290/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18448",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046954.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437290/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict in resetpw.php in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via an email parameter containing a null (%00) character after a valid e-mail address, which passes the validation check in the eregi PHP command.  NOTE: it could be argued that this vulnerability is due to a bug in the eregi PHP command and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in phpBannerExchange."
      }, {
        "lang" : "es",
        "value" : "Conflictos de interpretación en resetpw.php en phpBannerExchange antes de v2.0 Update 6 permite a atacantes remotos ejecutar comandos SQL a través de un parámetro de correo electrónico que contiene caracteres de valor nulo (%00) después de un e-mail válido. Esto pasa a la comprobación de validación en el comando PHP eregi . NOTA: se puede argumentar que esta vulnerabilidad se debe a un error en el comando eregi PHP y la solución correcta debe estar en PHP, si es así, entonces esto no debe ser entendido como una vulnerabilidad en phpBannerExchange."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BC70C5-F71C-4A3D-9ADC-A05F07F17E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6A8825-0E98-437B-9624-C9F659176A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D97DE9-F264-46C1-A5F6-A2BDC24518D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E28E1-0BDD-40C3-82C1-0B00EC2077DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF685B7-8CBA-487E-8A56-113C898ECD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27292330-05A4-4ACA-AF99-2DBDA0D58A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046953.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20687",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437294/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18448",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046953.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437294/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) read parameter in index.php, (2) farea parameter in faq.php, and (3) unspecified input fields on the \"My Account\" login page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en P.A.I.D v2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través (1) parámetro \"read\" en index.php, (2) parámetro \"farea\" en faq.php, y (3) campos de entrada no especificados la página de acceso \"My account\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webexceluk:p.a.i.d:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5FD2DF-7DF1-41B5-AF8A-91C573B5429E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436650/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436650/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php, (2) item_id parameter in report.php, (3) search_term parameter (aka the \"search box\") in search_reviews.php, (4) the profile field in usercp/profile_edit1.php, and the (5) review field in review_form.php."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en 5 Star Review permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) el parámetro sort en index2.php, (2) el parámetro item_id en report.php, (3) el parámetro SEARCH_TERM (que se trata del \"cuadro de búsqueda\") en search_reviews.php, (4) el campo perfil (profile) en usercp/profile_edit1.php, y (5) el campo revision (review) en review_form.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:review-script.com:five_star_review_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB82437A-9375-46ED-BA6C-47FF33AE26BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20613",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436771/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18390",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2346",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436771/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in myPHP Guestbook 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en index.php en myPHP Guestbook v2.0.4 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro 'lang'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5921BB-BDE4-4B3C-892D-81E81EAE47D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20572",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436842/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436842/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) email, (3) homepage, (4) id, (5) name, and (6) text parameters in (a) index.php, the (7) comment, (8) email, (9) homepage, (10) number, (11) name, and (12) text parameters in (b) admin/guestbook.php, and the (13) email, (14) homepage, (15) icq, (16) name, and (17) text parameters in (c) admin/edit.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de comandos en sitios cruzaods (XSS) en myPHP Guestbook v1.x hasta la v2.0.0-r1 y antes de v2.0.1 RC5 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) comment, (2) email, (3) homepage, (4) id, (5) name y (6) text in (a) index.php. También los parámetros (7) comment, (8) email, (9) homepage, (10) number, (11) name and (12) text en (b) admin/guestbook.php, y por último los parámetros (13) email, (14) homepage, (15) icq, (16) name y (17) text en edit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB92A38-41B3-4E8E-9396-340A4E9D01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47132A18-64DD-4DA3-9130-71E1BF689F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE54EDCB-FDDD-4E4C-8AE4-2E2F2BA0B7F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E105BB6B-DFF8-40FF-8DE7-830908841263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5951406C-4460-42D2-B0AF-3BC5F0FD2738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8419132F-D109-446C-AD91-8694888A699C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.0-r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D94A4B-8475-4BAA-8434-4B857E4CB188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97EE480B-D147-4C8B-AE90-70E6D9E166C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1537F6-92E9-413F-89E0-EE5011DBBE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ADDFDFC-7AB4-4A7F-B75F-412A4165A5D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3D6891-BF1F-4080-81E3-A5A75B54C16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424B22E0-C10D-4413-9638-1C5F89F99902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DB7E63-09E1-4BF6-A826-F1072BD2D7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324788C8-73BB-40FC-901D-C5DDA98541FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "094BDBC2-4BBE-491C-8311-952508C41AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "181549D7-1F12-4483-AD6C-35DCC52EF22D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843ADF77-4300-44B0-8490-FB4B6C1FBAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_guestbook:myphp_guestbook:2.0.1_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB4501F-3C6E-4D56-B7A3-88D637137F1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.networkarea.ch/forum/topic.php?id=4&s=9106beea248ecd1a552439168ada227e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networkarea.ch/forum/topic.php?id=4&s=9106beea248ecd1a552439168ada227e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when \"Keep detailed hit statistics\" is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) referer and (2) user-agent HTTP headers."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función include/function.inc.php en Coppermine Photo Gallery (CPG) v1.4.8, cuando \"Keep detailed hit statistics\" está activada, permite a atacantes remotos ejecutar comandos SQL a través de la (1) referer y (2) agentes de usuario los encabezados HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492C36B4-FB91-4B29-A3B6-0BFF3EF01A87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-06-11/copperminephotogallery148-addhit-function-sqlinjection-attack.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20597",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436799/30/4470/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2317",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://myimei.com/security/2006-06-11/copperminephotogallery148-addhit-function-sqlinjection-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436799/30/4470/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a proc_reply action in the blog shard.  NOTE: This is a similar vulnerability to CVE-2006-1763, but the affected code and versions are different."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en engine/shards/blog.php en blur6ex v0.3.462 permite a atacantes remotos ejecutar comandos SQL a través del parámetro de identificación en una acción proc_reply en el fragmento blog. NOTA: Se trata de una vulnerabilidad similar a CVE-2006-1763, pero el código afectado y las versiones son diferentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blursoft:blur6ex:0.3.462:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51672C5-2998-455C-829E-D3F103569188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437015/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437015/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la escucha de TCP / IP en IBM DB2 Universal Database (UDB), anterior a v8.1 FixPak 12 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un mensaje MGRLVLLS mucho tiempo dentro de un mensaje de EXCSAT al establecer una conexión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.10",
            "matchCriteriaId" : "CBD7CE2D-AC20-47D6-9832-8BAFBC22EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "6F180189-FA62-453A-B6F8-134FE12805EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFE3DF2-216B-4E71-99BA-7955E44D853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CFC92D-19AC-4515-A4F0-3744C335D975"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDA3DD-24B4-4D91-969E-2E779A7EB1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E8AF18-6E6D-4923-9303-A082D4D47B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D309A217-6A82-4B5C-9C5B-ABD6E27457EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79242DD-F95B-4038-B6D9-4ABBE3F51836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302D906F-312A-4042-976D-6998178102E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280064D8-0605-488F-AC2D-C2D238F3A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA1AE7F-2417-43FD-9CFC-B17D6D4C6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8F7EC6-B67C-470F-8EC3-BC3C72A7989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20579",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY84096",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445297/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18428",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY84096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445297/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nIBM, DB2 Universal Database, 8.12"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) \"long column list\" in the (a) REPLACE INTO and (b) INSERT INTO portions of the LOAD command or a (2) large number of values in an IN clause, possibly related to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en IBM DB2 Universal Database (UDB), anterior a v8.1 FixPak 12 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de un (1) \"lista larga columna\" en el REPLACE (a) e INSERT INTO (b) en porciones del comando de carga o un número (2) gran cantidad de valores en una cláusula IN, posiblemente relacionado con un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:*:*:fp11:*:*:*:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "0BA96128-8431-4A06-944E-5DE3B35F6DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.0:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "047ACB09-E3E2-426D-8C9E-D3EF1955FC1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:fp10:*:*:*:*:*",
            "matchCriteriaId" : "F26F3B4E-088A-462B-8185-06B4F688B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:fp8:*:*:*:*:*",
            "matchCriteriaId" : "86B9DD77-324F-40AC-9107-793DDD86C974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20579",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY76767",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY82725",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY76767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY82725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending \"incorrect information ... regarding the package name/creator,\" which leads to a \"memory overwrite.\""
      }, {
        "lang" : "es",
        "value" : "IBM DB2 Universal Database (UDB), anterior a v8.2 FixPak 12 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) mediante el envío de \"información incorrecta ... sobre el nombre del paquete / creador\", que conduce a una \"memoria sobrescribir\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3DC757E1-EC37-48C5-BE72-53184624ACDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20579",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in DoubleSpeak 0.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the config[private] parameter in multiple files, as demonstrated by (1) index.php, (2) faq.php, and (3) hardware.php. NOTE: this issue has been disputed by multiple third-party researchers, who state that config[private] is initialized in an include file before being used"
      }, {
        "lang" : "es",
        "value" : "** CONTROVERTIDO **  Una vulnerabilidad de inclusión de archivo PHP remoto en DoubleSpeak 0.1, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP a través de la configuración de parámetros [privado] en varios archivos, como lo demuestra (1) index.php, (2) faq.php, y (3) hardware.php. NOTA: este problema ha sido disputado por varios investigadores de terceros, que afirman que config [privada] se inicializa en un archivo de inclusión antes de ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iglooweb:doublespeak:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CAE1D6A-66AC-4407-9DE0-092576E6C82B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0184.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-July/000935.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016278",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/igloo/doublespeak.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18401",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0184.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-July/000935.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/igloo/doublespeak.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe extensions, as demonstrated by assigning the txt extension to be handled by application/x-httpd-php."
      }, {
        "lang" : "es",
        "value" : "write_ok.php en Zeroboard 4,1 pl8, cuando se instala en Apache con mod_mime, permite a atacantes remotos eludir las restricciones para la carga de archivos con extensiones ejecutables mediante la subida de un archivo. htaccess que con una directiva AddType que asigna un módulo ejecutable a los archivos con extensiones assumed-safe, como se demuestra mediante la asignación de la extensión txt a ser manipulados por application / x-httpd-php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroboard:zeroboard:4.1_pl8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CF972A-66EF-4605-B637-DF1DCE9B13A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115044567831726&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20592",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securecast.wins21.com/zerovul.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437442/30/4320/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115044567831726&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securecast.wins21.com/zerovul.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437442/30/4320/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter, as used by the \"search box\", and (2) res parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en index.php en MP3 Search/Archive v1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetro (1) keywords, tal y como se usa en el \"cuadro de búsqueda\", y (2) el parámetro res."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anton_belev:mp3_search_archive:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E74B3C-FBFF-4C7D-A8A7-3B6FD8CA92CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20664",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437283/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437283/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted \"rule definitions\", which produces dangerous Java code during M4 transformation."
      }, {
        "lang" : "es",
        "value" : "Librería M4 Macro de Symantec Security Information Manager anteriores a 4.0.2.29 HOTFIX 1 permiste a usuarios locales ejecutar comandos arbitrarios a través de \"reglas de definición\" modificadas, lo que produce código Java peligroso durante la transformación M4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C16F58-1721-4B17-AA1F-02E20980820C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD93DCC8-8AAC-4B61-B3D5-9375C9C06D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D7CE75-747E-4384-B000-40F068CE2A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AAD9B35-AAF0-4E4E-97BF-62CC91807A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CA0863-4D5E-4EF7-86E3-6025691C6051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEA684D-2D2E-4A23-AC35-21838198773F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0BBD60A-5EC7-4F0A-A8B4-D284FE42FB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B13AB5D-20DD-416D-8364-F6F30E254A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEC51C7-A00E-4E19-AFC5-0FAEDB1BA565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268026EA-1460-47B7-B2E6-9957CED871CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14E6CAB-3B7F-4D53-A8C2-C321405C9AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A081EF8-2315-4628-B7C4-F2E03E9D9213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E43189F8-A352-431F-BAB5-A565DC4EA554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F59F3EB-14BE-4D10-80F0-775769C6F980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F11D5E-D201-469C-B738-C18D65B8A4ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FBA84C-1ABD-46B3-96D0-042304EC9213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3709D0-0070-414F-B66D-C52DDD9F0650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270A46FF-2DA2-4B69-9075-9A3CBA22267E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CF7EAA1-36E3-43A2-AE88-8BCA5D876645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93EA02A-4C0E-49CD-BB26-9333489D4F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2BF1AC-97EE-4D7F-913F-5B8A8F2C0B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89581951-8161-45A4-AC9D-236B40E17566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9DA0EE-0019-47AB-9583-4C1894E5618D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E512464F-2A97-4B0C-B3C7-F3E131820855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD7ECCE-9588-4251-B927-51BB9C282AB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A8217A-43B3-4268-A9C8-E3BB787B5227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FB0A6A-A3CF-4150-AC8B-E6BA86387312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0253C96B-D94F-4CEB-8E5B-11BBF05E528E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19680827-92F6-4BE2-8F14-E0A0D24A9F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_information_manager:4.0.2.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08174AC-0BFE-42E6-8DA6-E5016216553A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20647",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.06.13b.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016296",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.06.13b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) dnserror.html and (2) connecterror.html, aka bugid CSCsd81095 (VPN3k) and CSCse48193 (ASA). NOTE: the vendor states that \"WebVPN full-network-access mode\" is not affected, despite the claims by the original researcher."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en WebVPN en la serie Cisco VPN 3000 y concentradores Cisco ASA 5500 Series Adaptive Security Appliances (ASA), cuando se encuentra en el modo de WebVPN sin cliente, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro domain en (1) dnserror.html y (2) connecterror.html, también conocido como bugid CSCsd81095 (VPN3k) y CSCse48193 (ASA). NOTA: El fabricante indica que \"WebVPN full-network-access mode\" no se ve afectada, a pesar de las alegaciones formuladas por el investigador original."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891B8FA4-B602-42C5-A94F-8C60BBF7A7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:asa_5500:7.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "083B3C00-AE54-48D7-A11B-E5BFE5607CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:asa_5500:7.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635851C6-E383-415A-9123-270E205E0762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923949D1-06EC-462F-A3BC-FCAB448042A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901B1838-7169-41E5-80EF-29BB680BF937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAEAA5F-0A98-48B7-8012-9B9909243135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB38834B-E4AB-43F4-888B-14B088C95594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F8059B-3968-4D63-B1B3-74E545C918D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701CDA0D-F932-4251-B484-8F20F0AE9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E674AA43-905E-40E0-A70F-77D05C62C18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AB682-2965-4C8D-B323-AB510E424407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F7F019-A0A4-49CD-BB28-24BF7725AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175CD875-3402-4B06-A3FA-7DFFCBB44056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C544E523-15E5-4CE5-8113-53454F5D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09F6EBD-C3FC-4680-BE31-A766D863237D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B68705AB-A133-401F-9F41-64594E071816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9092680-E154-4EAB-A2D5-B692073F894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF5F3FA-5FA4-408E-BA62-3943C5DFD859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC9764-5BF5-449F-9200-5569C13F8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80709CB0-D386-4C4F-B3EE-7A0501FD7248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36291ADE-3D5A-4E49-8BA7-B71CAAA226B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D953DA9F-B54E-4941-85BE-48933C98DB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E298AD-26AC-4E1D-83D8-5C2016CC6559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DAF71-5763-44D8-AD1E-5ADE8BC15120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35B6FA9-E504-4CE3-B171-815291A812CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA54782-93A8-47BE-863D-89CA3678BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F66A10-246D-447B-941F-F1175684F0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82435757-D892-4298-9176-5EC1FEC93037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03F5D3F-6FB1-4A25-B544-D3C973F35DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A90348C-94E2-4F04-A887-E7EFFC1ACF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5E136E-9215-46A8-A40A-AE964C588A38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016252",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060613-webvpn-xss.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436479/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060613-webvpn-xss.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436479/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess."
      }, {
        "lang" : "es",
        "value" : "klif.sys en Kaspersky Internet Security v6.0 y v7.0, Kaspersky Anti-Virus (KAV) v6.0 y v7.0, KAV v6.0 para Windows Workstations, y KAV v6.0 para Windows Servers no validan de forma adecuada ciertos parámetros de llamadas al sistema \"enganchadas\" sobre (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, y (12) NtQueryValueKey, lo que permite a usuarios locales provocar una denegación de servicio (reinicio) a través de un parámetro inválido, como se demostró con el parámetro  ClientId sobre NtOpenProcess."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_anti-virus:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8015458-2645-482D-A0D3-B08B73655E06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85D0F7D-B2F5-49D2-9CA8-1B02A4A72872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_internet_security:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "016D3A82-25B8-433E-B159-DC8EBBF68733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_internet_security:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF832371-8A92-4FF6-BB6E-AECB2E5CE7E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:kaspersky_anti-virus:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8015458-2645-482D-A0D3-B08B73655E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA0CCC0-F2BE-4AF8-844E-CEA1B276792D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20629",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://uninformed.org/index.cgi?v=4&a=4&p=4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://uninformed.org/index.cgi?v=4&a=4&p=7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kaspersky.com/technews?id=203038695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rootkit.com/newsread.php?newsid=726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471453/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/24491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1018257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2333",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2145",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://uninformed.org/index.cgi?v=4&a=4&p=4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://uninformed.org/index.cgi?v=4&a=4&p=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kaspersky.com/technews?id=203038695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rootkit.com/newsread.php?newsid=726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471453/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/24491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1018257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PictureDis Professional 1.33 Build 234 and earlier and PictureDis Photoalbum 4.82 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to files in photoalbum/ including (1) thumstbl.php, (2) wpfiles.php, and (3) wallpapr.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en PictureDis Professional v1.33 Build 234 y anteriores y PictureDis Photoalbum v4.82 y anteriores, permiten a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro \"lang\" sobre ficheros en photoalbum/ incluyendo (1) thumstbl.php, (2) wpfiles.php, y (3) wallpapr.php..\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:picturedis:picturedis_photoalbum:4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9362F3F9-9B99-4C84-9C0A-13F43820DA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:picturedis:picturedis_professional:1.33_build_234:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308568C1-6EB8-49A7-92B8-A06F1AF5EC56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20656",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437449/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437449/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in software_upload/public_includes/pub_templates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en software_upload/public_includes/pub_templates/vphptree/template.php en PhpBlueDragon CMS v2.9.1, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro vsDragonRootPath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbluedragon:phpbluedragon_cms:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C219-B075-42B5-9910-1B1998B40C01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437130/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18440",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437130/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestbook.cfm in aXentGuestbook 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en guestbook.cfm en aXentGuestbook v1.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro startrow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axent:axentguestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "FB2DA0C7-74F0-4DB6-8874-4D15741DABF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/axentguestbook-ii-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/axentguestbook-ii-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) PHPSESSID parameter in board.php and (2) viewcatmod parameter in main.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en APBoard v2.2 r3 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del parámetro (1) PHPSESSID en board.php y (2) el parámetro viewcatmod en main.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apboard:apboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2_r3",
            "matchCriteriaId" : "E8C7718D-77E1-4685-93FF-F541A39E427D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20682",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437271/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437271/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cfm in SSPwiz Plus 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en index.cfm en SSPwiz Plus v1.0.7 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro mensaje (message)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sspwiz:sspwiz_plus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "42BED3DD-4730-43E0-BE91-511F49C08B42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/sspwiz-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20698",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/sspwiz-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in viewposts.cfm in aXentForum II and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en viewposts.cfm en aXentForum II y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro startrow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axent:axentforum:i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60AD1270-DCD5-4FCF-91DA-10E4642ECA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axent:axentforum:ii:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A69820F-884A-44D9-9BD4-73C70C07CEC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/axentforum-ii-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437403/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438062/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/axentforum-ii-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437403/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438062/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function."
      }, {
        "lang" : "es",
        "value" : "mysqld en MySQL v4.1.x antes de v4.1.18, v5.0.x antes de v5.0.19, y v5.1.x antes de v5.1.6 permite causar una denegación de servicio (caída del demonio) a usuarios remotos autorizados a través de un segundo argumento nulo para la función STR_TO_DATE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BED939-3366-4CBF-B6BF-29C0C42E97F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=15828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2006/Jun/0434.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19929",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20832",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20871",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437571/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/306-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=15828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2006/Jun/0434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437571/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/306-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option."
      }, {
        "lang" : "es",
        "value" : "parse-packet.c en GnuPG (gpg) v1.4.3, v1.9.20 y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (caída de gpg) y posiblemente sobrescribir la memoria a través de un paquete de mensajes de gran longitud (con un ID de usuario demasiado largo), lo cual podría llevar a un desbordamiento de enteros, tal y como se demuestra con la opción '-no-armor'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.20",
            "matchCriteriaId" : "BAF3B20C-DC28-43C9-BA6A-1909532CC96C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:gnupg:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6399A22D-90DF-4CB5-9367-0C5242BD1A2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2006/May/0774.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2006/May/0782.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2006/May/0789.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20801",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20811",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20829",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20881",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20968",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21063",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21585",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.457382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-167.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_18_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0571.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438751/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18554",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2450",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/304-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2006/May/0774.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2006/May/0782.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/lists/fulldisclosure/2006/May/0789.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.457382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-167.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_18_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0571.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438751/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/304-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long link in Unicode, aka \"Hyperlink COM Object Buffer Overflow Vulnerability.\" NOTE: this is a different issue than CVE-2006-3059."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer basado en pila en la función HrShellOpenWithMonikerDisplayName en la Biblioteca de objetos de Hipervínuclo de Microsoft (hlink.dll) permite a atacantes remotos causar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar código de su elección a través de un hipervínculo demasiado largo, tal y como se demuestra con una hoja de cálculo Excel con un enlace en Unicode demasiado largo. Se trata de un problema también conocido como \"vulnerabilidad de desbordamiento de búfer del objeto hipervínculo COM.\" NOTA: se trata de un problema diferente al del CVE-2006-3059."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:hyperlink_object_library:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8470B2-118A-4A5E-94CA-636BFA8A75F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/06/20/437826.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115067840426070&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016339",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/394444",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438057/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438093/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438156/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438373/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442724/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18500",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/06/20/437826.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115067840426070&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/394444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438057/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438093/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438156/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438373/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442724/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in EZGallery 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pUserID, (2) aid, (3) aname, (4) uid, and (5) m parameter in (a) common/galleries.asp; (6) aid, (7) aname, (8) uid, (9) m, (10) gp, and (11) g parameter in (b) common/pupload.asp; and (12) msg, (13) fn and (14) gp parameter in (c) common/upload.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en EZGallery v1.5 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) pUserID, (2) aid, (3) aname, (4) uid, and (5) m parameter in (a) common/galleries.asp; (6) aid, (7) aname, (8) uid, (9) m, (10) gp, and (11) g parameter in (b) common/pupload.asp; and (12) msg, (13) fn and (14) gp parameter in (c) common/upload.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezgallery:ezgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "917039C7-7C80-43B6-BAD8-ECD8B28FF00C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ezgallery-v15-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2298",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ezgallery-v15-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the make_id parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de comandos en sitios cruzados(XSS) en index.php en Car Classifieds permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro make_id. NOTA: la procedencia de esta información es desconocida, los detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cescripts:car_classifieds:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F0E5F8-82B7-49F4-9D16-D75D75246DE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFactures 1.0, and possibly 1.2 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) prefixe_dossier parameter in (a) /inc/header.php; (2) msg parameter in (b) /remises/ajouter_remise.php, (c) /tva/ajouter_tva.php, (d) /stocks/ajouter.php, (e) /pays/ajouter_pays.php, (f) /produits/ajouter_cat.php, (g) /produits/ajouter_produit.php and (h) /produits/modifier_cat.php; (3) tire parameter in /remises/ajouter_remise.php; (4) quantite, (5) taux and (6) date parameter in /stocks/ajouter.php; and (7) pays and (8) prefixe parameter in /pays/ajouter_pays.php."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en PhpMyFactures v1.0, y posiblemente v1.2 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) prefixe_dossier sobre (a) /inc/header.php; (2) msg sobre (b) /remises/ajouter_remise.php, (c) /tva/ajouter_tva.php, (d) /stocks/ajouter.php, (e) /pays/ajouter_pays.php, (f) /produits/ajouter_cat.php, (g) /produits/ajouter_produit.php y (h) /produits/modifier_cat.php; (3) tire parameter sobre /remises/ajouter_remise.php; (4) quantite, (5) taux y (6) date parameter sobre /stocks/ajouter.php; y (7) pays y (8) prefixe sobre /pays/ajouter_pays.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfactures:phpmyfactures:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "CA2ECFEC-07D0-47A2-8181-60F6A28F9D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfactures:phpmyfactures:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B85248-B9C6-4C0D-BB7B-0453C24B3F0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20642",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/phpmyfactures.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437025/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/phpmyfactures.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437025/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PhpMyFactures 1.0, and possibly 1.2 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id_pays parameter in (a) /pays/modifier_pays.php; (2) id_produit, (3) quantite, (4) prix_ht, and (5) date parameter in (b) /stocks/ajouter.php; (6) id_cat parameter in (c) /produits/modifier_cat.php; (7) id_client parameter in (d) /clients/modifier_client.php; (8) id_remise parameter in (e) /remises/index.php; (9) id_taux parameter in (f) /tva/index.php; (10) ref_produit, and (11) id_stock parameter in (g) /stocks/index.php; (12) id_pays parameter in (h) /pays/index.php; and (13) id_cat parameter in (i) /produits/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PhpMyFactures v1.0, y posiblemente v1.2 y anteriores, con discapacidad magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL a través del parámetro (1) id_pays en (a) / paga / modifier_pays.php, (2) id_produit, (3) quantité, (4) prix_ht, y (5) parámetro de fecha en (b) / acciones / ajouter.php; (6) id_cat parámetro en (c) / produits / modifier_cat.php; (7) en el parámetro id_client (d ) / clientes / modifier_client.php; (8) id_remise parámetro en (e) / remises / index.php, (9) en el parámetro id_taux (f) / TVA / index.php, (10) ref_produit y id_stock (11) parámetro (g) / acciones / index.php, (12) id_pays parámetro (h) / paga / index.php, y (13) id_cat parámetro en (i) / produits / index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfactures:phpmyfactures:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "CA2ECFEC-07D0-47A2-8181-60F6A28F9D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfactures:phpmyfactures:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B85248-B9C6-4C0D-BB7B-0453C24B3F0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20642",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/phpmyfactures.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437025/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/phpmyfactures.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437025/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PhpMyFactures 1.0, and possibly 1.2 and earlier, allows remote attackers to obtain the installation path via a direct request to (1) /verif.php, (2) /inc/footer.php, and (3) /remises/ajouter_remise.php."
      }, {
        "lang" : "es",
        "value" : "PhpMyFactures v1.0, y posiblemente v1.2 y anteriores, permite a atacantes remotos obtener la ruta de instalación a través de una petición directa a (1) / verif.php, (2) / inc / footer.php, y (3) / remises / ajouter_remise.php ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfactures:phpmyfactures:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "CA2ECFEC-07D0-47A2-8181-60F6A28F9D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfactures:phpmyfactures:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B85248-B9C6-4C0D-BB7B-0453C24B3F0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/phpmyfactures.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437025/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/phpmyfactures.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437025/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PhpMyFactures 1.2 and earlier allows remote attackers to bypass authentication and modify data via direct requests with modified parameters to (1) /tva/ajouter_tva.php, (2) /remises/ajouter_remise.php, (3) /pays/ajouter_pays.php, (4) /pays/modifier_pays.php, (5) /produits/ajouter_cat.php, (6) /produits/ajouter_produit.php, (7) /clients/ajouter_client.php, (8) /clients/modifier_client.php.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "PhpMyFactures v1.2 y anteriores permite a atacantes remotos evitar la autenticación y modificar los datos a través de solicitudes directas con parámetros modificados para (1) / TVA / ajouter_tva.php, (2) / remises / ajouter_remise.php, (3) / paga / ajouter_pays.php, (4) / paga / modifier_pays.php, (5) / produits / ajouter_cat.php, (6) / produits / ajouter_produit.php, (7) / clientes / ajouter_client.php, (8) / clientes / modifier_client.php. NOTA: la procedencia de esta información es desconocida; partes de los detalles han sido obtenidos de información de terceros .."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfactures:phpmyfactures:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "CA2ECFEC-07D0-47A2-8181-60F6A28F9D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfactures:phpmyfactures:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B85248-B9C6-4C0D-BB7B-0453C24B3F0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20642",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/phpmyfactures.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437025/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/phpmyfactures.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437025/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Adobe Acrobat Reader (acroread) before 7.0.8 have unknown impact and unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Adobe Acrobat Reader (acroread) anterior a v7.0.8 tienen un impacto desconocido y vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C92642-7C8D-411A-8726-06A8A6483D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F509566A-6D4A-40C0-8A16-F8765C5DCAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "707D7124-6063-4510-80B4-AD9675996F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200FFAE3-CC1C-4A11-99AD-377D54A67195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A990E86-07C0-49E2-92D6-55E499F30FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7EAA22-CED2-4379-9465-9562BACB1C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2402B40-6B72-48B5-A376-DA8D16CA43FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF742B8-5F7A-487B-835C-756B1BB392F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9351C2-16ED-4766-B417-8DB3A8766C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74667860-0047-40AD-9468-860591BA9D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEA092A-5532-4DCC-B43D-7A8ECF07FA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24262AFA-2EC8-479E-8922-36DB4243E404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E62096-08B2-4722-A492-11E9A441E85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5370AC6-90EE-48EA-8DBD-54002B102F7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36D10A8-D211-437D-98D8-9029D0A9CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55D00C-3629-48E4-8699-F62B8D703E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623324C2-C8B5-4C3C-9C10-9677D5A6740A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20576",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20925",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/327817.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_41_acroread.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18445",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/techdocs/327817.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_41_acroread.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nAdobe, Acrobat Reader, 7.0.8",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  Adobe told us that this issue does not affect the Linux versions of Adobe Acrobat Reader.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) cal_event.php and (2) cal_popup.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Calendarix Basic v0.7.20060401 y versiones anteriores, con discapacidad magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL a través del parámetro id en (1) cal_event.php y cal_popup.php (2)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_hor:calendarix_basic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.2006-04-01",
            "matchCriteriaId" : "EE99BDF7-2556-4136-8B09-BCB0E964E325"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115048898305454&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20645",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115048898305454&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in (1) userlogin.cfm and (2) account.cfm."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en iPostMX 2005 v2.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro RETURNURL en (1) userlogin.cfm y account.cfm (2)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipostmx:ipostmx_2005:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "A2159A1D-4350-449C-9B3B-2263E1708B64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20697",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-19T21:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm and (2) topic parameter in topics.cfm.  NOTE: this item was created based on information in a blog entry that was apparently removed after CVE analysis.  As of 20060619, CVE is attempting to determine the cause of the removal."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en iPostMX 2005 v2.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL a través de (1) el parámetro forum en messagepost.cfm y (2) el parámetro topic en topics.cfm. NOTA: esta entrada fue creada a partir de la información recabada en un blog que ha sido eliminado, aparentemente después de un análisis de CVE. Desde el 19/06/2006, CVE está tratando de determinar la causa de la eliminación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipostmx:ipostmx_2005:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "A2159A1D-4350-449C-9B3B-2263E1708B64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-20T17:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Support Tools Manager (xstm, cstm, and stm) on HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en Support Tools Manager (xstm, CSTM y STM) en HP-UX B.11.11 y B.11.23 permite a usuarios locales causar una denegación de servicio no especificada a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20711",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016307",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437401/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18457",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437401/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability only affects HP-UX running Support Tools Manager (xstm, cstm, stm)."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-20T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instead of the user web, which can then be used to associate the user's login name with the WikiName of a member of the TWikiAdminGroup."
      }, {
        "lang" : "es",
        "value" : "TWiki 4.0.0, 4.0.1 y 4.0.2 permite a atacantes remotos obtener privielgios de administrador de Twiki a través de un formulario TWiki.TWikiRegistration con un atributo de acción modificado que hace referencia a la Sandbox web en lugar de la user web, lo que puede ser utilizado para asociar el nombre de inicio de sesión de un usuario con el WikiName de un miembro de TWikiAdminGroup."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F893E121-82FA-41C8-9BA4-606E6DA01408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620356EA-F106-41DF-AADA-C1EF5A5A0829"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0032.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20596",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4PrivilegeElevation",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18506",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4PrivilegeElevation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"MapUserToWikiName\" setting is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters."
      }, {
        "lang" : "es",
        "value" : "Vilnerabilidad de cross-site scripting (XSS) en LogonProxy.cgi en Cisco Secure ACS para UNIX v2.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del (1) error, (2) SSL, y (3) parámetros Ok."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:2.3:*:unix:*:*:*:*:*",
            "matchCriteriaId" : "7889030E-97F7-4CCD-8050-5250B1F58C26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016317",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/secursw/ps4911/tsd_products_security_response09186a00806b8bdb.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437441/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437480/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18449",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/secursw/ps4911/tsd_products_security_response09186a00806b8bdb.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437441/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437480/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en los artículos / BitArticle.php en Bitweaver v1.3, cuando se ejecuta en Apache con la extensión mod_mime, permite a atacantes remotos ejecutar código PHP arbitrario mediante la subida de archivos arbitrarios con doble extensión, que se almacenan durante un pequeño periodo de tiempo en el webroot en el directorio  temp/articles"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5657A816-9C53-4D97-90C4-357FCCA7057D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/bitweaver_13_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bitweaver.org/articles/45",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/bitweaver_13_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bitweaver.org/articles/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error parameter in users/login.php and the (2) feedback parameter in articles/index.php."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Bitweaver v1.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) \"error\" en users/login.php y (2) \"feedback\" en articles/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5657A816-9C53-4D97-90C4-357FCCA7057D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/bitweaver_13_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bitweaver.org/articles/45",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/bitweaver_13_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bitweaver.org/articles/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the resultant error message."
      }, {
        "lang" : "es",
        "value" : "users/index.php en Bitweaver v1.3, permite a atacantes remotos obtener información sensible a través de un parámetro sort_mode inválido, lo que revela la ruta de instalación e información de la base de datos en el mensaje de error resultante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5657A816-9C53-4D97-90C4-357FCCA7057D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/bitweaver_13_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20695",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bitweaver.org/articles/45",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/bitweaver_13_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bitweaver.org/articles/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5657A816-9C53-4D97-90C4-357FCCA7057D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/bitweaver_13_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bitweaver.org/articles/45",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/bitweaver_13_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bitweaver.org/articles/45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpMyDesktop|Arcade 1.0 allows remote attackers to inject arbitrary web script or HTML via the subsite parameter in the subsite todo."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index-php en phpMyDesktop|Arcade v1.0 permite a atacantes remotos inyectar código web script o HTML a través del parámetro subsite en el subsite todo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fredi_bach:phpmydesktop_arcade:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17D1E61-0D21-4B7B-91A4-EFC10C6ED5C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) GLOBALS[where_framework] to (a) admin/modules/news/news_class.php and (b) admin/modules/content/content_class.php, and (2) GLOBALS[where_cms] to (c) admin/modules/block_media/util.media.php.  NOTE: this issue might be resultant from a global overwrite vulnerability.  This issue is similar to CVE-2006-2576, but the vectors are different."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Docebo v3.0.3 y versiones anteriores, cuando register_globals está habilitado, que permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en (1) GLOBALS [where_framework] para (a) admin / modules / news / news_class. php y (b) admin / modules / content / content_class.php, y (2) GLOBALS [where_cms] a (c) admin / modules / block_media / util.media.php. NOTA: este problema puede ser el resultado de una vulnerabilidad de sobreescritura de ámbito global. Este problema es similar a CVE-2006-2576, pero los vectores de ataque son diferentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docebo:docebo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.3",
            "matchCriteriaId" : "62D76E7D-45D9-43ED-8536-73F27E2533CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016259",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad cross-site scripting (XSS) en Servidor de correo electrónico Emailarchitect v6.1 permite a atacantes remotos la ejecución de JavaScript arbitrario a través de una etiqueta div HTML con un retorno de carro entre el atributo onmouseover y su valor, que no pasa por el filtro de correo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emailarchitect:email_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06359B95-1F82-4E2C-8750-1D59D38A1435"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Cisco CallManager v3.3 anterior a  v3.3(5)SR3, v4.1 anterior a v4.1(3)SR4, v4.2 anterior a v4.2(3), y v4.3 anterior a v4.3(1), permite a atacantes remotos inyectar código web script o HTML a través de (1) parámetro pattern en ccmadmin/phonelist.asp y (2) parámetros de su elección en ccmuser/logon.asp, también conocido como bugid CSCsb68657"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D9BE35-E2AA-42A4-BECB-1BD33F2D9F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(3\\)es61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B333B6A2-36AE-45D8-81E6-7B13C0235774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(4\\)es25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8974FCAC-BE8B-4F87-91D5-E4D3C38A0262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2188FD-29C8-4184-9E85-3875A53BB193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(5\\)es30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D311940-8FB8-44A5-9B1E-9730342554E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(5\\)sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6049596-9D62-4EC4-BEAE-A2023F6F3346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:3.3\\(5\\)sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87560280-EF6A-46DC-9368-0C98E0A5B7E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373E71AE-C735-4476-A574-56C35BAD8DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(2\\)es33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E82520-D83E-4259-B7BC-76320FF948A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(2\\)es55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25A4042-1F70-498E-8BB3-9B8A29C0EF28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)es07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291B6C1C-C3F3-4016-AF50-4D8D90227357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)es32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DB7A16-9B5E-4EC7-95BE-5C028AA5E9AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9AA9D0-3205-4A5D-8161-C80D1855D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B771F3F8-CD24-4710-A7A8-D4F9E0DB4BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.1\\(3\\)sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DA8A99-A678-42F8-AFC5-323E77D9BCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA55FCB-FFFB-495F-86A8-262E7995B519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6ECFC2B-9978-46FF-BC4E-A81B9B835E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3979687E-2BDE-42CD-ACF6-5EE3AF6CD5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B77A94-5477-4703-9421-2266EC603319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:call_manager:4.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF86C50-A2B2-4944-8361-C67766DCA2DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016328",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_security_response09186a00806c0846.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+CallManager+XSS+Advisory.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437757/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_security_response09186a00806c0846.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+CallManager+XSS+Advisory.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437757/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in main.php in Chipmailer 1.09 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) betreff, (3) mail, and (4) text parameters."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmailer:chipmailer:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8DCDC9-BB69-4573-88B2-90873DDD5B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115024576618386&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115024576618386&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by (1) anfang, (2) name, (3) mail, (4) anrede, (5) vorname, (6) nachname, (7) gebtag, (8) gebmonat, and (9) gebjahr."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en main.php en Chipmailer v1.09 permite a atacantes remotos ejecutar comandos SQL a través de varios parámetros, como se demostró por (1) anfang, (2) name, (3) name, (4) Anrede, (5) Vorname, (6) nachname, (7) gebtag, (8) gebmonat y (9) gebjahr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmailer:chipmailer:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8DCDC9-BB69-4573-88B2-90873DDD5B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115024576618386&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20643",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115024576618386&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chipmailer 1.09 allows remote attackers to obtain sensitive information via a direct request to php.php, which displays the output of the phpinfo function."
      }, {
        "lang" : "es",
        "value" : "Chipmailer 1.09 permite a atacantes remotos obtener información sensible a través de una solicitud directa a php.php, que muestra la salida de la función phpinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chipmailer:chipmailer:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8DCDC9-BB69-4573-88B2-90873DDD5B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115024576618386&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115024576618386&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2911",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-21T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el Panel de Control / index.php en CMS Mundo anteriores a 1.0 build 008 que permite a atacantes remotos ejecutar comandos SQL a través del parámetro username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF68F9B-BA01-4A3E-999A-5B2638C72593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotwebscripts:cms_mundo:1.0_build_007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1131C3EE-80EC-4330-B1F3-33D17CD81F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20362",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-43/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016311",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26464",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437183/100/200/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18451",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2348",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27093",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-43/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437183/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2931",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-21T19:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files."
      }, {
        "lang" : "es",
        "value" : "CMS Mundo en versiones anteriores a la 1.0 build 008 no verifica apropiadamente los archivos de imágenes subidos, lo que permite a atacantes remotos ejecutar código PHP de su elección subiendo y posteriormente accediendo a determinados archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF68F9B-BA01-4A3E-999A-5B2638C72593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotwebscripts:cms_mundo:1.0_build_007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1131C3EE-80EC-4330-B1F3-33D17CD81F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20362",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-43/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016311",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26465",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437183/100/200/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2348",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27094",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-43/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437183/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service (memory consumption) by performing a large number of RSA cryptographic operations."
      }, {
        "lang" : "es",
        "value" : "Fallo de memoria en la Red de Servicios de Seguridad (NSS) 3.11, tal como se utiliza en Sun Java Enterprise System 2003Q4 2005Q1 y por medio de Java System Directory Server 5.2, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) mediante la realización de un gran número de operaciones de cifrado RSA ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_enterprise_system:2003q4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8DFE4D-1FB6-41D7-AAB6-82400C6B4504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_enterprise_system:2004q2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132976FA-A42E-4CC0-8C8F-9A034A046B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_enterprise_system:2005q1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50246E42-89BE-4F08-A7D0-22977C985C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083E8ACF-7A6B-4C7C-B1E1-1567D09A8E4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/25048",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102461-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102896-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-package-announce/2006-June/msg00155.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1573",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102461-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102896-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/archives/fedora-package-announce/2006-June/msg00155.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-21T23:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "choose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories directory."
      }, {
        "lang" : "es",
        "value" : "choose_file.php en easy-CMS v0.1.2, cuando mod_mime es instalado, no restringe subida de ficheros con múltiples extensiones, lo que permite que atacantes remotos ejecuten código PHP de su elección actualizando un fichero PHP con una extensión GIF, después accediendo directamente al fichero en el directorio Repositories."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-cms:easy-cms:0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A768EBF2-C137-4E87-8790-3B4FEBE2D73E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://biyosecurity.be/bugs/easycms.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437705/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://biyosecurity.be/bugs/easycms.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437705/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T00:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet."
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel permite ejecutar código JavaScript de su elección a atacantes asistidos por los usuarios y redirigir a los usuarios a los sitios de su elección mediante una hoja de cálculo Excel con un objeto incrustado Shockwave Flash Player ActiveX, que se ejecuta automáticamente cuando el usuario abre la hoja de cálculo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7973AE7A-FE9F-4AB8-BBA8-98F3AF25487C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://hackingspirits.com/vuln-rnd/vuln-rnd.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18583",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://hackingspirits.com/vuln-rnd/vuln-rnd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) view parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en NC LinkList, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1)cat  y (2)view .\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nc_linklist:nc_linklist:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65E3943-93B3-4F73-81A3-0174BFD559D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/nc-linklist-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/nc-linklist-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Clubpage allows remote attackers to execute arbitrary SQL commands via the category parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Clubpage, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro categoría .\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clubpage:clubpage:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC28843-3EED-403F-A420-35AED85DD84B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/clubpage-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20706",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/clubpage-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script or HTML via the (1) news_archive, (2) language, and (3) intranetLogin parameters in (a) index.php; the (4) sites_id parameter in (b) sites.php; and the (5) news_id parameter in (c) news_more.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Clubpage,  permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) news_archive, (2) language, y (3) intranetLogin parameters en (a) index.php; parámetro (4) sites_id en(b) sites.php; y parámetro (5) news_id parameter en (c) news_more.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clubpage:clubpage:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC28843-3EED-403F-A420-35AED85DD84B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/clubpage-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20706",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/clubpage-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T01:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, as originally reported for index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en qtofm.php4 en QTOFileManager v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro msg, como se reporto originalmente para index.php .\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qto:qtofilemanager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C01BAAC3-1909-4D69-80CB-F68FA10516AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016333",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437754/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437754/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code via a URL the DIR_LIBS parameter in (1) path/action.php, and to files in path/nucleus including (2) media.php, (3) /xmlrpc/server.php, and (4) /xmlrpc/api_metaweblog.inc.php.  NOTE: this is a similar vulnerability to CVE-2006-2583.  NOTE: this issue has been disputed by third parties, who state that the DIR_LIBS parameter is defined in an include file before being used"
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303D317F-EDB3-4388-A18E-F129DCB5CB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.0_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFCA1BC-8955-4A99-96EB-9AAA81CF69E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.0_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA166822-CE86-4C59-AA10-6759162414A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3832414B-F057-4D74-A5B6-310B030597DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994775CD-ED61-4482-81E8-D4BDF23F379D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8FEF97-08A4-46C1-A9CA-9C3C5E57082E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7CE897-CBCA-465D-A521-C66415AF9A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nucleus_group:nucleus_cms:3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7422663-20B1-4C28-98D6-89472D1CD5B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437423/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437986/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18475",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437423/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437986/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in productDetail.asp in Edge eCommerce Shop allows remote attackers to inject arbitrary web script or HTML via the cart_id parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en productDetail.asp en Edge eCommerce Shop, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro cart_id ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutting_edge_computing:edge_ecommerce_shop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A4B136-E818-4E33-94F7-1AED66D1A5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/edge-ecommerce-shop-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/edge-ecommerce-shop-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PIC parameter in offers-pix.php, (2) from parameter in cp/index.php, and (3) action parameter in cp/admin_index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpMyDirectory v10.4.5 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro  (1) PIC en offers-pix.php, (2) from en cp/index.php, y(3) action en cp/admin_index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.5",
            "matchCriteriaId" : "491B2979-BB0E-4214-86CF-F2EA62EFA5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B552DA-6D35-4BDF-A97B-B88CC16D0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62587DB1-B135-4F27-B77C-DE0EF917FC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6647056C-687E-4F30-B576-6A438B611745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51DB83A-67F2-4476-A074-22512E8A793D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34F0F60-FB88-47AA-8113-EC4B933AB80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE4E6B-AC7B-4500-93F9-0415EFE3FD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4723D3-BD9E-46DB-9783-7A97C8AC78C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A75D22-2E40-4986-BB33-73E1AAC50475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9E3CEA-09D1-4E51-84D8-39340219E774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E69696-0885-4BF0-BD89-F81FDBB0AEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C63AAC-8753-4769-B98E-E732715DAB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8F8C7A-755C-4DDE-A182-74B1889E7E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0C2118-C89D-452B-9270-7C85EE6D5298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D109078-AD74-4275-9069-A9226DF56F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851B7ABF-3116-46B1-8B21-A372A4075290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C65CBE-E83D-42F4-90F0-270530F6711C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34363AB0-E74F-4A92-AAC8-4EB42EC5488A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53172EEE-835A-4E3D-80F0-8215FEF0A16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26285314-4863-467A-80B3-B845DCB924B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA77316-49F3-4B40-93F0-FE3189AE31E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2138D7A2-920A-4EB6-952D-AB5E6054FDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "D957E6B7-5F58-40CC-8776-522AAC1EFA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D9547C-4436-4CC5-8AC1-2132CD1C140D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B05F8B-0A58-4C99-9208-942D065F5FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "54BFC064-E947-4520-92C9-F2904AB8BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE1576E-7C26-4295-9A38-A7A78ECA000A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D687BFB-D590-4329-B7C6-CAA3F4F4FF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F5AA88-4609-4AEF-B210-775A0F0A4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EB8A68-D56B-49F3-9DCB-560B57450D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB92CB8-51D7-48AA-894B-4E2A7F2378FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E1BC45-9657-494E-9DF2-64A12DA9DF59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECB010-BC7C-4EF7-A310-9DF0B03A7AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD48843-99B9-476A-9172-1FCBABE4424F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13659DC1-1DF8-4B42-A42E-A3286F80D470"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/phpmydirectory-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20718",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/phpmydirectory-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and (4) sortby parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en war.php en Virtual War (VWar) v1.5.0 R14 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) s, (2) showgame, (3) sortorder, y(4) sortby."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0_r14",
            "matchCriteriaId" : "CFFA3BDC-90BB-4853-916E-C6AA8FF613FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8649B70-E499-48B9-BEC0-40A5CBA965AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259BA0C6-2604-47F9-9F3F-9C1723D92B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E1C96A-E919-4217-9740-7A0E091FB173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF2E5CD-19A3-4B28-B0DF-A9E78FD9E00D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8E151E-B445-476A-A984-EDB2912D5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A272DC-9B30-417A-9C77-67A7C35063C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F12BA77-5F39-44B3-A18F-69C8019FE276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966D4C0E-E82C-4BD2-AE42-F56A4B137CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4395243-2E0A-4DBA-90AD-4D74491A0E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331164B3-F2B7-4D74-8F72-6D183A4CE5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08559C71-79AA-4051-98AB-8DABA0571A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74736F85-D744-4999-B4BB-09A766EFDF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F1F787-DBB6-4CE7-ACE3-8BCE78671DD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2008-02/0186.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/virtual-war-multiple-sql-inj-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20696",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443171/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/488118/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/27772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2383",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2008-02/0186.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/virtual-war-multiple-sql-inj-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443171/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/488118/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/27772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en openCI v1.0 BETA v0.20.1 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openci:openci:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_beta_0.20.1",
            "matchCriteriaId" : "99779F54-4EFF-4D29-8539-D6AB524F51FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/openci-sql-inj.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/openci-sql-inj.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en details.cfm en Tradingeye Shop R4 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dpivision:tradingeye_shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "r4",
            "matchCriteriaId" : "5ADE7C76-2C60-4CFE-BA99-2182E15CCC40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/tradingeye-shop-r4-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20736",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/tradingeye-shop-r4-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via the MainID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en forum.php en VBZooM 1.11 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro MainID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC56F3-CA23-4875-99E7-8317617DA419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18472",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent applications allows remote attackers to inject arbitrary web script or HTML via the error_msg parameter."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en icue_login.asp en Maximus SchoolMAX v4.0.1 y anteriores, las aplicaciones iCue e iParente permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro error_msg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maximus:schoolmax:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C5FDCC-A4DC-4009-8DF3-D7572AD21A60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437640/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437640/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) and earlier allows remote attackers to execute arbitrary PHP code via a URL in the microcms_path parameter.  NOTE: it was later reported that this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en micro_cms_files/microcms-include.php en Implied By Design (IBD) Micro CMS v3.5 (tambien conocido por v0.3.5) y anteriores, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro microcms_path. NOTA: se informó más tarde que esto, también se puede aprovechar para incluir y ejecutar archivos locales a través de secuencias ..  (punto punto )."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibd:micro_cms:0.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5109B507-36DC-41F4-BE98-C74F1A616699"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20758",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456721/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2446",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456721/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/53273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/9699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code when assembling the header, possibly related to an off-by-one error."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en pamtofits de NetPBM v10.30 hasta 10.33, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección en el ensamblado de la cabecera, relacionado posiblemente con un error de superación de límite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F97984A-04F4-4F69-B03B-D06FD0F21EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FB010A-9B82-41F9-9DDB-4DCC0BFA0365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07292430-0952-4E40-9012-1DD5709D2F9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019C4B30-4F04-4068-80B1-884F9607EC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20729",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=425770",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18525",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=425770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of NetPBM distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to \"Ping o' Death\" and as demonstrated by BlueSmack.  NOTE: this issue was originally reported for 4.00.23."
      }, {
        "lang" : "es",
        "value" : "El controlador TOSRFBD.SYS para Toshiba Bluetooth Stack v4.00.29 y anteriores en Windows permite a atacantes remotos provocar una denegación de servicio (reinicio) a través de una solicitud L2CAP echo que provoca una acceso \"fuera de rango\" a memoria, similar al \"Ping  de la Muerte\" tal y como lo demuestra BlueSmack. NOTA: este problema fue reportado originalmente para v4.00.23.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.00.29",
            "matchCriteriaId" : "CA66D53B-0896-4427-82C1-A43273F1CB56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.00.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A3CCBE-29F6-4833-9839-0CEAB0C33A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.00.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB969B2-F6B7-48C0-9B4D-EC9F92944CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.00.31a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "950ACF9E-0783-42E5-A804-18A9F26E038A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.00.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D00C96-6DA5-453F-A7E2-694E0B83D68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.01.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2ACFAD-8406-4478-8D12-F4EC8684728C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6160E18A-DE9C-4D0A-A901-BC2BB1CE3F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.20.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01049F3C-7EE1-4836-BF9C-C2CFE84A03D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.20.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484C6E65-24BA-4D07-8BD1-71384E63F41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.20.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083F6F9A-626B-4F7B-9804-3E97C0D8624F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:3.20.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F031926C-3138-4D5E-81F4-ED34C95367C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:4.00.01t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E31608-3811-491C-9759-6F66D0B4C6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:4.00.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611EB66B-01DA-43DE-8DFE-0D6F5AD0657A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:4.00.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952E2AD5-508B-4FEE-8417-5F9611EA886E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20657",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trifinite.org/blog/archives/2006/06/update_tosiba_a.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trifinite.org/trifinite_advisory_toshiba.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437811/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18527",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trifinite.org/blog/archives/2006/06/update_tosiba_a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trifinite.org/trifinite_advisory_toshiba.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437811/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors.  NOTE: due to the lack of precise details, it is not clear whether this is related to a previously disclosed issue such as CVE-2005-1788."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Hosting Controller antes de la versión v6.1 (alias Hotfix v3.2) permite, a atacantes remotos autenticados, obtener privilegios de administrador, listar todos los distribuidores, o cambiar las contraseñas de distribuidores a través de vectores no especificados. NOTA: debido a la falta de detalles precisos, no está claro si esto está relacionado con un tema divulgado previamente como CVE-2005-1788.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD6BB80-8513-4294-8A81-FE8B11FA8BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDFC8A-C341-4137-AF44-F93E814E218B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDE7F42-4372-440E-9E8A-D4B123EB9045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E517F5-FA8C-4099-9D2C-6818A3082881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC9B48D-8D14-40D1-A444-2EC2661E40A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52010E43-81DA-4E60-8CE9-7E60DC017DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAEE0D-CDCE-46F2-8FCD-E9C9CD7BB159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0B0DB0-92F4-4F62-8962-0723633540BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA29887-EEE3-470E-8837-B45DEF171B10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20743",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.inc.php de Open-Realty v2.3.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sorttype en index.php.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-realty:open-realty:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A1950D0-5CAA-4FB8-A356-CADD79BA21C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/open-realty-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20704",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/open-realty-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlight parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en phpMyForum v4.1.3 y anteriores, permite a atacantes remotos inyectar secuencias arbitrarias de comandos web o HTML mediante el parámetro highlight"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyforum:phpmyforum:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B8AE96-42FA-4DBA-992A-9BC54EE58D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyforum:phpmyforum:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7190B757-D468-4395-87AE-38FBB88BF118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyforum:phpmyforum:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94004B5-41D8-4BB8-B892-B7EE7672B041"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/phpmyforum-413-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/phpmyforum-413-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php de CavoxCms 1.0.16 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cavoxcms:cavoxcms:1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8722B2EF-3722-47BE-A4A1-F494EC8296FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/cavoxcms-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/cavoxcms-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in AssoCIateD (aka ACID) 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en index.php en AssoCIateD (alias ACID) v1.2.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro 'menu'.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:associated:associated_cms:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FE1022-09B6-4D04-9C52-FAEF4EDC5737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:associated:associated_cms:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF0C31A-BA16-4DDB-9F37-39139C474CEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/associated-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20725",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/associated-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sectio parameter in (a) login.php, (b) write_newad.php, (c) newad.php, (d) printad.php, (e) askseller.php, (f) browse.php, (g) showmemberads.php, (h) note_ad.php, (i) abuse.php, (j) buynow.php, (k) confirm_newad.php, (2) an parameter in (l) printad.php, (m) note_ad.php, (3) who parameter in (n) showmemberads.php, and (4) adnr parameter in (o) buynow.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección SQL en phpTRADER v4.9 SP5, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) sectio en (a) login.php, (b) write_newad.php, (c) newad.php, (d) printad.php, (e) askseller.php, (f) browse.php, (g) showmemberads.php, (h) note_ad.php, (i) abuse.php, (j) buynow.php, (k) confirm_newad.php, (2) an  en (l) rintad.php, (m) note_ad.php, (3) who en (n) showmemberads.php, y(4) adnr en (o) buynow.php..\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluehouse_project:phptrader:4.9_sp5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD675CF-220F-45DE-9A9F-13449AB0D513"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/phptrader-multiple-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20740",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/phptrader-multiple-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.pl en Ultimate Estate v1.0 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro cat.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkfactory:ultimate_estate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "2D20C7C5-39D0-46DC-A5C4-10B3DBD67CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20761",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.pl en Ultimate Estate v1.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id .\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkfactory:ultimate_estate:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4C65B5-28BA-49C9-B914-3D9DFAF15124"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20761",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in (a) emailtofriend.pl or (b) violation.pl, (2) seller parameter in (c) vsoa.pl, (3) user parameter in (d) userask.pl or (e) leavefeed.pl, (4) itemnum parameter in userask.pl, (5) category parameter in (f) itemlist.pl, and the (6) query parameter in (g) search.pl."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Ultimate Auction, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) item en (a) emailtofriend.pl o (b) violation.pl, (2) seller en (c) vsoa.pl, (3) user en (d) userask.pl o (e) leavefeed.pl, (4) itemnum en userask.pl, (5) category en (f) itemlist.pl, y (6) query en (g) search.pl.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkfactory:ultimate_estate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "2D20C7C5-39D0-46DC-A5C4-10B3DBD67CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimate-auction-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimate-auction-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.cgi en Ultimate eShop v1.0 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro subid.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkfactory:ultimate_eshop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90589265-E992-47DA-9A04-315607716973"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimate-eshop-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimate-eshop-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Thinkfactory UltimateGoogle v1.00 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro REQ.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkfactory:ultimategoogle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00",
            "matchCriteriaId" : "2EA44154-9DD4-40ED-8864-4C32A1B13A81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimategoogle-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ultimategoogle-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de archivos sin restricción en index.php en Eduha Meeting , permite a atacantes saltarse los controles de seguridad y ejecutar código arbitrario en php mediante la acción \"añadir\"\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eduha_meeting:eduha_meeting:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6308DE95-545D-4748-8B5D-3A644B665BA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20731",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.biyosecurity.be/bugs/meeting.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437992/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18499",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.biyosecurity.be/bugs/meeting.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437992/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message."
      }, {
        "lang" : "es",
        "value" : "pipe_master de Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) permite a usuarios locales leer partes de archivos restringidos a través de un ataque \"symlink\" (de enlace simbólicio) en msg.conf en un directorio identificado por la variable de entorno CONFIGROOT, lo que devuelve la primera línea del fichero en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:iplanet_messaging_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB46EE9-8B54-4C14-8850-C7D5B6C62BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_messaging_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8618D65B-CF77-46AF-8D2E-8D36DAAFFD34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046920.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102496-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046920.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102496-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en fm.php en ONEdotOH Simple File Manager (SFM) v0.24a y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro MSG."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedotoh:simple_file_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.24a",
            "matchCriteriaId" : "1D092371-7735-4BE3-AA1A-0617D8A18C3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20668",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437671/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437671/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en misc.php en SaphpLesson v1.1 y anteirores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro action ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saphp:saphplesson:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CEBF90-6B94-41EA-9E98-70872B0AC5E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016342",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437659/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437659/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en include/inc_foot.php en SmartSiteCMS v1.0 y anteriores, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro \"root\"\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartsitecms:smartsitecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "C2897020-A463-4D9D-94B6-C90667A771B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en galeria.php en IMGallery 2v.4 y anteriores, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros \"start\" y \"sort\" .\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imgallery:imgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "2195BEFA-F8B6-45A8-A3CC-C7E2C70B2176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/imgallery-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20763",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000909.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/imgallery-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000909.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the first_row parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en category.php en TPL Design tplShop v2.0 y anteriores , permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro first_row.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tpl_design:tplshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "6931BBF8-B1CC-4A01-8FD2-3841A269DD20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/tplshop-v-20-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/tplshop-v-20-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en propview.php en Free Realty v2.9-0.7 y anteriores , permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ordenar.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_realty:free_realty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9_0.7",
            "matchCriteriaId" : "5D89D060-1C49-40C7-8139-50B314007A94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/free-realty-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20705",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/free-realty-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en propview.php en Free Realty v2.9-0.6 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro ordenar.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_realty:free_realty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9_0.6",
            "matchCriteriaId" : "6B0D0A12-3C44-4136-A16C-C3976EE6CB9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/free-realty-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/free-realty-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-22T22:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message."
      }, {
        "lang" : "es",
        "value" : "Free Realty en versiones anteriores a v2.9 permite a atacantes remotos obtener la ruta completa y otra información sensible a través de manipulaciones no especificadas que producen un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_realty:free_realty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.",
            "matchCriteriaId" : "4108CCA3-E701-42EF-A355-BD6088DD34A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/free-realty-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/free-realty-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut parameters in (a) read.php, and the (3) search and (4) debut parameters in (b) index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en CS-Forum anterior a v 0.82, permite a atacantes remotos ejecutar comandos SQL de su elecció na través de los parámetros (1) id y (2) debut en (a) read.php, y los parámetros (3) search y (4) debut en (b) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:cs-forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.81",
            "matchCriteriaId" : "4BA30FD7-BA98-4C4C-8D52-8C55C48F4DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/csforum081.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.cs-forum.643.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436789/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/csforum081.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.cs-forum.643.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436789/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) msg_result and (2) rep_titre parameters in (a) read.php; and the (3) id and (4) parent parameters and (5) CSForum_nom, (6) CSForum_mail, and (7) CSForum_url cookie parameters in (b) ajouter.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en CS-Forum v0.81 y anteriores. Permiten a atacantes remotos inyectar codigo de script web o código HTML de su elección a través de los parámetros (1) msg_result y (2) rep_titre de (a) read.php; los parámetros (3) id y (4) parent y los parámetros de cookie (5) CSForum_nom, (6) CSForum_mail, y (7) CSForum_url de (b) ajouter.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:cs-forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.81",
            "matchCriteriaId" : "4BA30FD7-BA98-4C4C-8D52-8C55C48F4DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/csforum081.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.cs-forum.643.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436789/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/csforum081.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.cs-forum.643.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436789/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 0.82."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse[] or readall parameter to index.php, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "CS-Forum antes de v0.82 permite a atacantes remotos obtener información sensible a través de manipulaciones no especificadas, posiblemente con parámetro collapse[] vacío o un parámetro readall a index.php, lo cual revela la ruta de instalación en un mensaje de error.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:cs-forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.81",
            "matchCriteriaId" : "4BA30FD7-BA98-4C4C-8D52-8C55C48F4DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/csforum081.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.cs-forum.643.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436789/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/csforum081.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.cs-forum.643.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436789/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados en CS-Forum anterior a v0.82 permite a atacantes remotos inyectar cabeceras arbitrarias en correos mediante un carácter de nueva línea en el parámetro mail para ajouter.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:cs-forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.81",
            "matchCriteriaId" : "4BA30FD7-BA98-4C4C-8D52-8C55C48F4DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/csforum081.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.comscripts.com/scripts/php.cs-forum.643.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/csforum081.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.comscripts.com/scripts/php.cs-forum.643.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash (/) character in the (1) lang_path parameter to (a) cms/plugins/col_man/column.inc.php, (b) cms/plugins/poll/poll.inc.php, (c) cms/plugins/user_managment/usrPortrait.inc.php, (d) cms/plugins/user_managment/user.inc.php, (e) cms/plugins/media_manager/media.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php, and (h) cms/plugins/newsletter2/newsletter.inc.php; (2) path[cb] parameter to (i) modules/guestbook/guestbook.inc.php, (j) modules/shoutbox/shoutBox.php, and (k) modules/sitemap/sitemap.inc.php; and the (3) rel parameter to (l) modules/download/overview.inc.php, (m) modules/download/detailView.inc.php, (n) modules/article/fullarticle.inc.php, (o) modules/article/comments.inc.php, (p) modules/article2/overview.inc.php, (q) modules/article2/fullarticle.inc.php, (r) modules/article2/comments.inc.php, (s) modules/headline/headlineBox.php, and (t) modules/headline/showHeadline.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en Content*Builder 0.7.5 permiten a atacantes remotos ejecutar código PHP arbitrario a través de una URL con un carácter de barra inclinada (/) en el parámetro (1) lang_path para (a) cms/plugins/col_man/column.inc.php, (b) cms/plugins/poll/poll.inc.php, (c) cms/plugins/user_managment/usrPortrait.inc.php, (d) cms/plugins/user_managment/user.inc.php, (e) cms/plugins/media_manager/media.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php y (h) cms/plugins/newsletter2/newsletter.inc.php; parámetro (2) path[cb] para (i) modules/guestbook/guestbook.inc.php, (j) modules/shoutbox/shoutBox.php y (k) modules/sitemap/sitemap.inc.php; y el parámetro (3) rel para (l) modules/download/overview.inc.php, (m) modules/download/detailView.inc.php, (n) modules/article/fullarticle.inc.php, (o) modules/article/comments.inc.php, (p) modules/article2/overview.inc.php, (q) modules/article2/fullarticle.inc.php, (r) modules/article2/comments.inc.php, (s) modules/headline/headlineBox.php y (t) modules/headline/showHeadline.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:content\\*builder:content\\*builder:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95664B20-3AA3-440A-B945-B801ED38350B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115016951316696&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20557",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26344",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26345",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26346",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26347",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26348",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26349",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26350",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26351",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26352",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26353",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26354",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26355",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26356",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26357",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26360",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26361",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26362",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26363",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2300",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115016951316696&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) path[cb] parameter to (a) libraries/comment/postComment.php and (b) modules/poll/poll.php, (2) rel parameter to (c) modules/archive/overview.inc.php, and the (3) actualModuleDir parameter to (d) modules/forum/showThread.inc.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:content\\*builder:content\\*builder:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95664B20-3AA3-440A-B945-B801ED38350B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20557",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/481435/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/481435/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary HTML via the mailbox parameter."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "F871A9BC-DEDF-4175-9130-BA787638BE30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/squirrelmail-151-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/squirrelmail-151-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue has not been able to be reproduced by upstream or after a Red Hat code review.  We therefore do not believe this is a security vulnerability.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php, (2) ecrire.php, and (3) lire.php. NOTE: it was later reported that the ecrire.php vector also affects 1.2.  NOTE: this issue might be limited to a race condition during installation or an improper installation, since a completed installation creates an include file that prevents external control of the $lang variable."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en mcGuestbook v1.3 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro lang a (1) admin.php, (2) ecrire.php y lire.php (3). NOTA: se informó posteriormente que el vector ecrire.php también afecta a la versión v1.2. NOTA: este problema podría estar limitado a una condición de carrera durante la instalación o una instalación inadecuada, ya que una instalación completa crea un archivo de inclusión que impide el control externo de la variable $lang."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcguestbook:mcguestbook:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF16958-9A94-4400-88A8-53D6B2087FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437028/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437448/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437028/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437448/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in xarancms_haupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en xarancms_haupt.php en xarancms v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xaran:xaran_cms:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75420617-6683-46AB-85FE-1C9A05CB20A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/xarancms-v20-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/xarancms-v20-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the destination parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en Admin/rtf_parser.php de The Bible Portal Project 2.12 , permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bible_portal_project:bible_portal_project:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.12",
            "matchCriteriaId" : "2162EE10-FA74-4609-9720-A2D0534F0AFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20680",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. (dot dot) in their filename."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el programa de ejemplo extract_chmLib en CHM Lib(chmlib)en versiones anteriores a v0.38, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jed_wing:chm_lib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.37",
            "matchCriteriaId" : "BB844879-5ADA-447C-B0CB-925877DF7D70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://morte.jedrea.com/~jedwin/projects/chmlib/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20734",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18511",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://morte.jedrea.com/~jedwin/projects/chmlib/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 0.38"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the account parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en tools_ftp_pwaendern.php en Confixx Pro v.3.0 y posiblemente en versiones anteriores, permite a atacantes remotos inyectar código script web de su elección o HTML a través del parámetro account."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "pro_3",
            "matchCriteriaId" : "4C4F93D3-DA6A-4F3F-B3D8-BAFDE3E79B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437550/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437550/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrary web script or HTML via the path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de jecución de secuencias de comandos en sitios cruzados (XSS) en ftp_index.php en Confixx Pro v3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"path\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:confixx:pro_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECFF54F-AC25-4B0C-B6C5-1388924ACEFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0383.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0383.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands via the browse parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en MobeScripts Mobile Space Community v.2.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro Browse."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobescripts:mobile_space_community:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A241A9-6882-4F81-89CA-183B5A874370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20611",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2312",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via a ..  (dot dot) in the uid parameter in the rss page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en MobeScripts Mobile Space Community 2.0, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro uid de la página de RSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobescripts:mobile_space_community:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A241A9-6882-4F81-89CA-183B5A874370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20611",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) browse parameter, which is not filtered in the resulting error message, and multiple unspecified input fields, including those involved when (2) updating a profile, (3) posting comments or entries in a blog, (4) uploading files, (5) picture captions, and (6) sending a private message (PM)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en  index.php en MobeScripts Mobile Space Community v2.0 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro  a (1)mostrar parámetros, que no se filtra en el error resultante  y múltiples campos de entrada cuando(2)se actualiza un perfil,(3)se introducen comentarios o entradas en un blog,(4) se suben ficheros, (5) se toman fotos y (6) enviando mensajes privados .\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobescripts:mobile_space_community:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A241A9-6882-4F81-89CA-183B5A874370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20611",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp, which is stored in inc_skin_file.asp."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en ASP Stats Generator anterior a v2.1.2, permite a atacantes remotos autenticados  ejecutar código ASP a través del parámetro strAsgSknPageBgColour sobre settings_skin.asp, que está almacenado en inc_skin_file.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_stats_generator:asp_stats_generator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "FEF2CE31-E336-438B-B075-841FDEA5F447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.asp-stats.com/index.php/2006/06/18/asp-stats-generator-v212/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20721",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/aspstats.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.asp-stats.com/index.php/2006/06/18/asp-stats-generator-v212/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hamid.ir/security/aspstats.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to ASP Stats Generator version 2.1.2 :\r\nhttp://www.weppos.com/asg/en/download.asp"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero remoto PHP en data/header.php de CMS Faethon 1.3.2. Permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mainpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms_faethon:cms_faethon:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A071E685-AA01-4693-9A0C-D00E0E697905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv33-K-159-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437492/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv33-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437492/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web script or HTML via the mainpath parameter to (1) data/footer.php and (2) admin/header.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en  CMS Faethon v1.3.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro mainpath para (1) data/footer.php y (2) admin/header.php\r\nNOTA: la procedencia de esta información es desconocida; los detalles son obtenidos a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms_faethon:cms_faethon:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A071E685-AA01-4693-9A0C-D00E0E697905"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) maingroup and (2) secondgroup parameters to (a) search_prod_list.asp, and the (3) maingroup parameter to (b) meny2.asp.  NOTE: it is possible that this is resultant from SQL injection or a forced SQL error."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Sharky e-shop v3.05, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro  (1) maingroup y (2)parámetros secondgroup en (a)search_prod_list.asp y el (3)parámetro maingroup en (b)meny2.asp\r\nNota: es posible que esto sea resultado de la inyección de código SQL o un error forzado de SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharky_e-shop:sharky_e-shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.05",
            "matchCriteriaId" : "5B8937FD-66B9-43BF-AB4C-50A7047F118F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/sharky-e-shop-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/sharky-e-shop-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) maingroup and (2) secondgroup parameters to (a) search_prod_list.asp, and the (3) maingroup parameter to (b) meny2.asp.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Sharky e-shop v3.05 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) maingroup y (2) secondgroup sobre (a) search_prod_list.asp, y (3) maingroup sobre (b) meny2.asp.  NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharky_e-shop:sharky_e-shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.05",
            "matchCriteriaId" : "5B8937FD-66B9-43BF-AB4C-50A7047F118F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/2426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en administration/tblcontent/login1.php de HotPlug CMS v1.0 , permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro msg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotplug_cms:hotplug_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F85BA9-7584-479F-AAC6-4D25203B61AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115041611713385&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115041611713385&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en administration/includes/login/auth.php de HotPlug CMS v1.0 , permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1)username y (2)password .\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotplug_cms:hotplug_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F85BA9-7584-479F-AAC6-4D25203B61AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115039446925252&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115039446925252&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en comment.php de MPCS v0.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro  pageid.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tpvgames:mpcs:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB81B05-41BC-4610-82F4-A3D24B6EFDA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tpvgames.co.uk/mpcs/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437631/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18470",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tpvgames.co.uk/mpcs/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437631/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the (1) ipath parameter in common.php and (2) unspecified vectors in ad.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en Ad Manager Pro v2.6, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro (1)ipath  en common.php y(2) vectores no especificados en ad.php..\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web_scripts:ad_manager_pro:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5233838B-6190-4FC2-9DCD-6DEE059F81B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phpwebscripts.com/forum/viewtopic.php?t=1640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20744",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpwebscripts.com/forum/viewtopic.php?t=1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) includes/content/contact_content.php; multiple files in adminpanel/includes/add_forms/ including (2) addbioform.php, (3) addfliersform.php, (4) addgenmerchform.php, (5) addinterviewsform.php, (6) addlinksform.php, (7) addlyricsform.php, (8) addmembioform.php, (9) addmerchform.php, (10) addmerchpicform.php, (11) addnewsform.php, (12) addphotosform.php, (13) addreleaseform.php, (14) addreleasepicform.php, (15) addrelmerchform.php, (16) addreviewsform.php, (17) addshowsform.php, (18) addwearmerchform.php; (19) adminpanel/includes/mailinglist/disphtmltbl.php, and (20) adminpanel/includes/mailinglist/dispxls.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de ficheros PHP en Grayscale BandSite CMS v1.1.1, cuando register_globals esta habilitado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro root_path en (1) includes/content/contact_content.php; multiples archivos en adminpanel/includes/add_forms/ incluyendo (2) addbioform.php, (3) addfliersform.php, (4) addgenmerchform.php, (5) addinterviewsform.php, (6) addlinksform.php, (7) addlyricsform.php, (8) addmembioform.php, (9) addmerchform.php, (10) addmerchpicform.php, (11) addnewsform.php, (12) addphotosform.php, (13) addreleaseform.php, (14) addreleasepicform.php, (15) addrelmerchform.php, (16) addreviewsform.php, (17) addshowsform.php, (18) addwearmerchform.php; (19) adminpanel/includes/mailinglist/disphtmltbl.php, y (20) adminpanel/includes/mailinglist/dispxls.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grayscale:bandsite_cms:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD740CC-4C44-41C9-9E04-9795A0332E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=428062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27240",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27242",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27244",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27245",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27247",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27248",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27249",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27250",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27251",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27252",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2462",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=428062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en singapore v0.10.0 y anteriores, cuando está habilitado register_globals, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) y bytes vacíos (%00) en el parámetro (1) gallery y (2) template"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AC1508-0AC0-412C-A1D7-E5E822BE44C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACACF5FB-A2FD-4176-BE8C-28F71ECD2712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16CB109-13CC-4493-8DC9-0798252A241E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8072C488-C0F3-47C4-AC07-325DB9E41D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A018C38A-F41A-4F93-93FA-3BA26ACB89DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A045A4-A4EE-4972-98D2-268E89D5598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "238FF55F-E3DE-441E-A857-01A3256F5CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE991696-4495-4EDF-8C77-C23F76F85D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.8_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6113F201-6A7C-483F-9856-1012F61CD2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.9a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A77681F-82C5-460E-BC61-0BF56C7DB547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.9b_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B599D0-F74C-43CD-ADED-132D64E534E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2148867-BF1B-4746-B6E7-EE1E4590A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.10_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02090A42-3240-4BC9-BAE6-809C1CB6E752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.11_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F44CBEE-07CF-4D4B-BD89-9816624D4451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970981E9-43DD-4434-9DFD-22B36C8D4386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB034BEA-FE80-420A-8428-3DEE6BBA7323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CBBBAF-5CC8-464C-907F-B452668106DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20724",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18518",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the template parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en singapore v0.10.0 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.10.0",
            "matchCriteriaId" : "446838AA-43F6-4572-AE01-7976AE4E693D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18518",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "index.php en Singapore v0.10.0 y anteriores permite a atacantes remotos obtener la ruta de instalación a través de un parámetro de plantilla no válida, lo que revela la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AC1508-0AC0-412C-A1D7-E5E822BE44C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACACF5FB-A2FD-4176-BE8C-28F71ECD2712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16CB109-13CC-4493-8DC9-0798252A241E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8072C488-C0F3-47C4-AC07-325DB9E41D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A018C38A-F41A-4F93-93FA-3BA26ACB89DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A045A4-A4EE-4972-98D2-268E89D5598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "238FF55F-E3DE-441E-A857-01A3256F5CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE991696-4495-4EDF-8C77-C23F76F85D07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.8_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6113F201-6A7C-483F-9856-1012F61CD2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.9a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A77681F-82C5-460E-BC61-0BF56C7DB547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.9b_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B599D0-F74C-43CD-ADED-132D64E534E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2148867-BF1B-4746-B6E7-EE1E4590A2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.10_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02090A42-3240-4BC9-BAE6-809C1CB6E752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9.11_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F44CBEE-07CF-4D4B-BD89-9816624D4451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970981E9-43DD-4434-9DFD-22B36C8D4386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.9a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB034BEA-FE80-420A-8428-3DEE6BBA7323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:singapore:singapore:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CBBBAF-5CC8-464C-907F-B452668106DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T00:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a POST that contains hexadecimal-encoded HTML."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Invision Power Board (IPB) v2.1.6 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una petición POST que contenga código HTML codificado en hexadecimal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB960ACC-74D4-4AFB-886C-11EB5180DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA6316-7E7E-4A6B-AA54-1846198D64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70C944-F70E-49F4-AA9C-D19148925C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAF5259-D99A-45A1-8DD4-C6858B302272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BC2011-5D19-4AF2-BCCD-38A03D0175FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2800F-3A8C-4B63-B754-D921DFF79496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8BA41-7876-4738-A68A-2162E28A3AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF761A-6459-42B0-BCB8-F735FBDD6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=219126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20772",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=219126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2445",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-23T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service (BUG_ON crash) by causing one CPU to attach a timer to a process that is exiting."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en run_posix_cpu_timers en el kernel Linux anterior a v2.6.16.21 permite a usuarios locales provocar una denegación de servicio (caída BUG_ON) provocando que una CPU asocie un temporizador a un proceso que está saliendo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=115015841413687",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20703",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20991",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30f1e3dd8c72abda343bcf415f7d8894a02b4290",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.21",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/26947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438168/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-311-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2451",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27380",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=115015841413687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30f1e3dd8c72abda343bcf415f7d8894a02b4290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438168/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-311-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2448",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-23T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c)."
      }, {
        "lang" : "es",
        "value" : "kernel de Linux anterior a v2.6.16.21 y v2.6.17, cuando se ejecuta en PowerPC, no realiza correctamente ciertas comprobaciones requeridas access_ok, que permite a usuarios locales leer memoria del kernel de su elección en sistemas 64-bit (signal_64.c) y provoca una denegación de servicio (caída) y posibilita leer memorial del kernet en sistemas 32-bit (signal_32.c)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:N/A:C",
            "baseScore" : 5.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20703",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20991",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c85d1f9d358b24c5b05c3a2783a78423775a080",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.21",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438168/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18616",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0037",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-311-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2451",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=194215",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c85d1f9d358b24c5b05c3a2783a78423775a080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438168/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-311-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=194215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T10:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xt_sctp in netfilter for Linux kernel before 2.6.17.1 allows attackers to cause a denial of service (infinite loop) via an SCTP chunk with a 0 length."
      }, {
        "lang" : "es",
        "value" : "xt_sctp en netfilter para el kernel Linux anterior a v2.6.17.1 permite a atacantes provocar una denegación de servivio (bucle infinito) a través de un fragmento SCTP con longitud 0 (cero)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20703",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438168/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438168/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2914",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-23T19:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter to (1) postreply.php, (2) posting.php, (3) and pm/newpm.php in the deluxe/ directory, and (4) postreply.php, (5) posting.php, and (6) pm/newpm.php in the default/ directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusion remota de archivo PHP en DeluxeBB 1.06 permite a atacantes remotos ejecutar código de su elección mediante una URL en el parámetro templatefolder para (1) postreply.php, (2) posting.php y (3) pm/newpm.php en el directorio deluxe/ y (4) postreply.php, (5) posting.php y (6) pm/newpm.php en el directorio default/"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20152",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-44/advisory",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1134",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016309",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26458",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26459",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26460",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26461",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26462",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26463",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437228/100/100/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438597/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18455",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2347",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27090",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-44/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437228/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438597/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2915",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-23T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección SQL en DeluxeBB v1.06 permite a los atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros (1) hideemail, (2) languagex, (3) xthetimeoffset, y (4) xthetimeformat durante el registro de la cuenta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20152",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-44/advisory",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1134",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016309",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26457",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437228/100/100/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438597/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18453",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2347",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27091",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-44/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437228/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438597/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Opera v8.54 y anteriores permite a atacantes remotos ejecutar código de su elección a través de una imagen JPEG con medidas excesivas de ancho y largo, lo que provoca se reserve menos memoria de la que se requiere."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.4",
            "matchCriteriaId" : "087BD9AE-C81F-4DD5-A79F-CFDDB486F41D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20787",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20897",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1133",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016362",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_opera.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438074/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18594",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vigilantminds.com/advi_detail.php?id=45",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2491",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27318",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/20787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_opera.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438074/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vigilantminds.com/advi_detail.php?id=45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation."
      }, {
        "lang" : "es",
        "value" : "Opera v9 permite a atacantes remotos causar una denegación de servicio (caída) a través de un A tag con un atributo href con una URL que contiene un nombre de host grande, lo que provoca una operación fuera de rango. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://my.opera.com/community/forums/topic.dml?id=144635",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1016359",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.critical.lt/?vuln/349",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27510",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437945/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438326/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18585",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2617",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27289",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://my.opera.com/community/forums/topic.dml?id=144635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1016359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.critical.lt/?vuln/349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437945/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438326/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME with a src tag containing a \"File://\" URI followed by an 8-bit character.  NOTE: some third parties were unable to verify this issue."
      }, {
        "lang" : "es",
        "value" : "Versión no especificada de Internet Explorer permite a atacantes remotos causar una denegación de servicio (caída) a través de un IFRAME con una etiqueta src que contiene \"File://\" seguido por un caracter de 8 bits. NOTA: algunos de estos detalles han sido obtenidos de terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0074.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436839/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436889/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0074.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436839/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436889/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el kernel en HP-UX B.11.00, B.11.11, y B.11.23 permite a usuarios locales provocar una denegación de servicio sin especificar a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438153/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18603",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438153/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T20:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service (crash) by creating an IPv4-mapped IPv6 socket with the SO_TIMESTAMP socket option set, then sending an IPv4 packet through the socket."
      }, {
        "lang" : "es",
        "value" : "La función ip6_savecontrol en NetBSD v2.0 hasta v3.0, bajo ciertas configuraciones, no permite comprobar si el sockets IPv4-mapped ha sido usado antes del proceso de opciones del socket IPv6, lo que permite a atacantes locales causar una denegación de servicio (caída) por creación de un socket IPv4-mapped IPv6 con opción SO_TIMESTAMP activada, para luego enviar un paquete IPv4 a través del socket."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-016.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-016.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-23T21:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by \"replaying the ViewState for a known number.\""
      }, {
        "lang" : "es",
        "value" : "El componente Lanap BotDetect APS.NET CAPTCHA anterior a v1.5.4.0 almacena el UUID y el hash de un CAPTCHA en la propiedad ViewState de una página, lo cual facilita a los atacantes remotos realizar ataques automatizados \"reproduciendo la propiedad ViewState de un nuemro conocido\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lanap_botdetect:captcha_asp.net:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "800DD56D-A0ED-4586-92A1-EAD9053211F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20830",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438159/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18315",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-005.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2518",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438159/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges."
      }, {
        "lang" : "es",
        "value" : "La instalación de Ultimate PHP Board (UPB) v1.9.6 y anteriores incluye una cuenta de acceso y password de administrador defectuoso, que permite a atacantes remotos obtener privilegios. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext by obtaining the plaintext password, which is sent when logging in, and the ciphertext, which is set in the pass_env cookie."
      }, {
        "lang" : "es",
        "value" : "Ultimate PHP Board (UPB) v1.9.6 y anteriores usa un bloque de cifrado criptográficamente débil con un gran espacio de llaves de colisiones, lo que permite a atacantes remotos determinar una llave de descripción apropiada dando el texto plano y el texto cifrado mediante la obtención de la contraseña de texto plano, que es enviado cuando se loguea, y el texto cifrado, cuando es establecido en la cookie pass_env. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env parameters in a cookie, which comprise a persistent logon that does not vary across sessions."
      }, {
        "lang" : "es",
        "value" : "Ultimate PHP Board (UPB) v1.9.6 y anteriores permite a atacantes remotos obtener acceso a através de los parámetros modificados user_env, pass_env, power_env, y id_env en una cookie, que comprenden un inicio de sesión persistente que no varía en los diferentes períodos de sesiones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the \"[NR]\" sequence in the signature field, which is used to separate multiple records."
      }, {
        "lang" : "es",
        "value" : "register.php en Ultimate PHP Board (UPB) v1.9.6 y anteriores, permiten a atacantes remotos crear cuentas de su elección a través de la secuencia \"[NR]\" en el campo \"signature\" que es usado por múltiples registros separados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the id parameter, as demonstrated by injecting a Perl CGI script using \"[NR]\" sequences in the message parameter, then calling close.php with modified id and t_id parameters to chmod the script.  NOTE: this issue might be resultant from dynamic variable evaluation."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execute arbitrary PHP code via multiple unspecified \"configuration fields\" in (1) admin_chatconfig.php, (2) admin_configcss.php, (3) admin_config.php, or (4) admin_config2.php, which are stored as configuration settings.  NOTE: this issue can be exploited by remote attackers by leveraging other vulnerabilities in UPB."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección directa de código estático en Ultimate PHP Board (UPB) v1.9.6 y anteriores permite a administradores autenticados remotamente ejecutar código PHP de su elección a através de múltiples \"campos de comfiguración\" sin especificar en (1) admin_chatconfig.php, (2) admin_configcss.php, (3) admin_config.php, o (4) admin_config2.php, que son almacenados como parámetros de configuración  NOTA: este caso puede ser explotado por atacantes remotos aprovechando otras vulnerabilidades en UPB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC70A25-AB74-4088-BB10-3B7748E70EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E41185-4834-4D85-AF2D-7F10AA98481D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76565865-21E3-4007-8624-48FDC000EBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7869B748-3898-44CA-BA28-B81491241043"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges.  NOTE: this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon installation"
      }, {
        "lang" : "es",
        "value" : "** EN DEBATE ** El planificador de tareas (at.exe) en Microsoft Windows XP genera cada proceso programado con los permisos del sistema, lo que permite a usuarios locales conseguir privilegios. NOTA: este problema ha sido discutido por parte de terceras partes, las cuales afirman que, por defecto, el Programador de tareas esta limitado al grupo de administradores tras la instalación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436810/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436884/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436810/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/436884/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks via URLs or \"..\" sequences in the (1) dir_abs_src parameter in (a) check_entry.php, (b) admin_album.php, (c) admin_image.php, and (d) admin_util.php; and the (2) dir_abs_admin_src parameter in admin_album.php and admin_image.php.  NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) attacks."
      }, {
        "lang" : "es",
        "value" : "Ralf Image Gallery (RIG) v0.7.4 y otras versiones anteriores a v1.0, cuando register_globals es habilitado, permite a atacantes remotos llevar a cabo un ataque inclusión remota de archivo PHP y un ataque de salto de directorio mediante URLs o secuencias \"..\" en el parámetro (1) dir_abs_src en (a) check_entry.php, (b) admin_album.php, (c) admin_image.php, y (d) admin_util.php; y en el parámetro (2) dir_abs_admin_src  en admin_album.php y admin_image.php.  NOTA: este problema puede ser aprovechado para llevar a cabo ataques de ejecución de secuencias de comandos en sitios cruzados (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:le_ralf:ralf_image_gallery:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF6CEFE-5EFF-4A0D-81D6-8AD212773DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:le_ralf:ralf_image_gallery:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05ADCB86-49A4-430D-A96D-48C346CE069A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:le_ralf:ralf_image_gallery:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61BCBD3F-3FEB-4CFB-AB76-78807B8FE953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:le_ralf:ralf_image_gallery:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D455402A-B997-4EF6-A0F2-6076A3F42243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:le_ralf:ralf_image_gallery:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C9BE86-ADA0-458D-B424-BA1AC0BFED2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:le_ralf:ralf_image_gallery:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C125227-4304-4851-B15B-600F05CAB5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:le_ralf:ralf_image_gallery:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D7F664-0AF6-4B72-8A3D-279191CB9C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rig.powerpulsar.com/#news",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20771",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls18.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437818/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438645/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rig.powerpulsar.com/#news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls18.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437818/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438645/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en sign.php en cjGuestbook v1.3 y anteriores, permite a atacantes remotos inyectar código Javascript  a través de una URI Javascript en una etiqueta img bbcode en el parámetro comments."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cjguestbook_project:cjguestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "01B47CAF-4E2B-49B1-8448-0142BBC1D1DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20751",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1141",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438008/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18556",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2488",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27322",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/20751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438008/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the (1) name, (2) email, (3) add, and (4) wName parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en sign.php en cjGuestbook v1.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) name, (2) email, (3) add y (4) WName. NOTA: la procedencia de esta información es desconocida, los detalles se han obtenido únicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cjguestbook:cjguestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "C711815A-A4DD-4E5D-A3DB-FC7DB1F7A3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cjguestbook:cjguestbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B40858C-7B2D-4853-9919-C02B9FD39E57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yeni_host.asp."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Hosting WeBBoA v1.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id, posiblemente host/yeni_host.asp"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webboa:webboa:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E457C19C-DEDC-4F2B-B131-CAFF748D63A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016341",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437635/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18564",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437635/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier, and Groupmax Mail Server 7 and earlier allows remote attackers to cause a denial of service (product \"stop\") via unspecified vectors involving \"unexpected requests\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no específica en Hitachi Groupmax Address Server 7 y anteriores, y Groupmax Mail Server 7 y anteriores, permite a acatactes remotos provocar una denegación de servicio (parada del producto) a través de vectores no específicos que implican peticiones no esperadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_address_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7",
            "matchCriteriaId" : "0DA9E0C2-EA51-4268-A3C7-A8DC2C20BF03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_address_server:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7336F74F-B108-468B-9979-CA865953B28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_address_server:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F977E04F-0011-4DEF-94CA-ECC13B7BD09F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_address_server:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47ECA9B9-E499-45F4-859E-03957638590D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_address_server:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7778B9E0-FF8A-4451-A8FA-7E413F2F6DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7",
            "matchCriteriaId" : "01EFA2A1-13EC-485C-AFF1-2DBB5FEAE75F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_server:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D493CC-9AE7-45E8-A497-8ADA902CCF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_server:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C245A9-3C2C-4627-BCD5-8F941C1EB8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_server:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55946F28-A40D-44E9-838B-1BBF17FC9AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_mail_server:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6A0041-88E7-4A37-AB0B-0BD77FD0988B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20700",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016338",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-012_e/index-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-012_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the \"text analysis\", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set."
      }, {
        "lang" : "es",
        "value" : "Clearswift MAILsweeper para SMTP anterior a v4.3.20 y MAILsweeper para Exchange anterior a anterior a v4.3.20 permite a atacantes remotos evitar el \"text analysis\", posiblemente evitando SPAM y otros filtros, mediante el envió de un e-mail especificando un conjunto de caracteres no existente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mailsweeper_for_exchange:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.19",
            "matchCriteriaId" : "87C646E9-A866-4747-9AE6-601199D4AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mailsweeper_for_smtp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.19",
            "matchCriteriaId" : "6E3CA3AA-2DA8-4BA2-8FC9-1B5B66A4B21B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20756",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18584",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nClearswift, MAILsweeper for SMTP, 4.3.20 \r\nClearswift, MAILsweeper for Exchange, 4.3.20"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes \"unpredictable behavior\" that prevents the Security service from processing more messages."
      }, {
        "lang" : "es",
        "value" : "Clearswift MAILsweeper para SMTP anterior a v4.3.20 y MAILsweeper para Exchange anterior a v4.3.20 permite a atacantes remotos provocar una denegación de servicio a través de (1) caracteres \"no-ASCII\" en un resultado de búsqueda de DNS inversa desde una cabecera Received, que lleva a una parada del servicio Receiver, y (2) vectores sin especificar que tienen que ver con mensajes mal formados que provocan un \"comportamiento impredecible\" que impide al servicio Security procesar más mensajes"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mailsweeper_for_exchange:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.19",
            "matchCriteriaId" : "87C646E9-A866-4747-9AE6-601199D4AC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mailsweeper_for_smtp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.19",
            "matchCriteriaId" : "6E3CA3AA-2DA8-4BA2-8FC9-1B5B66A4B21B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20756",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18584",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nClearswift, MAILsweeper for SMTP, 4.3.20 \r\nClearswift, MAILsweeper for Exchange, 4.3.20"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T01:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username and MAC and IP addresses, by setting the test field to certain values such as 2404 or 2790, then reading the information from the .JText field."
      }, {
        "lang" : "es",
        "value" : "JaguarEditControl (JEdit) ActiveX Control v1.1.0.20 y anteriores permiten a atacantes remotos obtener información sensible, como el nombre de usuario, dirección MAC y dirección IP, fijando el campo text a ciertos valores como a 2404 o 2790, entonces leyendo la información desde el campo  .JText."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaguarsoft:jaguaredit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0.20",
            "matchCriteriaId" : "59EB165F-0C51-4196-A634-FC10FD885CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaguarsoft:jaguaredit:1.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97571C4D-F9A9-48BA-A569-E380DEBB580E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaguarsoft:jaguaredit:1.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349540FD-5263-4696-A5AB-F877A3456230"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20759",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437937/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18576",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.srlabs.net/bulten/JaguarEdit_2.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.srlabs.net/bulten/source/Jaguar.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437937/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.srlabs.net/bulten/JaguarEdit_2.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.srlabs.net/bulten/source/Jaguar.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en profile.php en Woltlab Burning Board (WBB) v2.1.6 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro userid. \r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4E5E3E-2796-400A-8150-58ACEB68B8C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437118/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437118/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en thread.php en Woltlab Burning Board (WBB) v2.2.2 permite a atacantes remotos ejecutar comandos SQL de su elecci´no a través del parámetro threadid. \r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633B976F-2F26-497C-92A8-2F2FD4C41A01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437114/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437114/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabiliad de ineycción SQL en studienplatztausch.php en Woltlab Burning Board (WBB) v2.2.1 permite a tacantes remotos ejecutar comandos SQL de su elección a través del parámetro sid. \r\n\r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1831391-E8DD-430C-8C51-FA34CC2A38A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437115/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437115/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en DataLife Engine v4.1 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de valores de doble codificación en el parámetro user en una acción userinfo. \r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softnews_media_group:datalife_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "23BB57F8-3A40-441A-A281-8CA65CE532B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-24T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode."
      }, {
        "lang" : "es",
        "value" : "El módulo proxy FTP Fortinet FortiOS (FortiGate) anterior v2.80 MR12 y v3.0 MR2 permite a atacantes remotos superar el escaneo del anti-virus a través del modo Enhanced Passive (EPSV) FTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:2.5_0mr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0779FEC-B7A9-416D-AC8B-A2F646C166F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:2.8_mr10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "769D4FB0-780F-48B0-958B-8E088CD2CBF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:2.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A5E477-ADA7-469F-80EF-97EE2AF926B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB2815EF-253B-4E3D-BFA7-265021783158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:2.50_mr5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6810DDBF-3411-4FD9-981A-E8D5FA7FD0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "767E66F6-7AF3-4541-8797-D7503D852044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "631ED29C-890E-4C53-8ADB-0061125FEEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:3.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973C42EB-2073-4ED9-AE15-F72C863394ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:3.0_mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A36F497-1BD7-466A-BA57-069BEA042EE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-July/000921.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20720",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-July/000921.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2196",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-26T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en pinball v0.3.1 permite a usuarios locales obtener privilegios a través de ataques de vectores desconocidos que causan que pinball cargue plugins desde un directorio controlado por el atacante operando con privilegios elevados. \r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jochen_friedrich:pinball:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3734D20C-FFD3-4CB4-B859-71C8C3AF50DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20778",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20834",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1102",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26829",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2535",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27420",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2310",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-26T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as (1) con, (2) aux, (3) com1, and (4) com2."
      }, {
        "lang" : "es",
        "value" : "BlueDragon Server y Server JX v6.2.1.286 para Windows permite a atacantes remotos causar una denegación de servicio (cuelgue) a traves de una petición para un fichero .cfm cuyo nombre contiene un nombre de dispositivo MS-DOS como (1) con, (2) aux, (3) com1, y (4) com2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:new_atlanta_communications:bluedragon_server:6.2.1.286:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "34E18A16-AA6D-4376-B3D8-7D53769C5275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:new_atlanta_communications:bluedragon_server_jx:6.2.1.286:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B2124FD6-7DA6-4CB7-AFF8-2C2AA9C95F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19180",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-18/advisory",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18624",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2502",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/19180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-18/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nNew Atlanta Communications, BlueDragon Server, 6.2.1.309"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2311",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-26T10:06:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a (1) .cfm or (2) .cfml file, which reflects the result in the default error page."
      }, {
        "lang" : "es",
        "value" : "ulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en BlueDragon Server y Server JX v6.2.1.286 para Windows permite a atacantes remotos inyectar código web o HTML de su elección a través del nombre de fichero en una petición en un fichero (1) .cfm o (2) .cfml, que refleja el resultado en una página de error por defecto. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:new_atlanta_communications:bluedragon_server:6.2.1.286:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "34E18A16-AA6D-4376-B3D8-7D53769C5275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:new_atlanta_communications:bluedragon_server_jx:6.2.1.286:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "B2124FD6-7DA6-4CB7-AFF8-2C2AA9C95F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19180",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-18/advisory",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18623",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2502",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/19180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-18/advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-26T16:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop.  NOTE: it could be argued that this is not a vulnerability, unless it interferes with the operation of the system outside of the scope of Safari itself."
      }, {
        "lang" : "es",
        "value" : "Apple Safari v2.0.3 (417.9.3) en Mac OS X v10.4.6 permite a atacantes remotos causar una denegación de servicio (consumo CPU) a través de Javascript con un bucle infinito. NOTA: esto podría ser argumentado como que no es una vulnerabilidad, a menos que interfiera con la operación del sistema fuera del alcance de Safari."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:mac_os_x_10.4.6:*:*:*:*:*",
            "matchCriteriaId" : "44328918-8784-4054-9CF3-63324DD3092E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046150.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046150.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-26T16:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun ONE Application Server v7 anterior a actualización v9, Java System Application Server v7 2004Q2 anterior a actualización v5, y Java System Application Server Enterprise Edition v8.1 2005 Q1 permite a atacantes remotos inyecatr código HTML o web a través de vectores desconocidos. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:*:ur4:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "0AA2F7CD-790A-4F9B-B42E-3B3967818C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D9F68042-8C22-447E-8C6B-F44DEE5BF389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:*:update_8:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "990CB3BC-82FF-4480-B5B7-52761FF78BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102479-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102479-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-26T16:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka \"ACS Weak Session Management Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Cisco Secure Access Control Server (ACS) v4.x para Windows usa la dirección IP de cliente y el número de puerto del servidor para otorgar acceso al puerto HTTP server para una sesión de administración, lo que permite a atacantes remoso superar la autenticación a través de varios métodos, conocido como \"ACS Weak Session Management Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:4.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "FE1B1FFE-25B4-465B-8816-BB8F3C028EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_access_control_server:4.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "85E5B98E-72EB-4AB5-BC55-4392D22B30BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438161/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438258/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438161/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438258/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-26T16:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, which could be stripped by Internet Explorer to render legible text, but not when using other browsers. NOTE: there has been significant discussion about this issue, and as of 20060625, it is not clear where the responsibility for this issue lies, although it might be due to vagueness within the associated standards.  NOTE: this might only be exploitable with certain encodings."
      }, {
        "lang" : "es",
        "value" : "Conflictos de interpretación entre Internet Explorer y otros buscadores web como Mozilla, Opera, y Firefox pued e permitir a atacantes remotos modificar la presentación de las páginas web y probablemente superar los mecanismos de protección como los filtros e contenido a través de caracteres ASCII con el octavo bit configurado, lo que puede ser desecho por Internet Explorer para traducir texto legible, pero no cuando es usado en otros buscaodres. NOTA: ha habido discursión significativa sobre este tema, como 20060625, no está claro donde se encuentra la responsabilidad de este problema, aunque podría ser debido a la vaguedad dentro de los estándares asociados. NOTA: esto sólo puede ser objeto de explotación con ciertas codificaciones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ha.ckers.org/blog/20060621/malformed-ascii-bypasses-filters/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ha.ckers.org/blog/20060621/us-ascii-xss-part-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437948/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438049/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438051/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438066/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438154/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438163/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438358/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ha.ckers.org/blog/20060621/malformed-ascii-bypasses-filters/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ha.ckers.org/blog/20060621/us-ascii-xss-part-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437948/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438049/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438051/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438066/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438154/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438358/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-26T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en in_midi.dll para WinAmp v2.90 hasta v5.23, incluyendo v5.21, permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado .mi (MIDI). \r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.23",
            "matchCriteriaId" : "C0542BCC-48E2-4E8D-AD45-197DB5EBC2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEA7967-D737-4B46-9382-A391DF832219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "830610D8-1B42-4560-ABB4-BA79DD145110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF89B4A2-37A6-4702-A057-7B70C6157A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19C64AF2-CF9D-4052-85E9-BAFF713382F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F898DA-A260-4A81-8E94-DE85154B88DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4510C850-49A0-4082-81CF-333829FE8639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828226F9-29AA-437F-8385-B75A6F4F3B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD7DE0D-1018-4E04-A771-B2C619E95C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798885D9-B518-4C10-81B9-32AEB512C14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D38D15-3588-49E4-9396-11DB96FBD448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF39A44-528E-4BE8-A923-FFB53C2378F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF40252-7E87-4EE6-B2C7-19E8D78C4025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF272FF7-68ED-4D8B-9C17-D9D46AA33335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FAD29A-6A61-4201-A0E6-1F04BF093600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4497A5-6E95-4CB3-999E-53BF890A23F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057B033C-7836-41E0-B184-F9D5DFC42C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20168350-2AD1-4AF4-B0AA-4C2EBF616259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39A6931-A3CD-44A7-B170-53B803F321AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A651DB07-0A59-41C5-8788-6A3594A5023C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199953E2-C5A4-4D7B-9BB4-EF0B1364F117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6A1F15-A3FA-40FB-980A-569F77E1D104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684ABC3F-57CB-490B-ADCB-501E0D234E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB30030-A195-4626-AAED-D421454D911D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.winamp.com/showthread.php?threadid=248100",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20722",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000892.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000893.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.winamp.com/about/article.php?aid=10694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.winamp.com/showthread.php?threadid=248100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000892.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000893.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.winamp.com/about/article.php?aid=10694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-26T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a \"php://\" or other scheme in the third argument, which disables safe mode."
      }, {
        "lang" : "es",
        "value" : "La función error_log en basic_functions.c en PHP anterior v4.4.4 y v5.x anterior v5.1.5 permite a usuarios locales superar el modo de seguridad y las restricciones open_basedir a través de un \"php://\" u otros esquemas en el tercer argumento, que deshabilitan el modo seguro. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.3",
            "matchCriteriaId" : "265A3D7E-A994-4BF4-99C2-648A54D183BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92647629-083F-4042-8365-4AD2EBC9C1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BE1120-6370-4470-8586-6581EDF3FD69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BB8BB-329A-4640-B758-7590C99B5E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945FF149-3446-4905-BCA1-C397E3497B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BF34B5-F74C-4D56-9841-42452D60CB87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?diff_format=u&view=log&pathrev=PHP_4_4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.9&r2=1.543.2.51.2.10&pathrev=PHP_4_4&diff_format=u",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20818",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/41",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?diff_format=u&view=log&pathrev=PHP_4_4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.9&r2=1.543.2.51.2.10&pathrev=PHP_4_4&diff_format=u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-320-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues.  For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php\n",
        "lastModified" : "2006-09-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to \"openwebmailerror calls that need to display HTML.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Open WebMail (OWM) v2.52, otras versiones lanzadas con anteriorioridad a 12/05/2006, permite a atacantes remotos inyectar código web o HTML a través de los campos (1)A: y (2) Desde: en openwebmail-main.pl, y probablemente (3) otros vectores no especificados relacionados con llamadas \"openwebmailerror que necesitan mostrar HTML.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.52",
            "matchCriteriaId" : "F8D49632-690B-4014-86A4-29491126293C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B94ECAA-1148-4A84-93B4-56B56A0938AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA86C04C-D31E-4B0B-A8E0-13A5FED7644E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62736A5C-7E68-4E47-9954-D62C913E3AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D1462D-CC70-41CC-BAF4-48CD0ECAFD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50009537-0820-4CDB-94E1-2222040F234C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C80B3-C668-4F4F-B8A7-9AD4E56C024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC7B40-834B-4476-8A0D-FDEA86C436D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467BEC56-9C42-4180-B422-F0099AF77B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC478ABF-19F8-4195-AA37-23668E2474EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A87C77-5F6E-497D-A6A0-7D68D5E27E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C718757-E831-4C17-A9E6-BB31A20AC8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BEB39A-379D-4E81-AF38-4D798C771DAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-main.pl?rev1=235%3Brev2=236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwebmail.org/openwebmail/doc/changes.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000902.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-main.pl?rev1=235%3Brev2=236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwebmail.org/openwebmail/doc/changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000902.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier (Java BitTorrent Client Tracker) allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) index.tmpl en Azureus Tracker v2.4.0.2 y anteriores permite a atacantes remotos inyectar HTML o scripts web a través del parámetro de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azureus_tracker:azureus_tracker:2.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6B8602-B818-4BA1-A64A-EBC4E8B37A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azureus_tracker:azureus_tracker:2.3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FBD16B5-53AC-4BEB-876E-A4E47F5202D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azureus_tracker:azureus_tracker:2.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331BDBDF-1CE6-44E4-894E-36C0C55AA7C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/azureus-2402-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20755",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/azureus-2402-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad no especificada en IBM WebSphere Application Server (WAS) antes de v6.0.2.11, cuando fileServingEnabled esta puesto a TRUE, permite a atacantes remotos obtener el código fuente JSP y otra información sensible a través de una \"URI con caracteres especiales.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D02294-3244-4CB3-AC4A-5ACE510DCDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D0DA05-D76A-4623-B7EC-07A9D06E6E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC25AE4-76D2-4FE6-8B33-7069322EBC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9595522-9627-467A-ACED-CCE6E07EB3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71B9C1D-0D89-4CEC-BF25-D4BF522E1697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85BD5A6-07AD-4C45-902C-BE1B25E4D924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C237A08A-A789-4160-AD83-807D2DE6A2B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D2CEBB-0CEB-4BD2-B3E7-657D26770597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFFBEBF-C823-4A9E-B822-FC67A0209FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3101D0ED-9273-4403-A577-1A9F7DF396BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE2470B-C71D-4F86-A068-E6FB8ADB0329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89952309-97EE-462A-B9A3-8013BC1CA1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90460442-D5AD-46EE-B359-FAC26CE7C5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DC6FE-BBB4-45AA-8A5F-F204E798DF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A6A6-D840-48E2-AED2-BB8584E3817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D25A56-D654-46B2-9437-2AAEE74655B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA58B6E-9EA3-43F2-BC98-8178020F687C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BB9B87-8DBB-4FF9-8773-73281C3D52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37813D54-57C8-4C41-A42D-3C7BBAFA86B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1444794B-F893-44B2-824F-24211B872C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B019F0-A728-4803-B036-14E10A5B0389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E4A501-A198-4462-8813-3D355B5BC212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC0955F-486F-41FF-ACA6-0DF4D966E800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8451E82-F170-4182-A312-70DA75F96983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6008404-9114-4BC1-A413-4A18B381E359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFF4792-5BFA-414B-BF84-A2308073E750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E555D3-1A29-4D0B-B9C7-11A7A1C6119E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C347C1F-4B87-4F7C-8E9B-A99D37E9959F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A195CF-B731-4EB6-8899-A7E6AAB14C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B91BF74-963C-48D9-BAA4-9869F181CD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B17701-C450-463F-8C60-6293EBA448FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DB3E62-C18C-440D-B2C8-E14122D2EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559355CF-7FA8-4D90-8393-90C912F571C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355967D9-475A-49AF-A3FF-E0AC3668B289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE79CF3-16A3-40FB-BD7D-5D70DEB0EE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC04CE9C-82B4-4406-823A-69A5E13ECA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6A5B3A-E57D-4574-A481-7EDA93664076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425890C2-FC96-4191-B512-6A3DB7BCE2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BABB4A4-182D-4FB1-88AD-B6D6EDAE10C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF8ED4D-D2B6-49EC-930A-16A78E729F17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20732",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21243541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/22991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0970",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21243541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/22991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server before 6.0.2.11 has unknown impact and attack vectors because the \"UserNameToken cache was improperly used.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el servidor de aplicaciones IBM WebSphere en versiones anteriores a la v6.0.2.11 tiene un impacto y vectores de ataque desconocidos debido a que \"la caché UserNameToken no es usada apropiadamente\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D02294-3244-4CB3-AC4A-5ACE510DCDDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D0DA05-D76A-4623-B7EC-07A9D06E6E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC25AE4-76D2-4FE6-8B33-7069322EBC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9595522-9627-467A-ACED-CCE6E07EB3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71B9C1D-0D89-4CEC-BF25-D4BF522E1697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D85BD5A6-07AD-4C45-902C-BE1B25E4D924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C237A08A-A789-4160-AD83-807D2DE6A2B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D2CEBB-0CEB-4BD2-B3E7-657D26770597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFFBEBF-C823-4A9E-B822-FC67A0209FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3101D0ED-9273-4403-A577-1A9F7DF396BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE2470B-C71D-4F86-A068-E6FB8ADB0329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89952309-97EE-462A-B9A3-8013BC1CA1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90460442-D5AD-46EE-B359-FAC26CE7C5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4DC6FE-BBB4-45AA-8A5F-F204E798DF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8873A6A6-D840-48E2-AED2-BB8584E3817A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D25A56-D654-46B2-9437-2AAEE74655B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA58B6E-9EA3-43F2-BC98-8178020F687C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BB9B87-8DBB-4FF9-8773-73281C3D52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37813D54-57C8-4C41-A42D-3C7BBAFA86B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1444794B-F893-44B2-824F-24211B872C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B019F0-A728-4803-B036-14E10A5B0389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E4A501-A198-4462-8813-3D355B5BC212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC0955F-486F-41FF-ACA6-0DF4D966E800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8451E82-F170-4182-A312-70DA75F96983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6008404-9114-4BC1-A413-4A18B381E359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FFF4792-5BFA-414B-BF84-A2308073E750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E555D3-1A29-4D0B-B9C7-11A7A1C6119E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C347C1F-4B87-4F7C-8E9B-A99D37E9959F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A195CF-B731-4EB6-8899-A7E6AAB14C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B91BF74-963C-48D9-BAA4-9869F181CD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.0.2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B17701-C450-463F-8C60-6293EBA448FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DB2053-6DFD-4FF6-A6E9-444281531E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DB3E62-C18C-440D-B2C8-E14122D2EEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31419896-89F7-43A2-8B7C-3B92744BBC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559355CF-7FA8-4D90-8393-90C912F571C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355967D9-475A-49AF-A3FF-E0AC3668B289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE79CF3-16A3-40FB-BD7D-5D70DEB0EE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC04CE9C-82B4-4406-823A-69A5E13ECA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6A5B3A-E57D-4574-A481-7EDA93664076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425890C2-FC96-4191-B512-6A3DB7BCE2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BABB4A4-182D-4FB1-88AD-B6D6EDAE10C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF8ED4D-D2B6-49EC-930A-16A78E729F17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20732",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field.  NOTE: some third party sources have mentioned the \"to\" and \"from\" fields, although CVE analysis shows that these are associated with the previous version, a different executable, and a different CVE."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en openwebmail-read.pl en Open WebMail (OWM) v2.52, y otras versiones relacionadas anteriores a 06/18/2006, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del campo from. NOTA: terceras partes han mencionado los campos \"to\" y \"from\", aunque los análisis CVE muestran que éstos están asociados con la versión previa, un ejecutable diferente, y una CVE diferente"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.52",
            "matchCriteriaId" : "F8D49632-690B-4014-86A4-29491126293C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B94ECAA-1148-4A84-93B4-56B56A0938AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA86C04C-D31E-4B0B-A8E0-13A5FED7644E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62736A5C-7E68-4E47-9954-D62C913E3AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D1462D-CC70-41CC-BAF4-48CD0ECAFD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:1.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50009537-0820-4CDB-94E1-2222040F234C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693C80B3-C668-4F4F-B8A7-9AD4E56C024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC7B40-834B-4476-8A0D-FDEA86C436D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "467BEC56-9C42-4180-B422-F0099AF77B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC478ABF-19F8-4195-AA37-23668E2474EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A87C77-5F6E-497D-A6A0-7D68D5E27E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C718757-E831-4C17-A9E6-BB31A20AC8EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BEB39A-379D-4E81-AF38-4D798C771DAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-read.pl?rev1=236%3Brev2=237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwebmail.org/openwebmail/doc/changes.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000902.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-read.pl?rev1=236%3Brev2=237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openwebmail.org/openwebmail/doc/changes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-June/000902.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) produkt, (2) id_produc, and (3) id_kat parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en FineShop v3.0 y anteriores permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros  (1) Produkt (2) id_produc, y (3) id_kat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:looknet:fineshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "9503185A-C10E-4852-8EE9-1C698170E43A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/fineshop-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/fineshop-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) promocja, (2) wysw, or (3) id_produc parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en el fichero index.php de la aplicación FineShop v3.0 y anteriores permiten a atacantes remotos inyectar HTML o scripts web a través de los parámetros (1) promocja, (2) wysw, o (3) id_produc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:looknet:fineshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "9503185A-C10E-4852-8EE9-1C698170E43A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/fineshop-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/fineshop-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (2) catid parameter in index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de inyección SQL en thinkWMS v1.0 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del parámetro (1) id en (a) index.php o (b) printarticle.php, y el parámetro (2) catid en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkfactory:thinkwms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "FEF3B0EF-742D-424F-B540-667C1DCDB560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/thinkwms-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20747",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/thinkwms-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Enterprise Groupware System (EGS) 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos en sitios cruzados(XSS) en el fichero index.php de la aplicación Enterprise Groupware System (EGS) v1.2.4 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro module."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.4",
            "matchCriteriaId" : "B3C549C5-9B13-4850-BAF1-F8F7DEDB7C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB414C07-1F7D-49D5-BF6E-068BAA329BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9946F9-8DC3-4133-81B0-6F6407786592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D51A18-E82D-4CED-B840-4F78CD586678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59DC316-0ACA-4CD2-8392-15028373E78C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555B9F96-3E7D-41CA-BFFD-C345590525F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22AF1028-BA94-46F1-A4A2-1FFC514F5E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2D0D17-57D6-4527-82ED-FB5BE8D0F74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0310F603-8220-40A2-975A-9647FC216857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BE215F-1AC8-4EC8-8229-5910AD52E81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE690549-B22C-44E9-8BA5-7387E7C1E72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E648972C-0487-42A5-A15C-6CD6574A07CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD76FB5C-ADEA-417B-B5D0-20F62E0084F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1EAC965-74EE-4E18-84C0-19F29E139444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senokian_solutions:enterprise_groupware_systems:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DB0E8F-B51F-4363-AFFD-3C841D679953"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/enterprise-groupware-system-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20757",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/enterprise-groupware-system-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) MemberID parameter to rank.php, and the (2) QuranID parameter to lng.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en VBZooM v.1.0 y anteriores permiten a usuarios autenticados en remoto ejecutar comandos SQL de su elección mediante (1) el parámetro MemberID de rank.php y (2) el parámetro QuranID de lng.php.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00",
            "matchCriteriaId" : "251C5128-B1E2-466F-91BC-8F01EA1C9A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20701/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437651/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437658/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20701/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437651/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437658/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en message.php de VBZooM v.1.11 y anteriores permite a usuarios autenticados en remoto ejecutar comandos SQL de su elección a través del parámetro UserID.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077B8FCD-F87E-4AED-B856-42BB40F3E657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFA7E32-74EA-49A0-BD4A-C506BFE42CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEC56F3-CA23-4875-99E7-8317617DA419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en classes/ui.class.php de dotProject v.2.0.3 y anteriores permite a atacantes autenticados en remoto inyectar código web o HTML de su elección a través del parámetro login.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "34D58AF3-FF2F-4766-BB88-76130E814FA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dotproject.cvs.sourceforge.net/dotproject/dotproject/classes/ui.class.php?r1=1.113&r2=1.114",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2339188922/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20822",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=427236",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18650",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2509",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27585",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dotproject.cvs.sourceforge.net/dotproject/dotproject/classes/ui.class.php?r1=1.113&r2=1.114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2339188922/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=427236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en messages.php in XennoBB v1.0.5 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"tid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974207B6-C229-408F-A89F-423EBCDC35B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662BC3F5-BC53-440F-83EC-F5B8DA8228F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB942BB3-218B-4406-AB45-C57855055704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81EEC0F9-7843-4B8A-A533-EAB610AD3FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB020D4D-F70C-4C1E-9148-5DC92582A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5919324-E52F-446A-B957-5C2B672E5FB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/xennobb-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20797",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/xennobb-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función browse_get_namespace en imap/browse.c de Mutt v1.4.2.1 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código de su elección a través de un espacio de nombre largo recibido desde el servidor IMAP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0CD218-AA09-49B0-A87B-7FC04FF54500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15729D82-7BCF-4C50-85A0-7B56008226FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mutt.org/cgi-bin/gitweb.cgi?p=mutt/.git%3Ba=commit%3Bh=dc0272b749f0e2b102973b7ac43dbd3908507540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mutt.org/cgi-bin/viewcvs.cgi/mutt/imap/browse.c?r1=1.34.2.2&r2=1.34.2.3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20810",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-27.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.013-mutt.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0577.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438712/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/307-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dev.mutt.org/cgi-bin/gitweb.cgi?p=mutt/.git%3Ba=commit%3Bh=dc0272b749f0e2b102973b7ac43dbd3908507540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dev.mutt.org/cgi-bin/viewcvs.cgi/mutt/imap/browse.c?r1=1.34.2.2&r2=1.34.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-27.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.013-mutt.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0577.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438712/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/307-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en usercp.php en MyBB (MyBulletinBoard) v1.0 hasta v1.1.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro showcodebuttons."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2F2E0F-94E6-4D63-903F-0090E9D90BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC63F97-643C-43B9-83E5-E43928CB1CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43876FE9-F002-4524-B6C2-5DE4992E0A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE10B8B4-167D-430D-9C7D-6CF934F17D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4_security_patch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488811F6-7CC9-4F56-AD7C-81247B351851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD20FC3-BAE3-4623-B64D-3AA7073C404A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4409B6-9F4D-4136-BA74-43736215A122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525AD7D5-C94C-4BCD-8C03-B48E8BC91BB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=9955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20795",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=9955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Anthill 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) order parameter in buglist.php and the (2) bug parameter in query.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Anthill v0.2.6 y anteriores permite a atacantes remotos ejecutar comandos SQL a su elección a través de (1) el parámeto \"order\" en buglist.php y (2) el parámetro \"bug\" en query.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthill:anthill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.6",
            "matchCriteriaId" : "5D7D3015-AAD5-4AD2-B4CD-10C5564426EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthill:anthill:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D590F81E-0D93-4BC1-818E-98B4F2750AA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/anthill-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20838",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/anthill-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) member and (2) activatecode parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en activatemember en mvnForum v1.0 GA permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) member y (2) activatecode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FF3125-8BCA-4E22-9539-1613E24AEA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "150FFB30-9CDF-428C-B846-6F3C4B7935C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA97C851-1E4E-4055-96E6-689816EC0A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2FDF5C-373B-4F82-A7B1-1974E6E2DD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A39EBC4-9D83-42FE-8BB5-5E2581664DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc3_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B43F991-B9E6-4D22-9EDE-F5C29984E99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFEA96C0-26D5-4F17-8BDB-7EA7F7E470B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B00343-C685-4F40-866F-1424CBE89863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0_ga:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDA805E-2B55-49B4-80E6-6A52DBB04D59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/mvnforum-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20803",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/mvnforum-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en show.php en GL-SH Deaf Forum V6.4.3 y anteriores permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro sort. \r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gl-sh:deaf_forum:6.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617002C8-D5FE-40C7-89F0-0B03D8352892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/gl-sh-deaf-forum-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20781",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/gl-sh-deaf-forum-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) page, and (3) action parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de inyección SQL en show.php en GL-SH Deaf Forum v6.4.3 y anteriores permite a atacantes remotos inyectar código web o HTML de su elección a través de los parámetros (1) search, (2) page, y (3) action. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gl-sh:deaf_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.3",
            "matchCriteriaId" : "99866240-DFCC-4D10-BCBB-483C63C5111A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/gl-sh-deaf-forum-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20781",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/gl-sh-deaf-forum-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2023-11-07T01:58:58.873",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4011.  Reason: This candidate is a duplicate of CVE-2005-4011.  Notes: All CVE users should reference CVE-2005-4011 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: the vendor has disputed this report, stating \"If a non positive integer or non-integer is used for the page parameter for a search URL, the search query will use a negative number for the LIMIT clause. This causes the query to break, showing no results.  It IS NOT however a sql injection error.\"  While the original report is from a researcher with mixed accuracy, as of 20060703, CVE does not have any additional information regarding this issue"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDA ** Vulnerabilidad de inyección SQL en search.php en Phorum v5.1.14 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro page. NOTA: el fabricante ha discutido este tema, alegando que \"si un entero no positivo o un no entero es usado en el parámetro page para una URL de búsqueda, la solicitud de respuesta usará un numero negativo para la clausula LIMIT. Esto causa que la pregunta rompa, no mostrando resultados. Esto sin embargo, no es un error de inyección SQL.\" Mientras el informe original procede de un investigador con desigual exactitud, como 20060703, el CVE no tiene otra información adicional relacionada con el tema. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.14",
            "matchCriteriaId" : "2520A79B-FC05-47C4-9D15-46BDE0F6BEB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/phorum-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phorum.org/cgi-bin/trac.cgi/ticket/382#preview",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phorum.org/phorum5/read.php?14%2C114358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/phorum-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phorum.org/cgi-bin/trac.cgi/ticket/382#preview",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phorum.org/phorum5/read.php?14%2C114358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T17:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en GraceNote CDDBControl ActiveX Control, tal como se usan en múltiples productos que usan Gracenote CDDB, permite a usuarios remotos ejecutar código de su elección mediante una cadena de opción de gran longitud."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gracenote:cddbcontrol_activex_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61219A14-0CFB-408B-B914-AC4F029B32D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://europe.nokia.com/nokia/0%2C%2C93034%2C00.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047420.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gracenote.com/sec062706/SonySecurityNotification.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/701121",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://europe.nokia.com/nokia/0%2C%2C93034%2C00.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047420.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gracenote.com/sec062706/SonySecurityNotification.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/701121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica (heap) en Windows Live Messenger v8.0, permite a atacantes asistidos por el usuario ejecutar código de su elección a través de un archivo de listas de contacto (.ctt) manipulado, lo que provoca un desbordamiento cuando el archivo es importado por el usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_live_messenger:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC575B10-0BFB-4BA8-B42D-007DC85194B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1108/exploit.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.jaascois.com/exploits/18602016/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438442/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18639",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1108/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.jaascois.com/exploits/18602016/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438442/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función array_push en hashcash.c para Hashcash anterior v1.21 puede permitir a atacantes ejecutar código de su elección a través de entradas manipuladas. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.20",
            "matchCriteriaId" : "B0C41452-0374-4E1D-B608-8EDE233C2476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65CBCB5D-58F6-40DD-9614-91BF586E61F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A96B34E0-9386-4936-B214-62AE89F3719B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C11EE1F-FDA4-42E7-B180-B9AEE314C5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07CF74FD-1833-4A1A-A306-8E82F2E7C548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B08A94-5792-41D1-AF6E-BFC684797954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCF3B97-3B1B-439B-BEFA-A46EA8FDD2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD5C44F-D35E-44CE-9F53-F0417AE13B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "949C12FC-47EC-4569-A94E-84EFB37680F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7EB97DC-4109-4C2A-842A-373D36977DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE9787F-5DCF-4EFD-9FCC-DD4C8DCD113C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D1FFD8-755F-4B7E-8E45-25789E5D816F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB3DBD1-D3A8-43AE-B1A0-9F38FD090FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCBD2CA-59A9-4CEA-B123-EFF854B0E655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB18B81-7158-4366-A6D4-4F2072B81DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6152DF4C-DE31-4724-BEFF-1F5081D044F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD231A8-E9B7-4B1C-A9FD-0448D51FC99F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07E038B-91DB-4539-95D8-55F0A50AEDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A175EB6-0A7C-489D-AF57-BBFE5E380D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0437D295-BB19-4CA0-9084-553A0C07CD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC00C60-E987-48CA-B41A-6B8D7C3CDF93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20800",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20846",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21146",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-25.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hashcash.org/source/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18659",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2551",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hashcash.org/source/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el software Online Registration Facility for Algorithmic Research PrivateWire VPN hasta v3.7 permite a atacantes remotos ejecutar código a su elección mediante una petición GET larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:algorithmic_research:privatewire_gateway:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E6A91F-F7F7-4F23-A65F-024D92B0605F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438329/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18647",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438329/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results, which might allow remote attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Apple File Protocol (AFP)server en Apple Mac OS X v10.4 actualizado a v10.4.6 incluye el nombre de ficheros con restricción y directorios dentro de resultados de busqueda, lo que puede permitir a atacantes remotos obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.7"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en CA Integrated Threat Management (ITM), eTrust Antivirus (eAV) y eTrust PestPatrol (ePP) r8 permite a atacantes provocar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar código de su elección a través de un tarea de escaneado con un cadena de formato en el campo \"description\" (descripción)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D3160D-539D-4E26-8B0B-C372315EE700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_pestpatrol:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A40FA2-B23F-43B0-84B2-77E45F75ED57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:integrated_threat_management:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C167CC34-95AE-45CD-A1CE-64FF738DE25E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438503/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438582/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438503/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438582/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) filter or (2) sort parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.html de BNBT TrinEdit y EasyTracker v7.7r3.2004.10.27 y versiones anteriores. Permiten a usuarios remotos inyectar codigo de script web o código HTML de su elección a través de los parámetros (1) filter o (2) sort."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bnbt:easytracker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7_r3_2004-10-27",
            "matchCriteriaId" : "1B621C87-16C0-4BA4-9C98-068CE388CC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bnbt:trinedit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7_r3_2004-10-27",
            "matchCriteriaId" : "29FD7F3C-8FE4-408E-AAB1-0EB19E4D5F10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20774",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The product no longer being maintained."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) ep parameter to search.php and the (2) subject parameter in comment.php (aka the Subject field when posting a comment)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en e107 v0.7.5, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de (1) el parámetro ep en search.php y (2) el parámetro subject de comment.php (también conocido como el campo Subject cuando se añade un comentario)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.5",
            "matchCriteriaId" : "453D7323-69AA-4283-8C6A-70A03624139A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C34EB0-7685-4346-81A2-371C1F19F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB26A2A4-B0DE-4130-AA5F-76D5394A0614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90909932-AD39-4648-8621-5866F0C4AB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F208E9-3C39-4D00-B1E0-5CD0B315E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7402F-54C9-4FDA-B181-85941DDC7010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F77F5E4-8636-41F5-9A80-055CC0FC0346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AB914E-D616-45D2-A451-1C247B8B6E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA03C1AC-97EA-47ED-9558-A7CA48420AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32695A82-B042-46B7-9CB4-20F3446E0C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716A040-0CBE-4402-AB2A-1621B1240B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81627355-AB45-4D47-8DD2-4087E6971EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437C4251-886C-4E94-B7F6-AE34A0142A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D4EE9-0D54-4370-BCBC-3C23481C127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11E3F9E-708E-44CB-8FD2-E4961028B732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F38EB42-437C-4381-B36A-FD3DB78E724E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6454D949-83A2-4F69-92E1-BBCD84F21BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4B3A4-2563-4C06-A484-5C02CD8F7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E80F85C-61AD-49C0-9EBF-B79F728F6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE097FC-A525-4599-9FDA-1A011EECE767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF51B0D-E020-491D-92A9-D2A01A7417AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692341-8DF2-4943-853A-4AAF1F313914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75197306-53DB-4C94-959B-C46D3FB1F42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C5C91C-C1C5-457D-9E09-24C7CACCC280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB88C92-4F62-471A-8C10-C13C890E764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5585DC36-C65F-4FCA-B26F-E4A7901863E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD56C-66F7-421C-B211-07C7856112C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E14B108-228D-454F-AF16-9D9086E4C10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C91C45-9A96-4E69-8A0A-D619AB45BC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7C68F4-9ECD-41A9-B4AE-48F028841428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AA824A-CEE6-460B-A668-92FC3A822305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17F613A-6BE1-4B45-8E40-8E44E0EEA756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB33E9-9AB8-482A-A196-768A2085A49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E294FE-F0A2-45FC-BB67-D988DD89D2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9640315B-7F04-4F5A-B213-8FAF509DFF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF75A192-81C1-4F58-A660-7EFE4F33E58B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20727",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437649/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437649/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en vlbook v1.02, permite a atacantes remotos  inyectar secuencias de comandos web de su elección a través del parámetro \"message\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtual_design_studios:vlbook:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0911187-1B66-44FF-8BB7-6CB2ABCFFFCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://colander.altervista.org/advisory/vlbook.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20776",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438146/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://colander.altervista.org/advisory/vlbook.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438146/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log."
      }, {
        "lang" : "es",
        "value" : "Secuencias de comandos en sitios cruzados (XSS) en Trend Micro Control Manager (TMCM) v3.5 permite a atacantes remotos inyectar secuencias de comandos (script) web o HTML a través del campo nombre de usuario en la página de inicio de sesión, el cual no está correctamente filtrado antes de ser mostrados en el registro de errores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:control_manager:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4801FB64-FFC4-4167-9855-69EB8A424EE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438158/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438158/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el modulo Weblinks (weblinks.php) en Mambo v4.6rc1 y anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"title\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:rc1:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "73D1A8C8-1B81-45C0-8471-77D4420B9D7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/mambo_46rc1_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20745",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mamboserver.com/?option=com_content&task=view&id=207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437496/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/mambo_46rc1_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mamboserver.com/?option=com_content&task=view&id=207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437496/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el modulo Weblinks (weblinks.php) en Mambo v4.6rc1 y anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"catid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:*:rc1:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "73D1A8C8-1B81-45C0-8471-77D4420B9D7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.mamboserver.com/?option=com_content&task=view&id=207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mamboserver.com/?option=com_content&task=view&id=207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in mclient.cgi in Namo DeepSearch 4.5 allows remote attackers to inject arbitrary web script or HTML via the p parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en mclient.cgi en Namo DeepSearch v4.5 permite a atacantes remotos inyectar secuencias arbitrarias de comandos web o HTML a través del parámetro \"p\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:namo:deepsearch:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C8A230-8229-4358-81D4-F4506723423F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016366",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kil13r.info/sa/Kil13r-SA-20060622-2.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438240/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kil13r.info/sa/Kil13r-SA-20060622-2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438240/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Qdig before 1.2.9.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pre_gallery or (2) post_gallery parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos cruzados (XSS) index.php en Qdig anterior a v1.2.9.3, cuando register_globals está activado, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del los parámetros (1) pre_gallery o (2) post_gallery."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB11FC78-E22C-4343-BB8A-7FFF9E17B4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD8754F3-C0E8-43A6-9F92-60FF711B5EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C642F82-5326-4734-A002-DF0591C3330D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A952AD10-6E7B-4033-816D-9B264FB193DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFC4FDD-9349-446C-84E3-DD5E9C349AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E259D5D1-81B5-41F7-9706-9743E8394200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFCA115-8553-43DF-A050-88ACD24725CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194FF271-D5ED-4068-9DCD-454EE6DD920E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09992F4F-8CF5-496A-899D-B7904C9A03DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD133CE-48DE-45F0-8C80-3D09E980893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05605FA0-36B6-4C21-9CAB-FFE2656845CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1322E977-D411-44BE-B66A-91B1C104FE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdig:qdig:1.2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7059F50F-B1CB-4D33-8C8F-8D70CBB35A92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://qdig.sourceforge.net/News/News2006-06-24-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20808",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://qdig.sourceforge.net/News/News2006-06-24-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) header parameter to (a) conad/include/rootGui.inc.php and (b) include/rootGui.inc.php; (2) mysqlCall parameter to (c) conad/changeEmail.inc.php, (d) conad/changeUserDetails.inc.php, (e) conad/checkPasswd.inc.php, (f) conad/login.inc.php and (g) conad/logout.inc.php; (3) mysqlcall parameter to (h) include/listall.inc.php; (4) prefix parameter to (i) show/index.php; and (5) config parameter to (j) conad/include/mysqlCall.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo PHP en el Bee-hive Lite v1.2 y versiones anteriores, permite a atacantes remotos, cuando register_globals está habilitado, ejecutar código PHP a su elección a través de una URL en el parámetro (1) header a (a) conad/include/rootGui.inc.php y (b) include/rootGui.inc.php; (2) parámetro mysqlCall a (c) conad/changeEmail.inc.php, (d) conad/changeUserDetails.inc.php, (e) conad/checkPasswd.inc.php, (f) conad/login.inc.php y (g) conad/logout.inc.php; (3) parámetro mysqlcall a (h) include/listall.inc.php; (4) parámetro prefix a (i) show/index.php; y (5) parámetro config a (j) conad/include/mysqlCall.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magnet:bee-hive_lite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "772857AC-F993-4931-8883-8E571B4F2A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20814",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Infinite Core Technologies (ICT) 1.0 Gold and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Infinite Core Technologies (ICT) v1.0 Gold y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"post\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infinite_core_technologies:ict:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_gold",
            "matchCriteriaId" : "4C0FCB92-E1B1-46FE-BB2A-1A16DAE9E979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/ict-infinite-core-technologies-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20806",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/ict-infinite-core-technologies-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T22:13:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en ImageIO de Apple Mac OS X v10.4 hasta la v10.4.6 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar código de su elección a través de una imagen TIFF modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/988356",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/988356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T22:13:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error."
      }, {
        "lang" : "es",
        "value" : "OpenLDAP en Apple Mac OS X v10.4 up a v10.4.6 permite a atacantes remotos causar una denegación de servicio (caída) a través de una petición LDAP no válida que lanza un error assert."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016396",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/652196",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18686",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18728",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/652196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-27T22:13:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en la función CF_syslog launchd en Apple Mac OS X v10.4 hasta v10.4.6 permite a usuarios locales ejecutar código de su elección a través de especificadores de formato de cadena que no son manejados adecuadamente en una llamada syslog en la facilidad logging, como quedó demostrado usando un fichero plist manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438699/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438699/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0456",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-27T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The strnlen_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local users to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "La función strnlen_user en el kernel Linux anterior a la versión 2.6.16 en IBM S/390 puede devolver un valor incorrecto, lo que permite a usuarios locales provocar una denegación de servicio mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=331c46591414f7f92b1cec048009abe89892ee79",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=331c46591414f7f92b1cec048009abe89892ee79",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.16-rc6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mail-archive.com/kernel-svn-changes%40lists.alioth.debian.org/msg01631.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18687",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9909",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=331c46591414f7f92b1cec048009abe89892ee79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=331c46591414f7f92b1cec048009abe89892ee79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.16-rc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/kernel-svn-changes%40lists.alioth.debian.org/msg01631.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2200",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-28T01:45:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en libmms, utilizado por (a) MiMMs v0.0.9 y (b) xine-lib v1.1.0 y versiones anteriores, permite a atacantes remotos causar una denegación de servicio (cuelgue de aplicación) y posiblemente ejecutar código arbitrario a través de (1) send_command, (2) string_utf16, (3) get_data, y (4) funciones get_media_packet ,y  posiblemente otras funciones.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mimms:mimms:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8336443A-DE31-4DD7-AA6A-82D7B33332A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB10333-6C25-4359-BB3F-D76468170825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374577",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20749",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20948",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20964",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21023",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21036",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21139",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23218",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23512",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-07.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.433842",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=468432",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:117",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:121",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18608",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-309-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-315-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2487",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.433842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=468432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-309-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-315-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T01:45:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter.  NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that \"the userid parameter is run through our filtering system as an unsigned integer."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en member.php en vBulletin v3.5.x permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro u. NOTA: el vendedor impugna la importancia de este informe, manteniendo que les ha sido imposible reproducir la vulnerabilidad y que \"el parámetro userid es filtrado a través de nuestro sistema como un entero sin signo.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F1E282-4066-49AB-9596-8B2FFA68164C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.0_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87616537-EBD6-42FD-B7F7-E2977C8FD81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C80E010-C3B1-4513-BB70-CCDD1BE0A265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A138ED-6467-45BB-9E6E-31FEFCF582EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.0_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7162E3FF-B888-4C3D-8A83-881F386E218B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C90C0A-3083-47BC-BC3F-AD0A04089C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83E2186-9935-4103-886F-E90411A1885F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6226F609-7F9E-4FC3-986D-B984CDBA0898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A869E6C9-6CA7-4FB8-88E2-142C6294D028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4070579C-00AD-4DB1-8B07-4CB88D4EDBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E53DA6-83A3-493A-8C98-DEA91F91D71E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016348",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437817/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438364/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437817/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438364/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T01:45:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in newthread.php in Woltlab Burning Board (WBB) 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en newthread.php en Woltlab Burning Board (WBB) 2.0 RC2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"boardid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833E4A46-5D42-4EA5-9D35-E0E07291D5EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438252",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18597",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T01:45:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in showmods.php in Woltlab Burning Board (WBB) 1.2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en showmods.php en WoltLab Burning Board (WBB) v1.2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro de BoardID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8500A6-F97A-40C5-A70F-91273FF345D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438184",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18597",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T01:45:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in report.php in Woltlab Burning Board (WBB) 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en report.php en Woltlab Burning Board (WBB) v2.3.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"postid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40CCEE5-4B68-4F45-911F-0A7089A0609D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/lists/bugtraq/2006/Jun/0614.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18597",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/lists/bugtraq/2006/Jun/0614.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T01:45:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including (1) calendar/myagenda.php, (2) document/document.php, (3) phpbb/newtopic.php, (4) tracking/userLog.php, and (5) wiki/page.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Claroline v1.7.7, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores de ataque no especificados, posiblemente (1) calendar/myagenda.php, (2) document/document.php, (3) phpbb/newtopic.php, (4) tracking/userLog.php y (5) wiki/page.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB99DB46-C0C6-4A46-A0B2-CC71C10C62A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.claroline.net/dlarea/claroline.patch17701.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438343/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.claroline.net/dlarea/claroline.patch17701.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438343/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en includes/functions_cms.php en THoRCMS v1.3.1 permite a atacantes remotos ejecutar código PHP a su elección a través del parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thorcms:thorcms:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A580C7-147F-4884-B0D3-784D4BB4E3E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20815",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18637",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in cms_admin.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via multiple unspecified parameters, such as the add_link_mid parameter.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en cms_admin.php en THoRCMS v1.3.1 permite a atacantes remotos ejecutar comandos SQL a su elección a través de multitud de parámetros no especificados, como el parámetro add_link_mid. NOTA: la procedencia de esta información es desconocida; algunos de los detalles son obtenidos por información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thorcms:thorcms:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A580C7-147F-4884-B0D3-784D4BB4E3E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/2527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-24T18:56:46.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1) country and (2) sort_by parameters in (a) search_results.php; (3) browse parameter in (b) featured_photos.php; (4) cid parameter in (c) products.php, (d) index.php, and (e) news_desc.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de múltiples inyección SQL en Softbiz Dating v1.0 permite a los atacantes remotos, ejecutar comandos SQL a través del parámetro (1) country y (2) sort_by en (a) search_results.php; parámetro (3) browse en (b) featured_photos.php; parámetro (4) cid en (c) products.php, (d) index.php, y (e) news_desc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbizscripts:dating_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F620AC-CE0C-40F5-91DD-FDF199E3EA25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1163",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438245/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18605",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2512",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27383",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438245/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct actions as another user, such as changing usernames and passwords, via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en menu.php en Some Chess v1.5 rc2 permite a atacantes remotos realizar acciones como otro usuario, tales como cambiar nombres de usuario y contraseñas, mediante vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astrodog_press:some_chess:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF74DDF5-817C-49B1-861A-7266D10865AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary web script or HTML via the user parameter (\"New Name\" field)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en menu.php en Some Chess v1.5 RC1 permite a atacantes remotos inyectar HTML o scripts web a través del parámetro de usuario (Campo \"New Name\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astrodog_press:some_chess:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D7AF4F-A18E-4D70-80C8-817F8AE3B7B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20770",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \\ (backslash) characters in the URL to certain directories under the web root, such as the image directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en versiones de Webmin anteriores a la v1.280, cuando se ejecuta en Windows, permite a atacantes remotos leer ficheros arbitrarios a través del carácter \\ (barra invertida) en la URL a determinados directorios bajo la raíz Web, tales como el directorio de imagenes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.70",
            "matchCriteriaId" : "72A55881-A6A1-47F7-BEE5-E27981B2FE36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD941A62-A41E-41CB-80C0-8B780AC39FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786287DD-2565-4931-BBA0-2CACD7671352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4784DC04-D2C5-46C6-831F-23D69B4B0513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C219DAB-C13C-4232-8B98-2D7A9ED16E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2367974490/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20777",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438149/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2367974490/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438149/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 1.280."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encoded user parameter in a viewprofile action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en profile.php en YaBB SE v1.5.5 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de parámetros de usuario double-encoded en una acción viewprofile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:*:*:second_edition:*:*:*:*:*",
            "versionEndIncluding" : "1.5.5",
            "matchCriteriaId" : "4E1FE090-2BA1-474E-8850-634E239CE452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.1:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "81CD19BD-CF9C-4699-B167-686635A539A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.2:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "2FEEB3E5-18A7-47E1-ADFF-4D74D68DC70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.4:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "7B26D66C-05CC-4A25-98CD-B2C055EB0518"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115102378824221&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20780",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115102378824221&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP service and (2) unspecified vectors involving the \"parsing of HTTP URL schemes\"."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en memoria dinámica -heap- en RealNetworks Helix DNA Server v10.0 y v11.0 permite a atacantes remotos ejecutar código de su elección a través de (1)una cabecera larga HTTP User-Agent en el servicio RTSP y (2) vectores no especificados que incluyen \"parsing of HTTP URL schemes\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_dna_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF76B16-1FFB-49BF-A4B6-F4A5330C4C25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realnetworks:helix_dna_server:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA85105-4EEB-408B-8F49-DB53CFA74B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0600.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200606-01.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20784",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200606-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to Helix DNA Server version 11.1 :\r\nhttps://helix-server.helixcommunity.org/2005/devdocs/builds"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument."
      }, {
        "lang" : "es",
        "value" : "El servicio SMTP de MailEnable Standard v1.92 y anteriores, Professional v2.0 y anteriores, y Enterprise v2.0 y versiones anteriores, antes de MESMTPC hotfix,permiten a atacantes remotos causar una denegación de servicio (caída de programa) a través del comando HELO con un byte nulo en el argumento, probablemente lanzando una inconsistencia de longitud o pérdida de argumento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00",
            "matchCriteriaId" : "DD302C38-8169-458F-966C-F7D50E3452BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.01",
            "matchCriteriaId" : "3FC28A2B-2E07-42F3-A2D2-B6D73F45EC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "7D7F1033-3C99-4E4F-8068-910B23C0673F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "530449CF-D4A5-4F38-8C1D-F088A4C5170A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "9DF53C9E-8389-4AF1-881D-A67613CF3B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03",
            "matchCriteriaId" : "5712D941-4D46-4F10-B12E-1FA036ACA6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04",
            "matchCriteriaId" : "358AEB41-C0E6-4A62-A31D-5600CF2056BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "DDBD081D-2E42-44EC-80D4-B602A03339F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D078B497-4C3C-4246-87C5-58DC5EEED452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97DD9EC9-1A27-4A96-95A1-086DEA1E3890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "193959CF-DAF3-4C62-8DB0-660115E1D41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A827A0E-BDF2-4BAB-9F52-0014FE6E4B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82CF54A9-CF50-4B23-8E3A-AFB08F7F98F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.009:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BA53BA-CDF5-42EC-8D2B-EC24FDF82931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1E90C-AA06-4A89-90B3-0E7140F9B8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "060D809A-C603-4E06-9F57-3C76FEE6F86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.012:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53DE94B-0C32-4DDB-B13B-7B05208477AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5EA901-CD07-464B-8EB0-8F845EDABAA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B2611A-D7CF-441A-BA60-F27CF28BEB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139C2FC-4DA3-4193-B130-05524EB97C69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78B7FD6-2433-4EAA-8B3E-0507F81D54FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.0.017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8B058B-F517-46C4-AC05-8EC258E38A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF16E400-930E-4845-BB23-ED1217505302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFAF9C8-DB67-446E-B63C-530CB0C170B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F30383-D23F-4CA5-BC02-7716398BC042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADEF40C-4C56-4893-B757-15966ED5A925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE40F5BA-6174-4959-BFD1-CCECAB138009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6DCAFE-CAC2-4B36-B3E1-FA2B490424EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB9A9BE-5EBD-4C06-BB95-942A65D58C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F246E4-3B8B-475C-9DBE-49503C451EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C8E86-F7CA-4217-A3C1-71CBE5CAB825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D35AD18C-CA58-4DFC-A60F-49B698607B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B219EBD1-B0E9-4599-B633-AA4C227E5854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81249BA3-3D1D-4388-BE8D-28AB5CA3AFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771D029C-9F4A-41F9-8F86-F1B1BD38B329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32956E6-A13B-4663-BBC9-FEB08A1DCC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AABE2F0-FEC1-4BDE-B1C0-92FF2CEA48E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652F54CA-1CCA-4BC9-8728-A0F6FABF8817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BCB9D-9AEF-40E2-8291-50EC2A083775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88435083-D7A8-4679-BEB1-4B6526454C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145A8B1A-573D-4695-B66A-FF8EA2556DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9572349-9433-415F-B81B-10A1375AF33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A9222A-6F22-40BD-8411-69A90E8E46AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4AADE9-F3FB-4272-8026-58FC677D3F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD53801-B8F7-4AE8-BA2B-AC6297340CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D0A401-2FB6-4720-B0AF-550FB71FBAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2057482-7505-472E-8EF4-300B2A26AB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED2AC32-5485-4707-9E15-903BDD556719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652E1512-B1B1-44B5-93CF-9C526B95BA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835FBA2-79E4-4541-913C-21BAD3320D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9449E3-1CEA-40AF-BD00-94B56E38AF5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39724984-2A10-441F-A103-2DFA693F4F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D01DB7FF-7171-43D2-96F3-E5C0AABA4877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B95FCC-55C7-4B44-B8C7-85792C7E91BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E07556-02E5-42FA-9338-3176EB2ED536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539C5F71-83FC-455C-8180-72C9F1E2C4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C4D762-BF84-4734-B9AD-ED9F3FB85D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B410FC-650E-4E51-8634-D99113E8B1AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C6B358-93A6-4A9A-B284-9DFA9C981620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2638B249-E955-48B3-A309-EF92737E015D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F275DA6-7799-4B51-8F9C-DD23E8A3C5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.114:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB961BA-8FAB-4FC5-B582-AF758E7D0E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.115:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A400F721-435F-4EBA-8BC2-92E4769A35A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.116:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61206A1A-FF1A-4A45-8952-509168BD8495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6618B6DC-77E8-441E-B3A2-AEFFAADCD702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFC8653-88CB-4AD9-B2C6-6D1F73354222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D6B18C1-6D0D-4E4C-BE98-1337061847CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0481E8-356F-404B-8931-30FA058564CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.704:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B5C969-EDB7-4839-8CD2-23F88A4F3BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEA17FF-5E97-4E57-9AE0-132D26600AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD596361-5520-4CDC-A96C-B19B8DEA6919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0465E63F-584D-47FC-9081-B03FBDA2B6EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:1.5018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5879495-DB93-4F1A-B48F-369F198492AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20790",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.divisionbyzero.be/?p=173",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.divisionbyzero.be/?p=174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mailenable.com/hotfix/mesmtpc.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438374/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2520",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.divisionbyzero.be/?p=173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.divisionbyzero.be/?p=174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mailenable.com/hotfix/mesmtpc.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438374/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) next_template, (2) start, (3) curr_menu_id, and (4) arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html template_name."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en H-Sphere v2.5.1 Beta v1 y anteriores permiten a atacantes remotos inyectar código web o HTML de su elección a través de los parámetros (1) next_template, (2) start, (3) curr_menu_id, y (4) arid en psoft/servlet/resadmin/psoft.hsphere.CP cuando es usado mailman/massmail.html template_name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1_beta_1",
            "matchCriteriaId" : "B52831D1-1B5D-4045-A74A-A1163F2FEFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59208DB5-718A-4A40-BFCC-181ADE8DAF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.5_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C27180-B447-4D59-948C-3C83477F5A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.5_patch_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0301E370-8870-4A0A-9D76-7BE1EF490903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:positive_software:h-sphere:2.5_rc_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FBC19A-4629-47EB-9DDF-899EC9B48B1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/h-sphere-25x-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20798",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/h-sphere-25x-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Sex parameter in index.php, (2) ProfileType parameter in join_form.php, and (3) Email parameter in forgot.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en eaDating v4.1 permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro(1) Sex en index.php, (2) parámetro ProfileType en join_form.php, y(3)parámetro Email en forgot.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aewebworks:aedating:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE269866-45CD-483F-933A-937683A47020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20820",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438157/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438157/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, aka \"Redirect Cross-Domain Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de dominios cruzados en Microsoft Internet Explorer v6.0 permite a atacantes remotos acceder la información restringida desde otro dominio a través de una etiqueta object con un parámetro data que referencia un enlace en el sitio original del atacante que especifica una cabecera Location HTTP que referencia un sitio objetivo, lo que luego hace que el contenido esté disponible a través del atributo outerHTML del objeto, como \"Redirect Cross-Domain Information Disclosure Vulnerability.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047398.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060627/3d930eda/PLEBO-2006.06.16-IE_ONE_MINOR_ONE_MAJOR.obj",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20825",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/internet_explorer_information_disclosure_vulnerability_test",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/883108",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438785/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438788/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438811/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438864/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439146/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060627/3d930eda/PLEBO-2006.06.16-IE_ONE_MINOR_ONE_MAJOR.obj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/internet_explorer_information_disclosure_vulnerability_test",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/883108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438785/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438788/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438811/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438864/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439146/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\\ (%2e%2e%5c) sequences and whose extension contains the CLSID Key identifier for HTML Applications (HTA), aka \"Folder GUID Code Execution Vulnerability.\"  NOTE: directory traversal sequences were used in the original exploit, although their role is not clear."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer v6.0 no maneja apropiadamente los eventos Drag y Drop, lo que permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un enlace al fichero compartido SMB con un nombre que contiene una secuencia codificada ..\\ (%2e%2e%5c)y cuya extensión incluye al identificador CLSID Key para HTML Applications (HTA), como \"Folder GUID Code Execution Vulnerability.\" NOTA: la secuencia de salto de directorio fue usado en el exploit original, aunque sus roles no quedan claros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047398.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060627/3d930eda/PLEBO-2006.06.16-IE_ONE_MINOR_ONE_MAJOR.obj",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20825",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/655100",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047398.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060627/3d930eda/PLEBO-2006.06.16-IE_ONE_MINOR_ONE_MAJOR.obj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/655100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "requirements.php in Dating Agent PRO 4.7.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function."
      }, {
        "lang" : "es",
        "value" : "requirements.php en Dating Agent PRO v4.7.1 permite a atacantes remotos obtener información sensible a través de peticiones directas, que llaman a la función phpinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datetopia:dating_agent_pro:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D636B249-2A04-4411-8941-36F7C372FAD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20833",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438160/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438160/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Dating Agent PRO v4.7.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través (1)del parámetro pid en picture.php, (2) el parámetro mid en mem.php, y los parámetros (3) sex y (4) relationship en search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datetopia:dating_agent_pro:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D636B249-2A04-4411-8941-36F7C372FAD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438160/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438160/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in (1) webmaster/index.php and (2) search.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Dating Agent PRO v4.7.1 permite a atacantes remotos inyectar código web o HTML a través del parámetro login en (1) webmaster/index.php y(2) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datetopia:dating_agent_pro:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D636B249-2A04-4411-8941-36F7C372FAD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20833",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438160/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438160/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955)."
      }, {
        "lang" : "es",
        "value" : "La base de datos interna en Cisco Wireless Control System (WCS) para Linux y Windows anterior a v3.2(51) utiliza un nombre de usuario indocumentados no modificable y una contraseña, lo cual permite a usuarios remotos autenticados leer, y posiblemente modificar, datos de configuración confidenciales (alias errores CSCsd15955)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(40\\)",
            "matchCriteriaId" : "27D5B317-EE0B-4A87-B642-DB0589CA55A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database (aka bug CSCsd15951)."
      }, {
        "lang" : "es",
        "value" : "La base de datos interna de Cisco Wireless Control System (WCS) para Linux y Windows en sus versiones anteriores a la v3.2(63) almacena de manera fija en el código un usuario y contraseña en texto plano en ficheros sin especificar, lo que permite a usuarios autenticados remotos acceder a la base de datos (también conocido como bug CSCsd15951)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(51\\)",
            "matchCriteriaId" : "1B0A192A-AC2C-494D-9AFD-EB4C5DA536B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username \"root\" and password \"public,\" which allows remote attackers to gain access (aka bug CSCse21391)."
      }, {
        "lang" : "es",
        "value" : "Cisco Wireless Control System (WCS) para Linux y Windows en sus versiones anteriores a la v4.0(1) usa el nombre de usuario administrador por defecto \"root\" y la contraseña \"public,\" lo que permite a atacantes remotos obtener acceso (también conocido como bug CSCse21391)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0\\(1\\)",
            "matchCriteriaId" : "969AE81A-6E2F-4414-AFB9-43F5C635458D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51), when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el servidor TFTP de Cisco Wireless Control System (WCS) para Linux y Windows en sus versiones anteriores a la v3.2(51). Cuando está configurado para utilizar un nombre de ruta de directorio que contiene un espacio en blanco, permite a usuarios autenticados remotos leer y sobreescribir ficheros de su elección a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(51\\)",
            "matchCriteriaId" : "1B0A192A-AC2C-494D-9AFD-EB4C5DA536B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a \"malicious URL\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la página de inicio de sesión del interfaz HTTP de Cisco Wireless Control System (WCS) para Linux y Windows en sus versiones anteriores a la v3.2(51). Permite a usuarios remotos inyectar codigo de script web o código HTML a través de vectores de ataque desconocidos que involucran una \"URL maliciosa\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(51\\)",
            "matchCriteriaId" : "1B0A192A-AC2C-494D-9AFD-EB4C5DA536B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request."
      }, {
        "lang" : "es",
        "value" : "El servidor HTTP de Cisco Wireless Control System (WCS) para Linux y Windows en sus versiones anteriores a la v3.2(51) almacena información confidencial bajo el directorio raiz web con insuficiente control de acceso, lo que permite a atacantes remotos obtener nombres de usuario y rutas de directorios a través de peticiones directas de URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(51\\)",
            "matchCriteriaId" : "1B0A192A-AC2C-494D-9AFD-EB4C5DA536B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the \"Local User List Only (Individual Passwords)\" setting, which removes all security and password configurations and allows remote attackers to access the system."
      }, {
        "lang" : "es",
        "value" : "El interfaz web de Cisco IOS 12.3(8)JA y 12.3(8)JA1, tal como es utilizado en Cisco Wireless Access Point y Wireless Bridge, se reconfigura cuando se activa la opción de configuración \"Local User List Only (Individual Passwords)\", lo que elmina toda las configuraciones de seguridad y contraseñas y permite a atacantes remotos acceder al sistema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701FFB8-6361-4B0F-B413-2649A6FC650E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC4D9F-F7C1-4887-BDC6-62F4BDFE5079"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-ap.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/544484",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060628-ap.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/544484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-28T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the \"LIKE\" keyword in the searchdata parameter (search field)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Search gadget en Jaws 0.6.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro searchdata con la opción LIKE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaws:jaws:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6D4750-A567-47D2-A250-574A4FF558DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/JAWS_062_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.jaws-project.com/index.php?blog/show/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18665",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/JAWS_062_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.jaws-project.com/index.php?blog/show/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "parse_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause a denial of service (crash) via empty IRC CTCP NOTICE messages."
      }, {
        "lang" : "es",
        "value" : "parse_notice (TiCPU) en EnergyMech (emech) antes de v3.0.2 permite a atacantes remotos provocar una denegación de servicio (cuelgue) a través de mensajes IRC CTCP NOTICE vacios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF4FA892-9A61-47CA-8011-9789D75F00D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C6E40E-390D-4CF3-B9F2-0A8BCCC5C99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB0B126-9B14-4AC2-BB3B-49E1B5DBD4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8553A73E-8854-45B4-AFEE-C95BF023A6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B57814-527D-4723-B4F7-B89C32F072DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D64366-3619-417D-BF16-568C35029A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.8.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51CC86B-5698-499B-98E6-D0F774A81F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.9.4_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091109B5-83B3-4E59-A78C-0D39AB95D4DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:2.99.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3902340-B437-4EC9-A142-E9C276E2C9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6A79BF-B6D0-4A9D-80C4-A2770C8904BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proton:energymech_irc_bot:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F01B9-E9EF-4705-B346-8B6938449A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20805",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20837",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.energymech.net/versions-3.0.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-26.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18664",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.energymech.net/versions-3.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200606-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo remoto PHP en mod_cbsms_messages.php en CBSMS Mambo Module v1.0 y anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cbsms:mambo_module:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D0353F-E1AA-4592-BD06-29985582B183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20823",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18660",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary web script or HTML via the title parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en header.php en Open Guestbook v0.5 permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro tittle."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:georgecurrums:open_guestbook:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412F81FE-221A-4B73-9DAB-6D38371190C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20796",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1166",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438381/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18666",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2545",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27397",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/20796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438381/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el archivo view.php en Open Guestbook v0.5, lo que permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro offset."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:george_currums:open_guestbook:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520FD3FC-4A25-4AD5-A5C0-C388C36D0A63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438381/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18666",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438381/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the icq parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en error.php en UebiMiau Webmail v2.7.10 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro icq. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uebimiau:uebimiau:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.2",
            "matchCriteriaId" : "CB4C659E-290B-40A6-A196-2C5E5B244978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uebimiau:uebimiau:2.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98A2199-8753-4243-98D1-94CD1F4E4B45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/2513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, which triggers the crash in jscript.dll."
      }, {
        "lang" : "es",
        "value" : "Yahoo! Messenger v7.5.0.814 y v7.0.438 permite a atacantes remotos provocar una denegación de servicio (caída) a través de mensajes que contiene caracteres non-ASCII, lo que provoca la caída en jscript.dll."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:7.0.438:*:*:*:*:*:*:*",
            "matchCriteriaId" : "451603CE-2DAF-47AF-A1E6-F79A514E1E51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:7.5.0.814:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45452EA7-2FE3-496C-A523-6B5CDDB0C540"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20773",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.nnov.ru/Gnews281.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18622",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.security.nnov.ru/Gnews281.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary web script or HTML via the group parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Usenet Script 0.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"group\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metalheadws:usenet:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4BABE3-B9E0-47C0-9C2A-92A0156351D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438443/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18662",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438443/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOT_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusion remota de fichero PHP en sms_config/gateway.php en PhpMySms v2.0 y anteriores permite a atacantes remotos ejecutar código PHP arbitrario a traves de una URL en el parámetro \"ROOT_PATH\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmysms:phpmysms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "DD12C17E-7541-48BB-AEAB-4D7EBA0B50EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpQLAdmin 2.2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) user_add.php or (2) unit_add.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpQLAdmin v2.27 y anteriores, permite a atacantes remotos la inyección de secuencias de comandos web o HTML de su elección a través del parámetro \"domain\" en (1) user_add.php o (2) unit_add.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpqladmin:phpqladmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.7",
            "matchCriteriaId" : "0D8652D4-47B9-4EBF-8F95-00F38A186516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/phpqladmin-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/phpqladmin-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in mod_cbsms.php in CBSMS Mambo Module 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosC_a_path parameter.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del fichero en mod_cbsms.php en CBSMS Mambo Module v1.0 y anteriores, cuando register_globals es habilitado, permite a los atacantes remotos ejecutar arbitrariamente código PHP a través de una URL en el parámetro mosC_a_path. NOTA: La procedencia de esta información es desconocida; parte de los detalles has sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cbsms:mambo_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "D2A33B88-CE8D-4D89-B882-5F0AB8F7B15A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/2528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) to parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en pm.php en DeluxeBB v1.07, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) subject o (2) to."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.07",
            "matchCriteriaId" : "6AEFACE5-6714-4ACF-B8D9-6F8EF554C236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/deluxebb-107-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/deluxebb-107-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en cp.php en DeluxeBB v1.07 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro xmsn."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.07",
            "matchCriteriaId" : "6AEFACE5-6714-4ACF-B8D9-6F8EF554C236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20813",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016384",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438342/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18648",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438342/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) f_user parameter in index.php, the (2) pag parameter in messages.php, or the (3) lid, (4) tid, and (5) sid parameters in error.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en UebiMiau Webmail v2.7.10, y v2.7.2 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) f_user en index.php, (2) pag en messages.php, o (3) lid, (4) tid, y (5) sid en error.php.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uebimiau:uebimiau:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.2",
            "matchCriteriaId" : "CB4C659E-290B-40A6-A196-2C5E5B244978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uebimiau:uebimiau:2.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98A2199-8753-4243-98D1-94CD1F4E4B45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/uebimiau-webmail-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/22375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/uebimiau-webmail-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/22375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before 20060501-0142-jam, and possibly earlier versions dating back to 2006-02-23, might allow remote attackers to inject arbitrary web script or HTML via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en la función preparestring en lib/common.php en Project EROS bbsengine en versiones anteriores a 20060501-0142-jam, y posiblemente versiones anteriores a 23-02-2006, podría permitir a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2006-04-29",
            "matchCriteriaId" : "5C1DEC72-0DAE-4339-A9AD-A8BA78A6A784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-02-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEBB199-4353-43B5-AF41-91B280660C6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20760",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zoidtechnologies.com/projects/bbsengine/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zoidtechnologies.com/projects/bbsengine/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters in the php/comment.php and (2) the getpartialmatches method in php/aolbonics.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Project EROS bbsengine, en versiones anteriores a la 20060501-0142-jam, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante (1) parámetros no especificados en los métodos php/comment.php y (2) getpartialmatches en php/aolbonics.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-02-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEBB199-4353-43B5-AF41-91B280660C6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20760",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zoidtechnologies.com/projects/bbsengine/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zoidtechnologies.com/projects/bbsengine/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via [img] tags, possibly cross-site scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el código wpprop de Project EROS bbsengine en sus versiones anteriores a 20060622-0315 que tiene un impacto desconocido y vectores de ataque remotos a través de etiquetas [img], probablemente de secuencias de comandos en sitios cruzados (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2006-06-21",
            "matchCriteriaId" : "2034F621-B753-42A8-9A45-778B6FB0AE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-02-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEBB199-4353-43B5-AF41-91B280660C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-04-29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF2B361-CD7F-4706-ABD0-0D8D5D56437C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-05-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D08D83-EFA4-4920-84ED-C9C0871370E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-05-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246C6E96-3CC1-4198-8C27-C9B08B3E693A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-05-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA8DE96-158E-4D2E-833D-0A7DC5110768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-05-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA6A0C9-7D8D-47CC-899C-EA39EB2E0F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-05-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F9CAE9-F4A2-46CE-817C-68187580EF3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-05-20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A2E04-5C72-4EB0-B4D3-A9B987A50D29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20760",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=427430&group_id=86388",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18627",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=427430&group_id=86388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en SPT--ForumTopics.php de Scout Portal Toolkit (SPT) versión v1.4.0 y anteriores. Permite a usuarios remotos ejecutar comandos SQL de su elección a través de el parámetro forumid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_scout_project:scout_portal_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "A15496E7-DA6E-4DCF-8622-927E30B5FC99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20857",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18688",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T17:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain \"random programmatic access\" to other email within the same post office."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la API de cliente en Novell GroupWise para Windows v5.x a v7 podría permitir a los usuarios obtener \"acceso programático aleatorio\" (random programmatic access) a correo electrónico de otros del misma oficina de correos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:*:*:32-bit_client:*:*:*:*:*",
            "matchCriteriaId" : "12D3C841-7EC9-4ABD-B695-E11254EED1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22426725-2204-4750-87F6-A57BA727F213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194704B6-4820-4398-8906-A1E529ED65AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E0DC694-0DEB-41DE-8A0D-9B649FC2F220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "174646C1-60F8-4A84-9C0D-785303EBAF6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5DFFF8-7DCF-48E0-B43E-269EA4F3AE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2F5DF0E-8158-4D2E-88CC-BBD7A031054E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "08A78BE7-6426-41CD-BBAF-9BB951726D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E50599E1-45E5-443F-AAEC-F91778CA4792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BB62B7-C895-4AB6-9CEB-4B312E334953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "A91EAC4C-8EEE-4050-B1AD-E677AD90327D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F65030-60A2-4EC2-A06D-EC5249FD9FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814CAE15-78D8-4205-AC95-E07385A7B3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251EAE31-9799-453A-ABF7-F3D1C6602A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:6.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFA45E-7EA4-4067-BDB5-AB4391B3FE65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE640E9A-762B-4AF4-8677-818CBF16EA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20888",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973921.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974006.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?2974027.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438725/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18716",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973921.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974006.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?2974027.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438725/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ashmans and Bill Echlin QaTraq 6.5 RC and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) link_print, (2) link_upgrade, (3) link_sql, (4) link_next, (5) link_prev, and (6) link_list parameters in top.inc as included by queries_view_search.php; the (7) msg, (8) component_name, and (9) component_desc parameters in (a) components_copy_content.php, (b) components_modify_content.php, and (c) components_new_content.php; the (10) title, (11) version, and (12) content parameters in design_copy_content.php; the (13) plan_title and (14) plan_content parameters in design_copy_plan_search.php; the (15) title, (16) minor_version, (17) new_version, and (18) content parameters in design_modify_content.php; the (19) title, (20) version, and (21) content parameters in design_new_content.php; the (22) plan_name and (23) plan_desc parameters in design_new_search.php; the (24) file_name parameter in download.php; the (25) username and (26) password parameters in login.php; the (27) title, (28) version, and (29) content parameters in phase_copy_content.php; the (30) content parameter in phase_delete_search.php; the (31) title, (32) minor_version, (33) new_version, and (34) content parameters in phase_modify_content.php; the (35) content, (36) title, (37) version, and (38) content parameters in phase_modify_search.php; the (39) content parameter in phase_view_search.php; the (40) msg, (41) product_name, and (42) product_desc parameters in products_copy_content.php; and possibly the (43) product_name and (44) product_desc parameters in (d) products_copy_search.php, and a large number of additional parameters and executables.  NOTE: the vendor notified CVE via e-mail that this issue has been fixed in the 6.8 RC release."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en ashmans y Bill Echlin QaTraq v6.5 RC y anteriores permite a atacantes remotos inyectar código web y HTML a su elección a través de los parámetros (1) link_print, (2) link_upgrade, (3) link_sql, (4) link_next, (5) link_prev, y (6) link_list en top.inc; los parámetros (7) msg, (8) component_name, y (9) component_desc en (a) components_copy_content.php, (b) components_modify_content.php, y (c) components_new_content.php; los parámetros (10) title, (11) version, y (12) en design_copy_content.php; los parámetros(13) plan_title y (14) plan_content en design_copy_plan_search.php; los parámetros (15) title, (16) minor_version, (17) new_version, (18) en design_modify_content.php; los parámetros(19) title, (20) version (21) en design_new_content.php; los parámetros (22) plan_name and (23) plan_desc en design_new_search.php; los parámetros (24) file_name parameter en download.php; los parámetros (25) username y(26) password en login.php; los parámetros (27) title, (28) version, y (29) content parameters en phase_copy_content.php; los parámetros (30) en phase_delete_search.php; los parámetros(31) title, (32) minor_version, (33) new_version, (34) en phase_modify_content.php; los parámetros(35) content, (36) title, (37) version,(38) en phase_modify_search.php; los parámetros(40) msg, (41) product_name, y(42) product_desc en products_copy_content.php; y probablemente (43) product_name y(44) product_desc en (d) products_copy_search.php, y un largo número de parámetros y ejecutables adicionales. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qatraq:qatraq:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A90061-6E65-4EB7-9BDE-3107E5DF698B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclab.tuwien.ac.at/advisories/TUVSA-0606-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000969.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438151/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.testmanagement.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclab.tuwien.ac.at/advisories/TUVSA-0606-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000969.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438151/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.testmanagement.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.jsp en Netsoft smartNet v2.0, permite a los atacantes remotos inyectar código web o HTML a través del parametro keyWord ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netsoft:smartnet:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B430B7-3C8F-43B2-A152-6F9DE28F26FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016367",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kil13r.info/sa/Kil13r-SA-20060622-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.kil13r.info/sa/xss/smartnetxss.jpg",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438164/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kil13r.info/sa/Kil13r-SA-20060622-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.kil13r.info/sa/xss/smartnetxss.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438164/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to execute arbitrary PHP code via a URL in the pageid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión de archivo remoto en page.php en un producto no especificado RahnemaCo.com, posiblemente eShop, permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro pageid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahnemaco:rahnemaco:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC2FC6F-249A-4D0B-8D96-A412F9F07FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016346",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437836/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437836/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to execute arbitrary PHP code via a URL in the osCsid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión de archivo remoto en page.php en un producto no especificado de RahnemaCo.com, posiblemente eShop, permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro osCsid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rahnemaco:rahnemaco:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC2FC6F-249A-4D0B-8D96-A412F9F07FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0387.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-06/0387.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3115",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-29T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the raid_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en view.php en phpRaid v3.0.4, y probablemente otras versiones, permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro raid_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F97DA48-CCF5-4888-BA29-4D209CAA0484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20200",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27457",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3116",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-29T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php, and (13) view.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades PHP de inclusión de archivo remoto en phpRaid v3.0.4 y v3.0.5 que permiten a los atacantes remotos ejecutar código a su elección a través de los parámetros de la URL phpraid_dir (1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php, y (13) view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F97DA48-CCF5-4888-BA29-4D209CAA0484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFDEE4C-5E09-47ED-86CE-EABB9CA58D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0824.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20200",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26891",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26892",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26893",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26894",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26895",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26896",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26897",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26898",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26899",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26900",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26901",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26902",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18719",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27465",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0824.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3316",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-29T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) logs.php and (2) users.php, a different set of vectors than CVE-2006-3116."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión de archivo remoto en phpRaid v3.0.5 permite a atacantes remotos ejecutar código a su elección a través de parametros de URL phpraid_dir (1) logs.php y (2) users.php, conjunto de vectores diferentes a CVE-2006-3116."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFDEE4C-5E09-47ED-86CE-EABB9CA58D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20200",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26903",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26904",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18719",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27465",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3317",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-29T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) announcements.php and (2) rss.php, a different set of vectors and affected versions than CVE-2006-3316 and CVE-2006-3116."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades PHP de inclusión de archivo remoto en phpRaid v3.0.6 permite a atacantes remotos ejecutar código a su elección a través de parametros de URL phpraid_dir (1) announcements.php y (2) rss.php, conjunto de vectores diferentes a CVE-2006-3116."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2080E07-A725-49A9-AECE-AA3FE5F94867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0824.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20865",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1173",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26888",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/26889",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.phpraider.com/index.php?action=tpmod%3Bdl=item10",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438706/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18719",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/23066",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2593",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27462",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33100",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3528",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0824.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpraider.com/index.php?action=tpmod%3Bdl=item10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/23066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3318",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-06-29T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in register.php for phpRaid 3.0.6 and possibly other versions, when the authorization type is phpraid, allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) email parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en register.php de phpRaid v3.0.6 y probablemente otras versiones, cuando el tipo autorización es \"phpraid\", permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro (1)raid_id y (2) email."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2080E07-A725-49A9-AECE-AA3FE5F94867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20865",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1173",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438706/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2593",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27459",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC (M4P, M4A, or M4B) file with a sample table size (STSZ) atom with a \"malformed\" sample_size_table value."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "DBF5FAB6-4B30-434E-9958-31304651736E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303952",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20891",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/907836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438812/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-020.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/907836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438812/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-29T23:05:00.000",
      "lastModified" : "2023-11-07T01:58:51.693",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-3017.  Reason: This candidate is a reservation duplicate of CVE-2006-3017.  Notes: All CVE users should reference CVE-2006-3017 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in rss/index.php in PHP iCalendar 2.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the cal parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en rss/index.php de PHP iCalendar v2.22 y versiones anteriores, permite a usuarios remotos inyectar codigo web script o código HTML de su elección a través del parámetro call."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_icalendar:php_icalendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.22",
            "matchCriteriaId" : "1C24ED33-F16C-41AE-9066-701B972E5FFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-12-php-icalendar.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20883",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438621/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-12-php-icalendar.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438621/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebar:sitebar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3.8",
            "matchCriteriaId" : "F4B90410-C896-45C7-9E93-A2261B4F4AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebar:sitebar:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44507F73-328C-433C-AD2B-E2F4293158E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebar:sitebar:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7854532-F8BB-4998-8EE9-45D863318C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebar:sitebar:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1190EDFB-7E34-4E5E-A10C-768B6A05FD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebar:sitebar:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D804D27-DBB4-4582-AA2F-2DE850B56EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebar:sitebar:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2E7C5B-32B7-42FF-B794-3229B36A99B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitebar:sitebar:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E14900-C476-4159-A437-24ADE92DFF9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20841",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438464/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482499/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18680",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/26126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482499/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/26126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ofdisp and (2) ofmsgid parameters."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)\r\nen openforum.asp en OpenForum v1.2 Beta y anteriores permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de los parámetros (1) ofdisp y (2) ofmsgid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2enetworx:openforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2_beta",
            "matchCriteriaId" : "3CB88832-34C8-4648-ADDC-D5706AA06C66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/openforum-xss-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/openforum-xss-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2198",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-30T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user."
      }, {
        "lang" : "es",
        "value" : "OpenOffice.org (también conocido como StarOffice) v1.1.x a v1.1.5 y v2.0.x anteriores a v2.0.3 permite a los atacantes de usuarios asistidos conducir actividades no autorizadas a través de un documento OpenOffice con una macro BASIC maliciosa, lo que es ejecutad sin confirmación al usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EA7C32-30D8-4367-B2F6-6394408E63B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A063FBBE-4D34-45D0-9AC8-66CFC64D22EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2EC75F-DA22-4592-809D-81DB8C3BA9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94AF842-B320-42BB-87AB-73178F8AA80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0436BF-D4B6-4437-A509-FEBB779E4B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24B3240-5110-4810-A37A-C9A0B4A1F856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14968CA-8FA9-4E71-9C0C-3ABFBE7920C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B4ED38-FE08-40F3-B164-482146BF7BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4999E6F1-2983-48B1-8FEF-830DD4845CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4161B6-A49C-460B-B364-7D0B248A60F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3B35A4-11D4-4548-87D3-F36DE4F07C33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC082498-DEB1-45EF-9B4D-08A551C23F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA089E1-3B23-47FA-84BB-81225AD200EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021D5A76-3F8E-4BBC-8776-D8E13F70D26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBECD76-CD0C-48AE-8DCE-C0A5DB37A439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "385C9A53-578B-48FA-B210-0CCEE2AF2931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA0DF03-4898-45E1-B338-B93A9A0376FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.2_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9127E8A-66BD-4359-B76C-7220CC9ADC29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.3_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "076941D9-3CB7-4B0A-BDEA-66C3FDDF322F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.3_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C59F07C5-50F2-4717-A48B-76D13267E161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.3_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B76133C-DD4A-466C-A43F-4CBCF36E3730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.3_rc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F120B77-81AF-4823-907B-FFC8E6E5BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB60F92-5543-4D1E-8CE1-525D65AECF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D51979-56BC-46A4-A6FB-45BC56CB6D5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/cms/node/2343",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20867",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20893",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20910",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20911",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20913",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20975",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20995",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21278",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22129",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23620",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-12.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1016414",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102490-1",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1104",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/170113",
        "source" : "security@debian.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:118",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_40_openoffice.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.openoffice.org/security/CVE-2006-2199.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0573.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447035/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18738",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2607",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2621",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27564",
        "source" : "security@debian.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-475",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11082",
        "source" : "security@debian.org"
      }, {
        "url" : "http://fedoranews.org/cms/node/2343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102490-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/170113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_40_openoffice.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openoffice.org/security/CVE-2006-2199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0573.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447035/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2199",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-30T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Java Applets en OpenOffice.org v1.1.x (tambien conocido como StarOffice) hasta la v1.1.5 y v2.0.x anteriores a v2.0.3 permite a atacantes asistidos por el usuario escapar el Java sandbox y realizar actividades no autorizadas a través de ciertos applets en documentos OpenOffice."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EA7C32-30D8-4367-B2F6-6394408E63B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A063FBBE-4D34-45D0-9AC8-66CFC64D22EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0436BF-D4B6-4437-A509-FEBB779E4B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24B3240-5110-4810-A37A-C9A0B4A1F856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14968CA-8FA9-4E71-9C0C-3ABFBE7920C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B4ED38-FE08-40F3-B164-482146BF7BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4999E6F1-2983-48B1-8FEF-830DD4845CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA089E1-3B23-47FA-84BB-81225AD200EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021D5A76-3F8E-4BBC-8776-D8E13F70D26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA77A764-8311-4108-8155-920EC12AC0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB60F92-5543-4D1E-8CE1-525D65AECF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D51979-56BC-46A4-A6FB-45BC56CB6D5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/cms/node/2343",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20867",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20893",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20910",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20911",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20913",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20975",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20995",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21278",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23620",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-12.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1016414",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102475-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1104",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/243681",
        "source" : "security@debian.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:118",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_40_openoffice.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.openoffice.org/security/CVE-2006-2199.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0573.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447035/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18737",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2607",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2621",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27569",
        "source" : "security@debian.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-475",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11338",
        "source" : "security@debian.org"
      }, {
        "url" : "http://fedoranews.org/cms/node/2343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102475-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/243681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_40_openoffice.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openoffice.org/security/CVE-2006-2199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0573.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447035/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3117",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-30T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka \"File Format / Buffer Overflow Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73EA7C32-30D8-4367-B2F6-6394408E63B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A063FBBE-4D34-45D0-9AC8-66CFC64D22EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0436BF-D4B6-4437-A509-FEBB779E4B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24B3240-5110-4810-A37A-C9A0B4A1F856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14968CA-8FA9-4E71-9C0C-3ABFBE7920C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E667DBA8-23C6-4521-9BAF-17D667886242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4999E6F1-2983-48B1-8FEF-830DD4845CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA089E1-3B23-47FA-84BB-81225AD200EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openoffice:openoffice:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021D5A76-3F8E-4BBC-8776-D8E13F70D26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA77A764-8311-4108-8155-920EC12AC0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB60F92-5543-4D1E-8CE1-525D65AECF5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D51979-56BC-46A4-A6FB-45BC56CB6D5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/cms/node/2343",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20867",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20893",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20910",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20911",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20913",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20975",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20995",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21278",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22129",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23620",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-12.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1016414",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102501-1",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1104",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:118",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/openoffice.txt",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_40_openoffice.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.openoffice.org/security/CVE-2006-3117.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0573.html",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447035/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18739",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-2",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2607",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2621",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27571",
        "source" : "security@debian.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-475",
        "source" : "security@debian.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9704",
        "source" : "security@debian.org"
      }, {
        "url" : "http://fedoranews.org/cms/node/2343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102501-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ngssoftware.com/advisories/openoffice.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_40_openoffice.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openoffice.org/security/CVE-2006-3117.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0573.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447035/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-313-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3118",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-06-30T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls.  NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue."
      }, {
        "lang" : "es",
        "value" : "spread utiliza un archivo temporal con un nombre de archivo estático basado en el número de puerto, lo que permite a los usuarios locales causar una denegación de servicio, creando un archivo durante una condición de carrera entre llamadas a funciones \"unlink\" y \"blind\" NOTA: spread borra estos archivos temporales antes de su uso, lo que podría causar conflictos con otros programas que usan el mismo nombre de archivo, pero esto no es un asunto distinto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:spread:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAC592F-0E73-44CA-AF3A-F351E30B7A4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375617",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18675",
        "source" : "security@debian.org"
      }, {
        "url" : "https://launchpad.net/distros/ubuntu/+source/spread/+bug/44171",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://launchpad.net/distros/ubuntu/+source/spread/+bug/44171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in includes/functions_logging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the log_hack function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en includes/functions_logging.php en phpRaid v3.0.5, y posiblemente otras versiones, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de la función log_hack."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spiffyjr:phpraid:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFDEE4C-5E09-47ED-86CE-EABB9CA58D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20200",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438706/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18720",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-47/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2934",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-06-30T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer."
      }, {
        "lang" : "es",
        "value" : "SCTP conntrack (ip_conntrack_proto_sctp.c) en netfilter para Linux kernel v2.6.17 anteriores v2.6.17.3 y v2.6.16 anteriores a v 2.6.16.23 permite a los atacantes remotos causar una denegación de servicio (caída) a través de un paquete sin trozos, lo que causa una variable para contener un valor inválido que es más tarde utiliza para desreferenciar un puntero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20917",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20986",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21298",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/717844",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=9c48e1ea8cf8800cc5e2d39ccbb8b5ff9704f8e9",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/26963",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439483/100/100/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439610/100/100/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18755",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2623",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197387",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-488",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/717844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=9c48e1ea8cf8800cc5e2d39ccbb8b5ff9704f8e9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439483/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439610/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter.  NOTE: the same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or script."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin/admin.php en MF Piadas v1.0 permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro \"page\". NOTA: el mismo vector puede ser usado para realizar una ejecución de secuencias de comandos en sitios cruzados - XSS -, pero el análisis CVE sugiere que esto es resultado de la inclusión de archivos HTML o script."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mastersfusion:mf_piadas:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6CE942-CF14-471D-95D7-C0220B26D4C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438496/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18679",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438496/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory (fs_homepath cvar) via a long string of filenames, as contained in the neededpaks buffer."
      }, {
        "lang" : "es",
        "value" : "la opción Automatic Downloading en id3 Quake v3 Engine y en Icculus Quake v3 Engine (ioquake3) anterior a la revisión 804 permite a atacantes remotos sobrescribir ficheros de su elección en el directorio quake3 (fs_homepath cvar) a través de cadenas de nombres de ficheros largas, tal y como figura en el búfer neededpaks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AE0171-46F1-4137-99BE-4B825A403D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC83733-F8B0-4985-BB48-2DA85C5C4393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AE21A-5028-485F-822C-4DA7F557A40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875CD288-5C64-4396-8A2B-41B1309CE615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_804:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21AF67A-80EB-4596-882D-D184B73CAA0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/q3cfilevar-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20401",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20851",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.icculus.org/quake3?rev=804&view=rev",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438515/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438660/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18685",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/q3cfilevar-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.icculus.org/quake3?rev=804&view=rev",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438515/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438660/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to overwrite arbitrary write-protected cvars variables on the client, such as cl_allowdownload for Automatic Downloading and fs_homepath for the quake3 path, via a string of cvar names and values sent from the server.  NOTE: this can be combined with another vulnerability to overwrite arbitrary files."
      }, {
        "lang" : "es",
        "value" : "client/cl_parse.c en el id3 Quake 3 Engine v1.32c y el Icculus Quake 3 Engine (ioquake3) revisión 810 y anteriores que permite a los servidores remotos maliciosos sobrescribir arbitrariamente variables cvars protegidas contra escritura en el cliente, como cl_allowdownload para Automatic Downloading y fs_homepath para la ruta quake3, a través de una cadena de caracteres de nombre cvar y valores enviados desde el servidor. NOTA: esto puede ser combinado con otras vulnerabilidades para sobrescribir ficheros arbitrariamente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AE0171-46F1-4137-99BE-4B825A403D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC83733-F8B0-4985-BB48-2DA85C5C4393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AE21A-5028-485F-822C-4DA7F557A40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875CD288-5C64-4396-8A2B-41B1309CE615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_804:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B21AF67A-80EB-4596-882D-D184B73CAA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDDEDC9-48D2-4580-AF82-A881B62E14F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_806:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF097DA8-939B-45A7-944B-D164A3CDB5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_807:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FFCE76-6F0E-497A-8146-79EAD182EA91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A56A1-A70F-4F27-A065-DE64253E0A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CA8EB5-EC8E-418A-BF65-4DF652A1F59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABA1BE2-19FB-42B8-AD43-FB200F74E0CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/q3cfilevar-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20401",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20851",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438515/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438660/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18685",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/q3cfilevar-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438515/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438660/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via .. (dot dot) sequences in filenames within (1) TAR,(2) GZ, and (3) JAR archives.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en QuickZip v3.06.3 permite a atacantes remotos asistidos por usuario sobre escribir ficheros de su elección o directorios a través de secuencias .. (punto punto) en nombres de fichero dentro de archivos (1) TAR,(2) GZ, y (3) JAR.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joesph_leung:quickzip:3.06.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A39FFB-FAE2-4403-B78A-BB5F648383FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20864",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) sn20_special_cases parameter (\"Special Cases\" field) in profile/mini.php, (2) tyxx01_album_name parameter (\"Album Name\" field) in profile/photo_create.php, and the (3) u parameter in admin/user_view.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Custom dating biz dating script v1.0 permite a atacantes remotos inyectar web script o HTML a través de (1) el parámetro sn20_special_cases (\"Special Cases\" campo) en profile/mini.php, (2) parámetro tyxx01_album_name (\"Album Name\" campo) en profile/photo_create.php, y el (3) parámetro u en admin/user_view.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-cbd.biz:custom_dating_biz_dating_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145B61CA-0E82-4807-BFB9-ECF3525B4C44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115109990800428&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20839",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115109990800428&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "new_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication credentials via an IMG tag in the desc parameter (\"Ticket Description\" field) that points to a URL that captures referer URLs, possibly due to a cross-site scripting (XSS) vulnerability or a leak of credentials in referer URLs."
      }, {
        "lang" : "es",
        "value" : "new_ticket.cgi en Hostflow v2.2.1-15 permite a atacantes remotos robar y reproducir credenciales de autenticación a través de una etiqueta IMG en el parámetro \"desc\" (\"campo de descrpción de Ticket\") que apunta a una URL que URLs referer, posiblemente debido a una vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) o a una fuga de credenciales en URLs referer"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starflow_software:hostflow:2.2.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A40C126-34B3-4067-8A5E-8A1E67C8DEBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/hostflow-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20863",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/hostflow-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the rate parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.php en PHP/MySQL Classifieds (PHP Classifieds) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"rate\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231777FA-2581-4964-AB5A-71A80F0ED839"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438667/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438667/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName (\"Title\" field), (2) url, and (3) Description parameters, possibly related to issues in add1.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en AddAsset1.php en PHP/MySQL Classifieds (PHP Classifieds) permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) ProductName (\"Title\" field), (2) url, yd (3) Description, posiblemente relacionado con cuestiones en add1.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231777FA-2581-4964-AB5A-71A80F0ED839"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20880",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438667/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438667/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks."
      }, {
        "lang" : "es",
        "value" : "Opera antes de la v9.0, no restaura la barra de seguridad SSL después de mostrar un diálogo de descarga de un sitio Web con SSL, lo que permite a atacantes remotos suplantar certificados SSL de confianza de un sitio web que no es de confianza y facilita los ataques de phishing."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0",
            "matchCriteriaId" : "9BBA1C67-4072-4BAA-8FC5-DA4CDA0127AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19480",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20897",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-49/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1177",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1016406",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_opera.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438634/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18692",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2571",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27449",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/19480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-49/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1016406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_38_opera.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438634/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "Upgrade to version 9.0.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Zorum Forum v3.5 permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1)offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, y (6) fromfromlist"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2D033F-18B3-49C1-9EF3-347685F12E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AE9137-3FC1-4B5A-B460-D46DF8E041B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "907D1B87-2347-4B70-A045-0DDF93662A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB559F1-D8A6-4265-963C-1265FC7997A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE0A89A-6DB5-482F-985C-C314DC4D5E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D1D438-86A5-4224-852F-EC1E5DB83DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified parameters, including the (1) frommethod, (2) list, and (3) method, which are reflected in an error message.  NOTE: some of these vectors might be resultant from SQL injection."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Zorum Forum v3.5 permite a los atacantes remotos inyectar una secuencia de comandos web o HTML a través de parámetro múltiples no especificados, incluyendo (1) frommethod, (2) list, y (3) method, que son reflejados en un mensaje de error. NOTA: algunos de estos vectores deben ser el resultado de una inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D1D438-86A5-4224-852F-EC1E5DB83DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/19598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-06-30T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to \"chunk error processing,\" possibly involving the \"chunk_name\"."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función png_decompress_chunk en pngrutil.c en libpng anteriores a v1.2.12 permite a los atacantes dependientes de contexto causar una denegación de servicios y posiblemente ejecutar arbitrariamente código a través de vectores no especificado en relación a \"error de procesamiento\", posiblemente relacionados con \"chunk_name\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.11",
            "matchCriteriaId" : "A1C8FFA0-6B23-4E79-8929-85C59118B06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126C1AF2-E47C-490A-8357-6CD47C533744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4396A76-DA2C-4CA0-B475-8E897672059D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4E6626-F83C-4B63-8F50-24D5979BF833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598A54FD-EEF8-4CCD-A77A-D13DEE767710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A243D85-1BF9-4F26-9BFE-54AA2C92C577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FBCF73-8C31-454D-9D92-294963B92FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA10289F-0B19-4C96-BE58-C5E14E694AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "804C0EA6-67B9-4FED-B16A-751F7F4DD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.7rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E7A0FF4-2818-4C78-A4FE-0C56EED47AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82952F59-063D-46D0-8FAA-952CB67EDFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78CA19F-A9FA-4E6C-B3DB-5391792D6F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_roelofs:libpng:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6892D36A-7A49-4D5A-993A-3D8F6B68AF10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=307562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200812-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=428123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440594/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0924/references",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200812-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=428123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440594/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0924/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to 1.2.12",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "On Red Hat Enterprise Linux 2.1, 3, 4, and 5 this is a two-byte overflow into the middle of the stack and is not exploitable.",
        "lastModified" : "2007-05-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en mkdir en HP-UX B.11.00, B.11.04, B.11.11, y B.11.23 permite a usuarios locales conseguir privilegios a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20934",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21514",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016410",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-138.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438866/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2614",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-138.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en frontend/x/files/select.html en cPanel v10.8.2-CURRENT 118 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"file\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.2_current_118",
            "matchCriteriaId" : "171A9543-5405-475E-861C-F04106118417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.cpanel.net/show_bug.cgi?id=4282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20840",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438355/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438477/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugzilla.cpanel.net/show_bug.cgi?id=4282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438355/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438477/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direct request to secure/ConfigureReleaseNote.jspa, which are not sanitized before being returned in an error page."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de comandos en sitios cruzados (XSS) en Atlassian JIRA 3.6.2-#156 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores sin especificar en una solicitud directa a secure/ConfigureReleaseNote.jspa, las cuales no son comprobadas antes de ser devueltas en una página de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:3.6.2_156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CABBFC-82C8-497C-936A-B6882722F0DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message."
      }, {
        "lang" : "es",
        "value" : "secure/ConfigureReleaseNote.jspa en Atlassian JIRA v3.6.2-#156 permite a atacantes remotos obtener información sensible a través de manipulaciones sin especificar del parámetro \"projectId\", que muestra la ruta de instalación y otra información del sistema en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:3.6.2_156:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CABBFC-82C8-497C-936A-B6882722F0DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jira.atlassian.com/browse/JRA-10542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jira.atlassian.com/browse/JRA-10542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the (1) phpbb_root_path parameter in (a) includes/functions_cms.php and the (2) GlobalSettings[templatesDirectory] parameter in multiple files in the \"includes\" directory including (b) adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, and (l) move.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remotos de ficheros PHP en Pearl para el modulo Mambo v1.6 para Mambo, cuando register_globals esta activado, permite a atacantes remotos ejecutar código PHP de modo arbitrario a través de (1) el parámetro \"phpbb_root_path\" en (a) includes/functions_cms.php y (2) el parámetro \"GlobalSettings[templatesDirectory]\" en múltiples ficheros en el directorio \"includes\" incluyendo (b)  adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, y (l) move.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pearlinger:pearl_for_mambo:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C74BCF-75AF-40D4-8171-3FDA726CF34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pearlinger:pearl_for_mambo:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A00BA2-FE5A-486F-9845-F2DA15CBA5AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20819",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18690",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbitrary SQL commands via the lid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en annonces-p-f.php en el módulo MyAds 2.04jp para Xoops permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"lid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myads:myads:2.04jp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56435218-C821-4056-9DE9-FB43F1FB0057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18718",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search cmd."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Arctic v1.0.2 y versiones anteriores permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"query\" en un interprete de comandos \"search\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olate:arctic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "D4BD8BD1-710B-4BF5-A81D-91F70FA325B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/arctic-xss.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20663",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.olate.co.uk/forums/index.php?showtopic=1698",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26668",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/arctic-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.olate.co.uk/forums/index.php?showtopic=1698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to execute arbitrary PHP code via a URL in the crisoftricette parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota en recipe/cookbook.php en CrisoftRicette v1.0pre15b permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"crisoftricette\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crisoft_ricette:crisoft_ricette:1.0pre15b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160C0097-F002-4BE2-A8FE-8F522AEF4457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438459/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438459/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play UPnP/1.0 component."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el router Speedstream Wireless 2624 de Siemens permite a usuarios locales evitar la autenticación y acceder a ficheros protegidos a través del componente Universal Plug and Play UPnP/1.0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:siemens:speedstream_wireless_router:2624:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455F169D-EC99-42FA-BD5D-E30D4F9D0B4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalarmaments.com/2006290674551938.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438708/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2610",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalarmaments.com/2006290674551938.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438708/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbitrary web script or HTML via a chat line."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en AliPAGER, posiblemente versiones v1.5 y anteriores, que permite a usuarios remotos inyectar código web script o HTML de su elección en las líneas de chat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajax_softwares:alipager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "D4C9AA96-B840-4591-8CE9-9627426C63D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/437508/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437508/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands via the grp_id parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en tree.php en MyNewsGroups 0.6 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro grp_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carlos_sanchez_valle:mynewsgroups:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78AB4DF-566E-423D-9414-7C03BDF75DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438814/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438814/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en index.php en dev!Lz Clanportal DZCP 1.3.4 permite a atacantes remotos ejecutar comandos SQL a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devilz_clanportal:devilz_clanportal:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB84E004-2345-4A53-BB8D-341BAA96D82E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20927",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18762",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in report.php and (2) level parameter in custom_buttons.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en HSPcomplete 3.2.2 y 3.3 beta y anteriores permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) type en report.php y (2) level en custom_buttons.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:hspcomplete:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3_beta",
            "matchCriteriaId" : "AFEE3B68-0601-4D6F-BB96-9FB6E3F19A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:hspcomplete:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35FFC8A-8439-47F5-85D2-FC37999DEB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/hspcomplete-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/hspcomplete-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-03T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in (1) cat.php and (2) add.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en SmS Script permiten a atacantes remotos ejecutar comandos SQL a través del parámetro CatID en (1) cat.php y (2) add.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sms_script:sms_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0837C11F-022E-468A-90DA-A6156E570942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438874/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438874/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2194",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-07-05T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges."
      }, {
        "lang" : "es",
        "value" : "El 'plugin' (complemento) winbind en pppd para ppp (Ponit to Point Protocol) v2.4.4 y anteriores no chequea el código de respuesta de la llamada a la función setuid, lo que puede permiter a usuarios locales ganar privilegios provocando que la función setuid falle, tales como exceder los límites PAM para el máximo número de procesos de usuario, lo que evita que el componente de autenticación NTLM de winbind (winbind NTLM authentication helper) retire privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:point-to-point_protocol_project:point-to-point_protocol:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.4",
            "matchCriteriaId" : "9509E7EC-0930-4A75-A2E5-18D8A5F50946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20963",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20967",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20987",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20996",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1106",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:119",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/26994",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18849",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-310-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/20963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-310-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  The winbind plugin is not shipped with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2910",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-07-05T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer en jetAudio v6.2.6.8330 (Basic), y posiblemente otras versiones, que permite a los atacantes con la ayuda del usuario ejecutar a través de un fichero de audio (como WMA) con valores largos en la etiqueta ID incluyendo Título, Autor y Álbum, lo que provoca un desbordamiento en la cadena de texto que muestra el tooltip si el \"driver\" (controlador) de la tarjeta de sonido está deshabilitado o mal instalado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cowon_america:jetaudio:basic_6.2.6.8330:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78D434E-4AC0-4655-A8A1-9A8599B4563E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19456",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-45/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18825",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2667",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27593",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/19456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-45/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2935",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-05T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "La función dvd_read_bca en el código de manejo de los DVD en el fichero drivers/cdrom/cdrom.c del kernel de Linux v2.2.16 y posteriores, asigna un valor incorrecto a la variable \"length\" (longitud), lo que permite a usuarios locales ejecutar código de su elección a través de dispositivos de almacenamiento USB modificados maliciosamente que disparan un desbordamiento de buffer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.16",
            "versionEndIncluding" : "2.16.16",
            "matchCriteriaId" : "48CD9058-071E-44E2-8F5C-F5D3989186E3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=2966",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21298",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21695",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22822",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23788",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/24288",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_49_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_64_kernel.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0012.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0013.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444887/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18847",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-331-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2680",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27579",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-611",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=2966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/24288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_49_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_64_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444887/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-05T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenames with double extensions such as \".php.en\", \".php.1\", and other allowed extensions that are not .txt.  NOTE: this is only a vulnerability when the server allows script execution in the pub directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en TWiki desde la versión del 01-Dic-2000 hasta la versión v4.0.3 que permite a atacantes remotos saltarse el \"upload filter\" (filtro o control de subida) y ejecutar código de su elección a traves de nombres de ficheros con dos extensiones como \".php.en\", \".php.1\" y otras extensiones disponibles que no son .txt. NOTA: para que se produzca esta vulnerabilidad el servidor debe permiter la ejecución de scripts en un directorio público."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E0A8F3-02EE-4A6D-BAAC-1D52DF063197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F893E121-82FA-41C8-9BA4-606E6DA01408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620356EA-F106-41DF-AADA-C1EF5A5A0829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979D8BC8-0032-496F-9503-F3BBBC8FA7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2000-12-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89599BC3-E1D8-4670-9321-F63A788096A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2001-09-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "354C8BA8-603D-4556-8C4C-39DEE4891719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CC3B43-A77A-471E-A0ED-E91E53C2400C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "374ADC0F-0EE2-4DEC-8A37-5F5F15C8137A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC5965A-BFC8-42B3-AF13-28E097381E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94AFFF9-5951-43A9-8018-B10C3F097CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F823DF7-B38E-4FBF-8D9A-C1B49FC237BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:2004-09-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA8E461-0CAA-4B44-8BCC-21CD8E1A6A41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20992",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016458",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertSecureFileUploads",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertSecureFileUploads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of \"file:\" specifiers."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer en el Explorador de Windows (explorer.exe) de Windows XP y 2003. Permite a usuarios remotos con ayuda del usuario causar una denegación de servicio (indisponibilidad repetida de la aplicación) y, posiblemente, la ejecución de código de la elección del atacante remoto a través de un fichero de extensión .url con una etiqueta \"InternetShortcut\" que contiene una URL extensa y un gran número de especificadores \"file:\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:3.1.0.3270:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5135CB-17F2-4C4C-AB21-E22FA02792F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "207B8A6E-5158-4636-91D8-38021B91CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D8321-EB2F-4626-A16B-F3C2B771EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3538DA2-B040-426D-9ADC-7C5BE9C2D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "54836D69-7BBE-4B91-9548-ECDF8AA02901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F633513-6E9A-4F2D-964A-6AFDE5307AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED8947F-2490-41CA-A7B3-2C93D69C3F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB5A8DD-4B1A-461C-AD38-9CB9D13F735F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB2E520-56D9-4B3F-99BA-EBC04AC30E4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "61E9C554-757E-4912-A3F6-6F1DB17483AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3EB90-92C9-4B69-B58C-087D382DC579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "24FD136F-8064-44C4-A9B0-1E793EB6FB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AF27C8-C2FA-477D-8332-B96277530B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1CE6C6-6E6E-4C4E-A7B1-DC6651864298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "7551A36D-2387-4A9E-BACB-A0C71FF1F92C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAFE154-7058-40A1-9806-22476A7DF0BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4E9E190B-A109-4177-A5B5-7BD32573762E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "394F16B8-C29F-445A-AA47-AA82F78CFA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A2852D-64BE-40B1-8811-02EBDC1E044E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:home:*:*:*:*:*",
            "matchCriteriaId" : "A4AAFE24-2E27-4E1A-BB2C-DFEDDB98B2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96ADB2B-8EF4-4EBD-A007-E3CC7223608B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F928472-8B88-49CF-8F92-502A98FB71DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439153/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439660/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18838",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439153/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439660/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object.  NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status"
      }, {
        "lang" : "es",
        "value" : "** CUESTIONADA ** Vulnerabilidad de dominios cruzados en el navegador web Mozilla Firefox que permite a usuarios remotos acceder a información confidencial de otros dominios a través de una \"object tag\" (etiqueta de objeto) con un parámetro de datos (\"parameter data\") que hace referencia a un enlace al sitio web origen del ataque que especifica una cabecera con una localización HTTP que hace referencia al sitio objetivo, lo que hace el contenido accesible a través del atributo outerHTML del objeto. NOTA: esta descripción esta basada en un informe que ha sido revisado e impugnado por sus autores originales. Los autores malinterpretaron sus resulados. Terceras partes también han discutido sobre la corrección del informe original. Por lo tanto, esta descripción no es de una vulnerabilidad. Ha sido incluida y se le ha asignado un identificador de CVE para proporcionar información clara."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "659F5DAF-D54F-43FB-AB2A-3FC7D456B434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB35099-B04E-4796-A25D-953329FE62F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D2655-6641-42BE-9793-30005AC9D40D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.php?storyid=1448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438785/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438788/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438811/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438863/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438864/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439146/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438785/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438788/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438811/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438863/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438864/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439146/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bounds memory access, related to an iframe and JavaScript that accesses certain style sheets properties."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad que permite a atacantes remotos causar una denegación de servicio (indisponibilidad de la aplicación) a través de una página web modificada maliciosamente que provoca accesos a memoria fuera de rango. Está relacionada con un iframe y con JavaScript que accede a determinadas propiedades de las hojas de estilo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.01",
            "matchCriteriaId" : "F856639A-0482-4E3F-A002-21340573BA87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://echo.or.id/adv/adv35-y3dips-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1185",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27511",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438872/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18758",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27531",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1972",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://echo.or.id/adv/adv35-y3dips-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438872/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el navegador web Internet Explorer v6 de Microsoft que permite a atacantes remotos causar una denegación de servicio (indisponibilidad de la aplicación) asignando a la propiedad \"Filter\" (filtro) de un objeto ActiveX ADODB.Recordset ciertos valores varias veces, lo que dispara un de-referenciación de un dirección (o puntero) nula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:*:windows_xp_professional_64bit:*:*:*:*:*",
            "matchCriteriaId" : "8EF317BB-E63A-4A60-A2E1-6797A402D88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_98:*:*:*:*:*",
            "matchCriteriaId" : "B1D7486F-1B6C-4705-B73C-F763F36F5150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_98_se:*:*:*:*:*",
            "matchCriteriaId" : "6DBFDCF4-ACC7-4196-BA4D-2A35FAA5E1F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_millennium:*:*:*:*:*",
            "matchCriteriaId" : "5E49636B-A425-4595-9663-A22A9F7C7D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:sp1:windows_xpsp1:*:*:*:*:*",
            "matchCriteriaId" : "FCFF1342-8AD8-4003-81AA-09DB4A12EEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_2000_sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEABB0B-61EF-44E1-8673-F4B5A99A4164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium:*:*:*:*:*:*",
            "matchCriteriaId" : "181D0FA2-79E1-4422-9810-D7A557805872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium_systems:*:*:*:*:*:*",
            "matchCriteriaId" : "3665D68D-8E1E-4FA9-97B9-9E099DDE84F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:*:windows_server_2003:*:*:*:*:*",
            "matchCriteriaId" : "9B0F6E35-652C-4948-9FF4-DBF199B4FA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53E9D33-ECCD-428B-A117-3EB04B9554C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68656E52-AD8A-474E-9160-CD5F8857254B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F47C82-E767-47A8-88DE-417B004ED7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBF9B51-5AF4-4317-9768-21D866AC7990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:canon:network_camera_server_vb101:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EBD1BF-DEE2-4047-A8B4-3A816FC80003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-1-adodbrecordset-filter-property.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18773",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-1-adodbrecordset-filter-property.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function.  NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer de la memoria libre para la reserva dinámica en el archivo httpdget.c de mpg123 en versiones anteriores a 0.59s-rll que permite a los atacantes remotos ejecutar código arbitrario a través de una larga URL, la cual no es finalizada adecuadamente antes de ser utilizada con la función strncpy. NOTA: Esto parece ser el resultado de un parche incompleto para CVE-2004-0982"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpg123:mpg123:pre0.59s_r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9765C6AD-E1F0-421C-B7B1-C09AD83A3DB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=133988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20937",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-01.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=133988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference.  NOTE: This is a different issue than CVE-2006-1469."
      }, {
        "lang" : "es",
        "value" : "La función TIFFFetchAnyArray en ImageIO de Apple OS X 10.4.7 y versiones anteriores permiten al atacantes con la intervención del usuario causar una denegación de servicios (caída de la aplicación)a través de un valor de etiqueta inválido en una imagen TIFF, posiblemente lanzando una referencia nula. NOTA: Asunto diferente a CVE-2006-1469."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.7",
            "matchCriteriaId" : "F745FA7E-6141-446D-B531-ED3CE743371B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.7",
            "matchCriteriaId" : "3EE1DC4C-1173-4A31-A400-10009CD93DDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.security-protocols.com/sp-x31-advisory.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2606",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-protocols.com/sp-x31-advisory.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://cwe.mitre.org/data/definitions/476.html\r\n'CWE-476: NULL Pointer Dereference'"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer de memoria libre para la reserva dinámica en HTML Help ActiveX control (hhctrl.ocx) en Microsoft Internet Explorer 6.0, que permite a los atacantes remotos provocar la denegación de servicios (caída de la aplicación) y posiblemente la ejecución de código arbitrario, estableciendo repetidamente el campo de imagen de un objeto Internet.HHCtrl.1 a determinados valores, posiblemente relacionados con salidas incorrectas y cadenas largas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/159220",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442733/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-08.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/159220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/26835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442733/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) cat_id, and (4) tim parameters, which are not sanitized before being returned in an error page.  NOTE: it is possible that some of these vectors are resultant from an SQL injection issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de múltiples secuencias de comandos en sitios cruzados (XSS)en el archivo index.php de NewsPHP 2006 PRO, que permite a los atacantes remotos inyectar una secuencia web arbitrario o código HTML a través de (1) palabras (2) id, (3) cat_id y (4) tim parameters, que no se limpian antes de ser devuelto el error de página. NOTA. Es posible que alguno de estos vectores sean resultado de una inyección SQL"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsphp:newsphp:2006_pro:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67A384A-1976-4A28-AFCD-AE1E3F383BF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438858/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438858/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) topmenuitem, and (4) cat_id parameters in (a) index.php; and the (5) category parameter in (b) inc/rss_feed.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en NewsPHP 2006 PRO, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) words, (2) id, (3) topmenuitem, y (4) cat_id en (a) index.php;  y el parámetro (5) category en (b) inc/rss_feed.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsphp:newsphp:2006_pro:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67A384A-1976-4A28-AFCD-AE1E3F383BF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438858/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438858/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php de phpSysInfo 2.5.1 permite a atacantes remotos determinar la existencia de ficheros de su elección a través de secuencias .. (punto punto) y un rastro nulo (%00) byte en el parámetro lng, lo cual visualiza un mensaje de error distinto si el fichero existe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsysinfo:phpsysinfo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "1CE54A4C-0FCD-4214-B20A-6C63D8020712"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0065.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0066.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20939",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016440",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/27015",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18868",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2668",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27527",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-2wxv-3g4v-p76p",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpsysinfo/phpsysinfo/issues/368#issuecomment-1380842745",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0065.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0066.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/27015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-2wxv-3g4v-p76p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpsysinfo/phpsysinfo/issues/368#issuecomment-1380842745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) _PHPLIB[libdir] parameter in studip-phplib/oohforms.inc and (2) ABSOLUTE_PATH_STUDIP parameter in studip-htdocs/archiv_assi.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo PHP remoto en Stud.IP 1.3.0-2 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante los parámetros (1) _PHPLIB[libdir] en studip-phplib/oohforms.inc y (2) ABSOLUTE_PATH_STUDIP en studip-htdocs/archiv_assi.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stud.ip:stud.ip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0-2",
            "matchCriteriaId" : "7AB48A4B-5208-4A25-ACE6-E90B8B60A50D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hamid.ir/security/studip.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hamid.ir/security/studip.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip."
      }, {
        "lang" : "es",
        "value" : "connectors/php/connector.php en el gestor de fichero mcpuk de FCKEditor usado en (1) Geeklog 1.4.0 a la v1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable y anteriores, y posiblemente otros productos, cuando se instala sobre Apache con mod_mime, permite a atacantes remotos subir y ejecutar código PHP de su elección a través de un fichero con la extensión .php y rastreando la extensión que está permitida como por ejemplo .zip."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DFD93-BA8A-49BE-9063-E40AC757708A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E07EB8A-5B67-41B9-8358-1CE59E1B6E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0_sr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3EAF15E-44B6-44F6-B794-2DF571131415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6C4C75-D481-4B53-B94B-C92B8EFCC4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95B16BFA-7796-45FF-813B-987B5F9BB635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEB50B9-4BF5-4815-87F4-67C868979805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3A79A9-C696-4B6F-92C3-9ED496D636FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/toenda_100_shizouka_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20886",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21117",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440423/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18767",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19072",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/30950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/6344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/toenda_100_shizouka_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440423/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/30950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/6344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to Geeklog version 1.4.0sr4 :\r\nhttp://www.geeklog.net/filemgmt/index.php?id=727"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the pa parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero PHP en el módulo Glossaire 1.7 para Xoops, permite a atacantes remotos ejecutar cñodigo PHP de su elección a través de una URL en el parámetro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops_glossaire_module:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBBCCA4-52DC-4A02-AA88-61B036C31601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438939/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18792",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438939/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el Plugin NS_SEO en BLOG:CMS 4.1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0k",
            "matchCriteriaId" : "E1E2BE14-72D3-42E7-ABF8-48A1986F91F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogcms.com/wiki/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/blogcms_400k_sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438603/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogcms.com/wiki/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/blogcms_400k_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438603/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to BLOG:CMS version 4.1.0 :\r\nhttp://sourceforge.net/project/showfiles.php?group_id=111880"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement."
      }, {
        "lang" : "es",
        "value" : "La aplicación V3 Chat permite a atacantes remotos obtener la ruta de instalación a través de un parámetro (1) id inválido a mail/index.php o (2) membername a messenger/online.php, lo que hace que muestr la ruta en una página de error debido a una declaración incorrecta SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v3_chat:v3_chat:beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8BA4F5-A0B1-4E17-9F90-5E8704FA7AEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016340",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437755/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438069/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2474",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437755/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438069/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the (1) id parameter in (a) mail/index.php and (b) mail/reply.php; (2) login_id parameter in (c) members/is_online.php; (3) site_id parameter in (d) messenger/online.php, (e) messenger/search.php, and (f) messenger/profile.php; (4) contact_name parameter in messenger/search.php; (5) membername parameter in (g) messenger/profileview.php; (6) unspecified parameters used when \"editing a profile\"; and (7) cust_name parameter in (h) messenger/expire.php.  NOTE: The vendor disputes the vectors involving files in the messenger directory, stating \"... the referenced folder 'messenger' was never available to the general public...\"."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en V3 Chat, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de etiquetas HTML manipuladas como se ha demostrado a través de la etiqueta IMG en: (1) parámetro  id en (a) mail/index.php y (b) mail/reply.php; (2) parámetro  login_id  en (c) members/is_online.php; (3)parámetro   site_id en (d) messenger/online.php, (e) messenger/search.php, y (f) messenger/profile.php; (4) parámetro  contact_name en messenger/search.php; (5) parámetro  membername en (g) messenger/profileview.php; (6) parámetros sin especificar usados cuando se edita un pérfil (\"editing a profile\"); y (7) parámetro cust_name en (h) messenger/expire.php. NOTA: el fabricante discute que los vectores que afectar a los archivos en el directorio \"messenger\", afirmando que \"... la carpeta referenciada 'messenger' jamás está disponible al público en general...\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:v3_chat:v3_chat:beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8BA4F5-A0B1-4E17-9F90-5E8704FA7AEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016340",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437755/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438069/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437755/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438069/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration."
      }, {
        "lang" : "es",
        "value" : "Mp3 JudeBox Server (Mp3NetBox) Beta 1 almacena config.inc dentro de la raíz de documentos web sin un suficiente control de acceso, esto permite a atacantes remotos obtener información sensible, incluyendo la configuración de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3netbox:mp3netbox:beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FAF1AC-85E9-47BF-937A-8EDC1FA23CCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Efone 20000723 almacena el archivo config.inc en la carpeta raíz del directorio web con controles de acceso insuficientes, lo que permite a atacantes remotos obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efone:efone:2000-07-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C18B89D-E1EC-4C1C-AD2F-A09AED04AE33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20902",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18811",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kamikaze-QSCM 0.1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration."
      }, {
        "lang" : "es",
        "value" : "Kamikaze-QSCM 0.1 almacena el fichero config.inc bajo el directorio raíz de los documentos web con un control de acceso insuficiente, lo que permite a atacantes remotos obtener información sensible, incluyendo la configuración de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iduprey:kamikaze-qscm:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8271D521-4748-4B88-80C1-F1617036A013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iduprey:kamikaze-qscm:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98A00D1-C394-4921-97F3-0E87395B1489"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20918",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration."
      }, {
        "lang" : "es",
        "value" : "Blueboy 1.0.3 almacena bb_news_config.inc en la raíz de documentos web con un control de acceso insuficiente, lo que permite a atacantes remotos obtener información sensible, incluyendo la configuración de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bb-news:blueboy:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9CA338-A046-4032-BBE1-FC6BE0D476F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration."
      }, {
        "lang" : "es",
        "value" : "Eupla Foros v1.0 almacena el fichero inc/config.inc en el directorio raíz de documentos web con un control de acceso insuficiente, que podría permitir a atacantes remotos obtener información sensible, incluyendo la configuración de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eupla:foros:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7777B2-1A97-454B-B315-18C867DB2608"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20945",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438964/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttributeNode function call with zero arguments, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Apple Safari 2.0.4/419.3 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante una llamada a la función DHTML setAttributeNode sin argumentos, que desemboca en una referencia nula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D113B5-070D-4F91-AB5E-222D71C90EDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-5-dhtml-setattributenode.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016441",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-5-dhtml-setattributenode.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary files, related to logfetch running as setuid root."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el script client/bin/logfetch de Hobbit 4.2-beta permite a un usuario local leer archivos de su elección; relacionado con logfetch ejecutándose como setuid root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hobbit_monitor:hobbit_monitor:4.2_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F1061E-F05B-4751-B138-899ED319BF32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438818/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438818/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attackers to execute arbitrary PHP code via a URL in the incl parameter."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:randshop:randshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "028ACC2F-C071-4E5F-BEC2-9E49485F8B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:randshop:randshop:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE73B1A-0603-43EF-B891-C8686747DA44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439040/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439063/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18809",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439040/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439063/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivos en PHP en includes/header.inc.php en Randshop v1.1.1 permite a atacantes remotos ejecutar código PHP de su eleccio´n a través del parámetro dateiPfad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:randshop:randshop:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C99BAA-D785-4BFF-909C-1C24F4E002CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18763",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el archivo player.c en libwmf 0.2.8.4, utilizado en múltiples productos incluyendo (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, y(6) imagemagick, que permite a los atacantes remotos ejecutar arbitrariamente código a través del campo cabecera MaxRecordSize en un archivo WMF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wvware:libwmf:0.2.8_.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C647E35-83D2-4D21-AA48-B963B9D6A123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wvware:wv2:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565FB525-8593-4148-8A01-EF99F745AB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wvware:wv2:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB2FAA-427C-4313-B7AF-31829E58C367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wvware:wv2:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E88259-7829-4179-962D-64F98174F6C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0597.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20921",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-17.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438803/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-333-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2006/dsa-1194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0597.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438803/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-333-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2006/dsa-1194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and AutoRank Pro 5.01 and earlier, allows remote attackers to inject arbitrary web script or HTML via the (1) Keyword parameter in search.php and the (2) Username parameter in main.cgi."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en JMB Software AutoRank PHP v3.02 y anteriores, y AutoRank Pro v5.01 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro (1) Keyword en search.php y el parámetro (2) Username en main.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jmb_software:autorank:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "php_3.02",
            "matchCriteriaId" : "AF837F04-7323-47F6-B4D1-5306D579FDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jmb_software:autorank:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "pro_5.01",
            "matchCriteriaId" : "9FCD86F9-9B7B-4324-9F27-4FF486AE033E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20903",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls19.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438941/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls19.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438941/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits."
      }, {
        "lang" : "es",
        "value" : "Comando passwd en shadow, en Ubuntu 5.04 through 6.06 LTS, cuando se pasa como parámetro –f, -g o –s, no comprueba el código de retorno de una llamada seguid, lo que podría provocar que usuarios locales obtuvieran privilegios de administrador (root) si seguid falla en casos como errores PAM o límite de recursos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "3BD12488-1ED8-4751-ABF5-3578D54750A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "AE3733CF-4C88-443C-9B90-6477C9C500D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9C500A75-D75E-45B4-B582-0F0DF27C3C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "86FD134D-A5C5-4B08-962D-70CF07C74923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "FA84692E-F99D-4207-B4F2-799A6ADB88AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "8B0F1091-4B76-44F5-B896-6D37E2F909A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "EF15862D-6108-4791-8817-622123C8D10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "F1672825-AB87-4402-A628-B33AE5B7D4C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "939216D8-9E6C-419E-BC0A-EC7F0F29CE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "E520564E-964D-4758-945B-5EF0C35E605C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "2294D5A7-7B36-497A-B0F1-514BC49E1423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-308-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-308-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue affects the version of the passwd command from the shadow-utils package.  Red Hat Enterprise Linux 2.1, 3, and 4 are not vulnerable to this issue.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de complejidad algorítmica en Hiki Wiki v0.6.0 hasta v0.6.5 y v0.8.0 hasta v0.8.5 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) mediante la realización de un diff entre  páginas grandes manipuladas que disparan el peor caso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F63A0C-E0EF-4574-916E-15C3E7B3CD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEAB59-1B9B-442E-B000-6E4B842EC9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "859F6DB8-9A45-420D-8426-2E06EF1A6D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DF943E-2F0E-421E-85A1-C8D8B0141F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86D2CEE-9666-4B26-A85B-239DECDEEAD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3798F776-8461-49B3-BD4F-FF1E81C65895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A34AFA2-5A70-4548-B067-6C8EE8D5AEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43197C15-7844-4C6B-9215-421C0B59F229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117A6B8E-5962-42F1-BCB0-20A8494FB302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618510DE-A929-482C-89D2-1FA17A8DE587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30A25F8-84FB-4677-9AE9-398DB408AC14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64ECAB6-1B36-41F5-A7C4-F477416F8DF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hikiwiki.org/en/advisory20060703.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2398836916/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20741",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hikiwiki.org/en/advisory20060703.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2398836916/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de complejidad algorítmica en versiones anteriores a 3.6.2 en FreeStyle Wiki, que permite a los atacantes remotos causar una denegación de servicios (agotamiento de CPU) desarrollando una diferencia entre largo, páginas manipuladas que lanzan el peor caso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freestyle:freestyle_wiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.1",
            "matchCriteriaId" : "5ECF8B7C-852E-438A-B54A-DEC255B8F095"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fswiki.poi.jp/wiki.cgi?page=%CD%FA%CE%F2%2F2006-7-3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2398836916/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fswiki.poi.jp/wiki.cgi?page=%CD%FA%CE%F2%2F2006-7-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2398836916/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 3.6.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then directly accessing the file.  NOTE: It is uncertain whether this is a vulnerability or a feature of the product."
      }, {
        "lang" : "es",
        "value" : "SturGeoN Upload permite a atacantes remotos ejecutar código PHP de su elección mediante la subida de un archivo con una extensión .php, para luego directamente acceder al archivo.  NOTE: No esta claro si se trata de una vulnerabilidad o una característica del producto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sturgeon_upload:sturgeon_upload:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85CD37-860A-4DED-B6E7-EB7595B6564C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acidr00t.free.fr/poc/sturgeonupv1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438876/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18764",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acidr00t.free.fr/poc/sturgeonupv1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438876/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the \"search string\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en mAds v1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el \"search string\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mads:mads:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA25E48-B1D5-4407-95DE-2F35D44089E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/blog/2006/06/30/mads-v10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/blog/2006/06/30/mads-v10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover within a URL.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party reports."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en mAds que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de eventos Javascript como onmouseover dentro de una URL. NOTA: la procedencia de esta información es desconocida; los detalles son obtenidos únicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mads:mads:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA25E48-B1D5-4407-95DE-2F35D44089E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) texte parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en divers.php en Vincent Leclercq News 5.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del (1) identificador y (2) parámetros de texto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_leclercq:news:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AD5C93-A977-45AC-A98C-11735C85088B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20936",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/news52.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438859/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18775",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/news52.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438859/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) id and (2) disabled parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en divers.php en Vincent Leclercq News v5.2 permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) id y (2) disabled."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_leclercq:news:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AD5C93-A977-45AC-A98C-11735C85088B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20936",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/news52.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438859/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18775",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/news52.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438859/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail[] parameter with invalid values."
      }, {
        "lang" : "es",
        "value" : "index.php en Vincent Leclercq News 5.2 permite a los atacantes remotos obtener información sensible, como la ruta de instalación, a través del parámetro mail[] con valores no válidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_leclercq:news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "8CF55254-4C5C-4F1E-92C8-87D9B8557FA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20936",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/news52.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438859/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/news52.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438859/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the fil_config parameter, which can be used to execute PHP code that has been injected into a log file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en sources/post.php en Fusion News v1.0, cuando register_globals está habilitado, permite a atacantes remotos incluir ficheros de su elección a través de una secuencia .. (punto punto)en el parámetro fil_config, lo que puede ser utilizado para ejecutar código PHP que ha sido inyectado en un fichero log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionphp:fusion_news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B6D4BA-2CB0-4AB2-9FDB-BA4F6963D534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpMyAdmin en versiones anteriores a 2.8.2, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro table."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59384A5A-F530-4417-8AFB-005EE4A54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CFC048-C7C5-47E6-A7E9-E1ED99142493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120A58AE-69B7-426D-947D-9C0D9D9CE1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980AC0DB-2759-49D3-8347-C119AFFF8DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABC8407-173D-466B-B366-5F7F5D9F2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B0D6C2-AF9E-4395-861D-64502D82589A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666B78D-5DC9-4256-8A23-A4021AE7044A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "229DE8B7-489B-4848-B1BE-2339CB771573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BC58E6-CA26-4760-A6A4-D65184A50539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE7C97E-60C6-417F-86F7-963ADE52A895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF189AE-9485-4F8C-AAAE-25088DF6F964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643C7F9B-B8C5-4C76-B706-F8CB5A800936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560BC57D-BDCE-4479-9847-6DB53A89FFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4859644F-E5FF-4AE4-B16D-CC2243964D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48888218-B238-4F0D-A4C2-E9877D3F3A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A393256A-A5BE-4467-8058-E9CA5D626D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9C4839-2356-4630-BDB3-4A0171F3A785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C55462-6370-45B3-8F00-50F4502981F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BBE005-1FEC-4178-A6A0-CAAB148948F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2E7577-5F89-4B2C-9C28-A5268B539968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929F5CD6-51F3-42CF-8BA8-579120DD835D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B58A87-7A30-494D-9A9A-AF9FE6E59600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF345665-3C1D-4F44-B648-B695D88267BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C525B9-636F-49B9-B528-50AEB0E98F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74632C65-6711-4425-A43F-CCF1664C8542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD740315-190A-43B7-8399-9B72FA592AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B51601C-EDDC-41B7-82E9-EA4E7745F935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD9F5E-B01D-4F1E-8BC2-F140ACF1472F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1600D28-5583-4FA2-835F-BCE10813DB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AAD482-064D-4CFB-A1AE-49095036485A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3C5C9D-A802-40F3-B3CE-593CFED745CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FE9713-54BE-4A70-82F8-03B8E1915E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0611660F-F060-453C-8BE2-1599FE3FF9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892F5D72-1814-48A5-8CCA-A74EE9D633CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3CE1C3-59FF-457F-8579-996CA60CF6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF6246-C393-41BE-BABC-840585795D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4C98E-D127-40EB-BE71-A6BB91D4392C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C26B2DE-669F-4F79-99AE-3210662AAB85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20907",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitynews.ir/advisories/phpmyadmin281.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18754",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitynews.ir/advisories/phpmyadmin281.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to 2.8.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message.  NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information."
      }, {
        "lang" : "es",
        "value" : "index.php en WordPress 2.0.3 permite a los atacante remotos, obtener información sensible como los prefijos de una tabla SQL, a través del parámetro inválido paged, el cual muestra la información en un mensaje de error SQL. NOTA: este asunto ha sido discutido por terceros quienes plantean que el asunto no filtra un información con un objetivo específico."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20928",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-19.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438942/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439031/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439062/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440127/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438942/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439031/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439062/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440127/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables."
      }, {
        "lang" : "es",
        "value" : "WordPress v2.0.3 permite a atacantes remotos obtener la ruta de instalación a través de una petición directa a varios ficheros, tal como aquellos en el (1)wp-admin, (2) wp-content, and (3) directorios wp-includes, posiblemente debido a variables sin inicializar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20928",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-19.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438942/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439062/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438942/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439062/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler."
      }, {
        "lang" : "es",
        "value" : "La función Execute en versiones de iMBCContents ActiveX anteriores a la 2.0.0.59 permite a atacantes remotos ejecutar archivos arbitrarios a través del manejador de URI de archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imbc:imbccontents_activex_control:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.58",
            "matchCriteriaId" : "16D45347-4CBE-447E-B8AC-3B8D18F46816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20938",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones Webmin antes de su versión 1.290 y Usermin antes de la 1.220 llaman a la función simplify_path antes de decodificar HTML, lo que permite a atacantes remotos leer ficheros arbitrarios, como se ha demostrado utilizando secuencias \"..% 01\", evitando de esta manera la supresión del nombre de fichero de las secuencias \"../\" anteriores a octetos del estilo de \"%01\". NOTA: Se trata de una vulnerabilidad diferente a CVE-2006-3274."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.210",
            "matchCriteriaId" : "26B92F53-3598-44F5-8CE1-A04A28EFF92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.80",
            "matchCriteriaId" : "3A061012-19EE-4A9E-9AFC-75DF24D316C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-July/000923.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-June/000912.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20892",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21105",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21365",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22556",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/999601",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26772",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439653/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440125/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440466/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440493/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-July/000923.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-June/000912.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/999601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439653/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440125/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440466/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440493/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.webmin.com/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket."
      }, {
        "lang" : "es",
        "value" : "Papyrus NASCAR Racing v4 4.1.3.1.6 y anteriores, 2002 Season v1.1.0.2 y anteriores y 2003 Season v1.2.0.1 y anteriores; permite a atacantes remotos provocar una denegación de servicio (consumo de la CPU) enviando un datagrama UDP vacío, el cuál no es descartado adecuadamente debido al uso del socket asíncrono FIONREAD."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electronic_arts:nascar_racing:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.3.1.6",
            "matchCriteriaId" : "F5E42F63-74E9-4F1C-ACEE-74EEDF07CF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electronic_arts:nascar_racing:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2002_season_1.1.2",
            "matchCriteriaId" : "FA547B2C-87E1-4272-B506-356330749525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electronic_arts:nascar_racing:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2003_season_1.2.1",
            "matchCriteriaId" : "66EEB763-C4B4-4C72-83EC-2D26CBB12A01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/nascarzero-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20947",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/nascarzero-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary SQL commands via the where parameter in a view action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en los archivos mod en index.php en BXCP 0.3.0.4 permite a atacantes remotos ejecutar comandos SQL a través del parámetro 'where' en una acción 'view'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bxcp:bxcp:0.2.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4FACAE-A9E3-474A-9C5B-4507CC1CBA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bxcp:bxcp:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "792F3D9C-F159-4A1E-AAFE-D5DB729679BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20908",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de fichero en top.php en SiteBuilder-FX v3.5, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro admindir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webdesignhq:sitebuilder-fx:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A9D1D4-A9B3-4064-B92E-053E384C2209"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20923",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016417",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.jaascois.com/exploits/18602017/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/26959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18756",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.jaascois.com/exploits/18602017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/26959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de fichero PHP remoto en galleria.html.php en Galleria Mambo Module en su versión 1.0 y anteriores para Mambo permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miro_international:galleria:1.0_for_mambo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F41DEF-7953-4C33-870E-FE40A1962A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20949",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439035/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439624/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439035/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439624/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Taskjitsu anterior a v2.0.1 permite a atacantes remotos inyectar inyectar secuencias de comandos web y HTML de su elección a través de múltiples parámetros sin especificar, incluyendo (1) el título y (2)la descripción de parámetros cuando se crea una tarea."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9546620-3256-4D85-A144-789A12C5F89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03C9348-DD01-4CB3-A5E4-153A8AFA7024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20912",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pkrinternet.com/download/RELEASE-NOTES.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18818",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.pkrinternet.com/taskjitsu/task/3313",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/20912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pkrinternet.com/download/RELEASE-NOTES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.pkrinternet.com/taskjitsu/task/3313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"change password forms\" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the (1) Category Editor and (2) User Information editor."
      }, {
        "lang" : "es",
        "value" : "El formulario de cambio de contraseñas en las versiones de Taskjitsu anteriores a la 2.0.1 incluye los hashes (funciones resumen) de las contraseñas en los campos ocultos del formulario, lo que permite a atacantes remotos obtener información sensible a partir de (1) el Editor de categorías y (2) el editor de información de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9546620-3256-4D85-A144-789A12C5F89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03C9348-DD01-4CB3-A5E4-153A8AFA7024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.pkrinternet.com/download/RELEASE-NOTES.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.pkrinternet.com/taskjitsu/task/3400",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.pkrinternet.com/download/RELEASE-NOTES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.pkrinternet.com/taskjitsu/task/3400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message, a variant of CVE-2004-1632."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en wiki.php en MoniWiki anterior a v1.1.2-20060702 permite a atacantes remotos inyectar Javascript de su elección a través de la URL, lo que se refleja en un mensaje de error, es una variante de CVE-2004-1632."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moniwiki:moniwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "DE5D63A8-7A26-4966-85DB-6D3E4D127E4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20909",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438808/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438952/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438808/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438952/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de pila basado en búfer en la función CG_ServerCommand del motor de Quake 3, tal como se usa en Soldier of Fortune 2 (SOF2MP) GOLD 1.03 permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código arbitrario mediante el envío de un comando desde el servidor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC83733-F8B0-4985-BB48-2DA85C5C4393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AE21A-5028-485F-822C-4DA7F557A40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_812:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CE71CC-1E0C-4927-8E3B-432304719088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7194A0-A9B3-490F-A575-1F7AEADEE636"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20946",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of service and possibly execute code via long CS_ITEMS values."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el motor de Quake 3 (Quake 3 Engine) de Quake 3: Arena v1.32b y v1.32c; permite a atacantes remotos causar una denegación de servicio a través de los valores long CS_ITEMS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAC83733-F8B0-4985-BB48-2DA85C5C4393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:1.32c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AE21A-5028-485F-822C-4DA7F557A40C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id_software:quake_3_engine:icculus_812:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CE71CC-1E0C-4927-8E3B-432304719088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20946",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20961",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2657",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2684",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the password parameter when logging in."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en VirtuaStore v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro contraseña al iniciar sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuastore:virtuastore:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506E6135-7767-4611-BCE8-7AD6FB977318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016421",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18790",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-06T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la función xcf_load_vector en app/xcf/xcf-load.c para versiones de gimp anteriores a la 2.2.12 permite provocar una denegación de servicio a atacantes con la ayuda de usuarios locales provocando asimismo una caída de la aplicación y posiblemente también ejecutar código arbitrario a través de un archivo XCF con un valor num_axes demasiado alto en la propiedad VECTORS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.12",
            "matchCriteriaId" : "4BECCB5C-0408-43FE-927F-FB5D702B2449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=377049",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=346742",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20976",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20979",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21069",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21104",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21170",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21182",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21198",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23044",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-08.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016527",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102720-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200070-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1116",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:127",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27037",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0598.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440987/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441012/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441030/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18877",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-312-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2703",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4634",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27687",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-522",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11259",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5908",
        "source" : "cve@mitre.org",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=377049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.gnome.org/show_bug.cgi?id=346742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102720-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200070-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0598.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440987/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441030/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-312-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Tool Signature" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) delete, (2) pathext, and (3) edit parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Secuencia de Comandos en Sitios Cruzados (XSS) en qtofm.php de QTOFileManager 1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) delete, (2) pathext y (3) edit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qto:qtofilemanager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C01BAAC3-1909-4D69-80CB-F68FA10516AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438960/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18791",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438960/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) sequence in the edit parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio, en qtofm.php de QTOFileManager 1.0, permite a atacantes remotos modificar ficheros de su elección mediante una secuencia .. (punto punto) en el parámetro de edición (edit)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qto:qtofilemanager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C01BAAC3-1909-4D69-80CB-F68FA10516AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438960/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438960/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters."
      }, {
        "lang" : "es",
        "value" : "Tor versiones anteriores a la 0.1.1.20 permite a atacantes remotos falsificar entradas de log o posiblemente ejecutar código por consola a través de cadenas de caracteres no imprimibles."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20277",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el servidor de directorios (dirserver) en Tor antes de 0.1.1.20 permite a atacantes remotos provocar una denegación de servicio no especificada a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20277",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Tor versiones anteriores a la 0.1.1.20, permite a atacantes remotos ejecutar código de su elección a través de entradas largas manipuladas, lo cual provoca un desbordamiento de búfer cuando se añaden elementos a las smartlists"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20277",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 creates \"internal circuits\" primarily consisting of nodes with \"useful exit nodes,\" which allows remote attackers to conduct unspecified statistical attacks."
      }, {
        "lang" : "es",
        "value" : "Tor versiones anteriores a 0.1.1.20 crea \"circuitos internos\" principalmente consistentes en nodos con \"nodos de salida útil\", lo cual permite a atacantes remotos conducir ataques estadísticamente no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20277",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys."
      }, {
        "lang" : "es",
        "value" : "Presentaciones (handshake) TLS en Tor anteriores a 0.1.1.20 generan claves públicas-privadas basadas más en el contexto TLS que en la conexión, lo que facilita a los atacantes remotos realizar ataques de fuerza bruta contra las llaves cifradas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers."
      }, {
        "lang" : "es",
        "value" : "Tor anterior a 0.1.1.20 no sigue correctamente determinadas opciones del cortafuegos, esto permite a atacantes remotos evitar las restricciones de acceso pretendidas para los dirservers (servidores de directorios), conexiones directas o servidores proxy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the \"logfile\", which allows attackers to obtain potentially sensitive information."
      }, {
        "lang" : "es",
        "value" : "El archivo de configuración en Tor antes de la versión 0.1.1.20, cuando se ejecuta en Apple OS X, almacena todos los archivos de log a través del \"logfile\", lo que permite a atacantes remotos obtener información potencialmente sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution."
      }, {
        "lang" : "es",
        "value" : "Tor anterior a 0.1.1.20 soporta descriptores de servidor que contienen nombres de equipos en lugar de direcciones IP, lo que permite a los atacantes remotos, agrupar usuarios de forma arbitraria, facilitando la resolución de direcciones preferencial.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 uses improper logic to validate the \"OR\" destination, which allows remote attackers to perform a man-in-the-middle (MITM) attack via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Tor versiones anteriores a 0.1.1.20 utiliza una lógica inapropiada para validar el destino \"OR\", lo cual permite a atacantes remotos llevar a cabo un ataque man-in-the-middle (MITM) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded.  NOTE: while this item is listed under the \"Security fixes\" section of the developer changelog, the developer clarified on 20060707 that this is only a self-DoS.  Therefore this issue should not be included in CVE"
      }, {
        "lang" : "es",
        "value" : "** CUESTIONADA **  Tor anterior a 0.1.1.20 cancela el circuito cuando recibe un comando de transmitir erróneo, lo que provoca que los circuitos de la red sean desconectados. NOTA: Mientras que este elemento aparece listado bajo la sección \"Soluciones de seguridad\" del Log de cambios del desarrollador, el mismo aclara en 20060707 que esto es solamente un Self-DoS. Por consiguiente este asunto no será incluido en CVE. \r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy \"entry guard\" (is_guard) systems by directory authorities."
      }, {
        "lang" : "es",
        "value" : "El Cliente Tor, anterior a 0.1.1.20, prefiere puntos de entrada basados en las banderas is_fast o is_stable, que permitiría a atacantes remotos ser preferidos sobre los nodos que están identificados como sistemas más confiables \"entry guard\" (is_guard) por las autoridades de directorio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks."
      }, {
        "lang" : "es",
        "value" : "Tor versiones anteriores a la 0.1.1.20 utiliza bytes pseudo aleatorios OpenSSL (RAND_pseudo_bytes) en vez de RAND_bytes que son criptográficamente fuertes y genera el valor de entropía al arranque con fragmentos de 160 bits sin regeneración de semillas, lo cual facilita a los atacantes llevar a cabo ataques de adivinación por fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4490AC9B-E8D8-4C97-866B-AB76AB2536F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2A2B60-8D31-4B59-8407-9CE62709906A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE02B1D-AA25-4364-8E54-583A0304FA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3AB095-3F57-4922-BC12-0842FA158555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811FD436-8BD2-463A-8072-A915FFCA33C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F107CD-7334-4D9D-AEFF-FA5F8DE72576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EB2211-D97D-47EF-94D1-01E7A3879BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28DC8889-4E65-46D0-AA68-6390757862D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4C7373-82F1-49E6-90D6-7A02AC52F255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D847A-D8F1-40CE-AE33-A397654C55B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301BA35-2522-4144-83C2-6A3A6D329A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37993416-D81F-4F6B-AB2C-16F351BE68D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C826F-CBEB-4BA2-A760-22D58D231BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D230B213-4A35-488F-A4B5-87F77BD65E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF88062-8726-4C1D-8F93-ABA0B1654656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A710565-6960-4D46-A1EB-86FE0927A66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6C954-7C0A-41E5-9719-26082E40C5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43784D06-2D2A-46D1-ADE2-B947B3F10F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196BF37C-CD62-4D4C-A716-827B0E6A5065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20076B65-48E6-4DA2-BDA1-AC4F904B449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A2CCAD-397B-4037-B99B-F0A622FAF8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E74056-DD32-49E6-808A-5A9B755F1DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2103A8-0F3F-4226-A5D8-4BF239FD6636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0490AB18-A839-400D-88E2-D918B1EEFA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBED980F-A8B9-4C44-957C-FD18867B1799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E033E0C-C7F6-4910-A795-28BA60E9431A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAAACA5-F431-4D83-B04D-EC9A81C96184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D5B46C-E7D3-495F-861C-12324F09EC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E3063-34CC-4AE2-B055-92D36ECAADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5305AF8-E26C-44A1-B546-AAC5D1C2D053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCAB29-4EF2-4A50-A941-DA5D89E27D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33928D26-39DF-4E15-9979-F9484913C219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7D396C-36CA-4579-BCA0-672440CB5CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811CE708-CEE6-4B0F-98E5-E138C06EA382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6860F802-FEC2-449A-A5FC-AFACCA8633CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9E677-01D2-4800-82AA-F5585475D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C589D4F-60B3-450B-860A-9975BB47BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA331167-6A2F-402F-A28F-9EE7B6F20207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4740B10-EFB8-4F79-88C1-9B6F5897A71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7556-D132-4E81-8E13-C7E025AF20AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D224FA8D-4C5A-48BE-92F2-1EC57782046D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200606-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tor.eff.org/cvs/tor/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user and delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en editpost.php en MyBulletinBoard (MyBB) en versiones anteriores a 1.1.5 permiten a atacantes remotos realizar acciones sin autorización como un usuario validado y borrar correos internos del foro a través de la etiqueta IMG con un parámetro \"borrar\" modificado en la acción \"borrar correo\".\r\nNOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4409B6-9F4D-4136-BA74-43736215A122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 1.1.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in (1) comment.php, (2) admin/comedit.php, (3) admin/test.php, (4) admin/index.php, and (5) admin/include/inc_adminfoot.php, a different set of vectors than CVE-2006-3162."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en SmartSiteCMS 1.0 y anterior, cuando register_globals esta habilitado, permite a atacantes remotos ejecutar código de su elección a través del parametro root en (1) comment.php, (2) admin/comedit.php, (3) admin/test.php, (4) admin/index.php, y (5) admin/include/inc_adminfoot.php, un conjunto de vectores diferente a CVE-2006-3162."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartsitecms:smartsitecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "C2897020-A463-4D9D-94B6-C90667A771B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26748",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26749",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26750",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26751",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438581/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438581/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, as used by multiple templates including (1) rwb (template/rwb/user_bottom.php), (2) gwb (template/rwb/user_bottom.php, (3) blues, (4) bluwhi, and (5) grns."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en WonderEdit Pro CMS permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro config[template_path] en user_bottom.php, usado  en múltiples plantillas, entre ellas (1) rwb (template/rwb/user_bottom.php), (2) gwb (template/rwb/user_bottom.php, (3) blues, (4) bluwhi, y (5) grns."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wonderedit:wonderedit_pro_cms:gold:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "90B48566-09AA-4700-845C-9B0EC92F3E62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file."
      }, {
        "lang" : "es",
        "value" : "WebEx Downloader ActiveX Control y WebEx Downloader Java anteriores a 2.1.0.0 no validan los componentes descargados, lo cual permite a atacantes remotos ejecutar código de su elección a través de sitios web que activan los controles ActiveX GpcUrlRoot y GpcIniFileName haciendo que el cliente se descargue un archivos DLL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webex_communications:downloader_activexcontrol:2.0.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B317345-C51E-4F2D-B6BF-035F70101E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webex_communications:downloader_java:2.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D34608-D541-4E91-9075-550F704E6AE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20956",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439496/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2688",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439496/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 2.1.0.0."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el control ActiveX WebEx Downloader, posiblemente versiones anteriores a Noviembre de 2005, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webex_communications:webex_downloader_activex_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5330B13C-D30D-4EC7-9026-2BE15725BC84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 2.1.0.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters."
      }, {
        "lang" : "es",
        "value" : "FastPatch para (a) PatchLink Update Server (PLUS) versiones anteriores a 6.1 P1 y 6.2.x versiones anteriores a 6.2 SR1 P1, y (b) Novell ZENworks 6.2 SR y versiones anteiores, no requiere autenticación para dagent/proxyreg.asp, lo cual permite a atacantes remotos listar, añadir, o borrar servidores proxy PatchLink Distribution Point (PDP) a través de la modificación de los parámetros (1) List, (2) Proxy, o (3) Delete."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188E8F59-0F22-4C43-8B16-CC5637BF6AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.2.0.181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7704C648-6295-4145-BD2C-77E62DF55196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.2.0.189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8171827-A661-4492-BD53-8DEB2F3759A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "7B1706D5-7465-48C0-8C96-C6798A73B35F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20878",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438710/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438710/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b) Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. (dot dot) sequence in the (1) action, (2) agentid, or (3) index parameters to dagent/nwupload.asp, which are used as pathname components."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en (a) PatchLink Update Server (PLUS) anterior a v6.1 P1 y v6.2.x enterior a v6.2 SR1 P1 y (b) Novell ZENworks 6.2 SR1 y anteriores, permite a atacantes remotos sobreescribir ficheros de su elección a través de una secuencia ..(punto punto) en los parámetros (1) action, (2) agentid, or (3) index al dagent/nwupload.asp, que es usado como el componente de nombre de ruta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188E8F59-0F22-4C43-8B16-CC5637BF6AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.2.0.181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7704C648-6295-4145-BD2C-77E62DF55196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.2.0.189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8171827-A661-4492-BD53-8DEB2F3759A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "7B1706D5-7465-48C0-8C96-C6798A73B35F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438710/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438710/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 permite a atacantes remotos provocar una denegación de servicio (caída) mediante la declaración del atributo sourceURL en un objeto ActiveX DirectAnimation.StructuredGraphicsControl sin inicializar, lo cual dispara un referencia a NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-6-structuredgraphicscontrol.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/26839",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18855",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2687",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27565",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-6-structuredgraphicscontrol.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/26839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in (1) loan.php and (2) mortgage.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en TigerTom TTCalc 1.0 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro year en (1) loan.php y (2) mortgage.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigertom_scripts:ttcalc_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF12FDD-5C5A-42E8-A213-C04BB48F7890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439208/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439208/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the currency parameter in (1) loan.php and (2) mortgage.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en TigerTom TTCalc 1.0 permitiendo a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de parámetro en los archivos (1) loan.php y (2) mortgage.php.  NOTA: la fuente de esta información es desconocida; los detalles son obtenidos únicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigertom_scripts:ttcalc_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF12FDD-5C5A-42E8-A213-C04BB48F7890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20952",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439208/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439208/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en checkprofile.asp de (1) PatchLink Update Server (PLUS) versiones anteriores a 6.1 P1 y 6.2.x versiones anteriores a 6.2 SR1 P1 y (2) Novell ZENworks 6.2 SR1 y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro agentid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188E8F59-0F22-4C43-8B16-CC5637BF6AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.2.0.181:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7704C648-6295-4145-BD2C-77E62DF55196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumension:patchlink_update_server:6.2.0.189:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8171827-A661-4492-BD53-8DEB2F3759A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:zenworks:*:sr1:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2",
            "matchCriteriaId" : "7B1706D5-7465-48C0-8C96-C6798A73B35F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438710/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2595",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2596",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047495.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438710/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2451",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-07T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions."
      }, {
        "lang" : "es",
        "value" : "El soporte suid_dumpable de Linux kernel 2.6.13  hasta versiones anteriores a 2.6.17.4, y 2.6.16  anterior a 2.6.16.24, permite a usuarios locales provocar una denegación de servicio (agotamiento de disco) y posiblemente obtener privilegios a través del argumento PR_SET_DUMPABLE de la función prctl y un programa que provoca que se cree un fichero de volcado de memoria (core dump) en un directorio en el que el usuario no tiene permisos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20953",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20965",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20986",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20991",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21966",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016451",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=0af184bb9f80edfbb94de46cb52e9592e5a547b0",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_49_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27030",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0574.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439483/100/100/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439610/100/100/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439869/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440057/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440117/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440118/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440379/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18874",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-311-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2699",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-488",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=0af184bb9f80edfbb94de46cb52e9592e5a547b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_49_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0574.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439483/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439610/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440057/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440117/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440118/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440379/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-311-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the \"Style\" option, as demonstrated by nanika.xls.  NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en ciertas versiones en lengua asiática de Microsoft Excel podrían permitir a atacantes asistidos por usuario ejecutar código arbitrario a través de un registro STYLE manipulado en una hoja de cálculo que desencadena el desbordamiento cuando el usuario trata de reparar el documento o selecciona la opción \"Style\", como se demuestra por nanika.xls. NOTA: Microsoft ha confirmado a CVE a través de e-mail que esta vulnerabilidad es diferente a las otras vulnerabilidades Excel anunciadas antes del 07-07-2006, incluyendo CVE-2006-3059 y CVE-2006-3086."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7973AE7A-FE9F-4AB8-BBA8-98F3AF25487C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115274676314243&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20268",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438963/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439427/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18872",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115274676314243&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438963/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439427/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-07T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the \"raw\" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Zope 2.7.0 a 2.7.8, 2.8.0 a 2.8.7, y 2.9.0 a 2.9.3 (Zope2) no desabilita el comando \"raw\" cuando se mantiene a usuarios no válidos con la funcionalidad de texto reestructurado (reStructuredText) desde docutils, lo cual permite a usuarios locales leer archivos de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E296CD1C-2601-4A63-9E9D-38A39C84BF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9B22D-6EF3-4364-A016-041457C4DFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88153606-52FE-4C0B-88CD-B76538C19055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA38381-4C32-4C55-8116-341028D1888A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B294E38-65FD-474D-BABC-9447EF33202A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685805FD-1A33-480E-A313-255EDF0B5266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D827148D-4A8A-41DB-91B6-0049706D53D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0273EF1B-BC64-432F-8966-68547DFAD6BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A52CDCE-172C-4FAC-9015-ACF362E8E8A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234C776B-C053-484C-ADE4-ED270064943F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "244107E5-42B0-4695-BBC9-5B90AD0A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93785E75-3F82-471E-B802-6337A6469AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34066B4-CE72-4271-9CFD-F725F7D17C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A40B0D1-1812-4BC7-AC7D-CCE6184A9DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81028DBB-7A75-4D27-8027-947F15CAA21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BCE60F-9081-44D3-87FC-396D1A954626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA09D22-779C-4E63-B216-B931FA11E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC9CB4D-3DE0-425B-9897-03C23379B5F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D9A178-BF69-4C23-BEC8-D175FD58E10D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0279FD6-9E30-429A-BB70-9B7AF7055160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E8ABCF-A7BE-4AB7-BFE9-CF29F7E02860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.zope.org/pipermail/zope-announce/2006-July/001984.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20988",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21130",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zope.org/Products/Zope/Hotfix-2006-07-05/Hotfix-20060705/README.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/317-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.zope.org/pipermail/zope-announce/2006-July/001984.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zope.org/Products/Zope/Hotfix-2006-07-05/Hotfix-20060705/README.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/317-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1176",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-07-08T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de Búfer en eBay Enhanced Picture Services (también conocido como EPUImageControl Class) de EUPWALcontrol.dll versiones anteriores a 1.0.3.48, como se usa en Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader y CARad.com Add Vehicle, permite a atacantes remotos ejecutar código de su elección mediante un documento HTML manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ebay:enhanced_picture_services:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.36",
            "matchCriteriaId" : "C430372F-FABF-414E-92FC-4AF39F9027CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20969",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1016445",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/597721",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6QKPVH",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18921",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2698",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27631",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/20969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/597721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6QKPVH",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2917",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-07-10T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY, (6) APPEND, and (7) LIST commands."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el servidor IMAP en WinGate 6.1.2.1094 y 6.1.3.1096, y posiblemente otras versiones anteriores a 6.1.4 Build 1099, permite a usuarios autenticados leer el correo de otros usuarios, o realizar operaciones no autorizadas en los directorios, a través de las ordenes 1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY, (6) APPEND, y (7) LIST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.1.2.1094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "982DE691-B50E-49B2-B4DF-EC518DFFCE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbik:wingate:6.1.3.1096:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F8EFCA3-2453-4272-9692-22598676DFC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20707",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-48/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18908",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2730",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.wingate.com/download.php",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-48/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wingate.com/download.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2936",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-10T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued."
      }, {
        "lang" : "es",
        "value" : "El controlador ftdi_sio (usb/serial/ftdi_sio.c) en el kernel de Linux de 2.6.x a 2.6.17 y posiblemente versiones posteriores, permite a usuarios locales provocar una denegación de servicio (consumo de memoria) al escribir mas datos al puerto serie de los que puede manejar el hardware, lo que provoca que los datos queden en cola."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20703",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21057",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21298",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24547",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25226",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25683",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/patches.git%3Ba=blob%3Bh=4b4d9cfea17618b80d3ac785b701faeaf60141f1%3Bhb=396eb2aac550ec55856c6843ef9017e800c3d656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_18_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_21_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_30_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_35_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27119",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440300/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2841",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197610",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27807",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10265",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/patches.git%3Ba=blob%3Bh=4b4d9cfea17618b80d3ac785b701faeaf60141f1%3Bhb=396eb2aac550ec55856c6843ef9017e800c3d656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_18_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_21_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_30_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_35_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges."
      }, {
        "lang" : "es",
        "value" : "El Openmanage CD de DELL, inicia los demonios(daemons) X11 y SHH sin requerir autenticación. Lo que permite a atacantes remotos la obtención de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:openmanage_cd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5CB42F8-CB3E-491C-BB12-FF3CA0FE0D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://msgs.securepoint.com/cgi-bin/get/bugtraq0606/187.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/577729",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://msgs.securepoint.com/cgi-bin/get/bugtraq0606/187.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/577729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference, as demonstrated using the appendChild method."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 en Windows XP, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una tabla con un frameset (conjunto de marcos) como hijo, esto provoca una referencia nula, como se ha demostrado utilizando el método appendChild."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:*:windowsxp:*:*:*:*:*",
            "matchCriteriaId" : "DACE76B0-02BC-4624-A21E-405A893D7437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:windows_xp:*:*:*:*:*",
            "matchCriteriaId" : "BA04D0A1-23AE-4C0F-8FE3-FD88D75CDA03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-7-tableframeset.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-7-tableframeset.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with an A tag containing a long title attribute.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6.0 y 6.0 SP1 permite a atacantes remotos provocar una denegación de servicio a través de una página HTML con una etiqueta A que contiene un atributo de título largo. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/30822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18820",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/30822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in form_mail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers, which facilitates sending spam messages, a different issue than CVE-2006-1225."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de retorno de carro y salto de línea (CRLF) en form_mail Drupal Module antes de 1.8.2.2 permite a atacantes remotos inyectar cabeceras de email, lo que facilita el envío de mensajes de spam, un problema distinto a CVE-2006-1225."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:form_mail_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.2.1",
            "matchCriteriaId" : "3D7C5CA1-FA82-4327-A576-F6A0127D4629"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/72177",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20920",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/72177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to (a) gbrowse.php, (2) card_id parameter to (b) rating.php and (c) create.php, and the (3) event_id parameter to (d) search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Belchior Foundry vCard PRO permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) cat_id a (a) gbrowse.php, (2) card_id a (b) rating.php y (c) create.php y (3) event_id a (d) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:belchior_foundry:vcard:pro:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F78924-EBA7-420E-9DDF-504E837CD91A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438589/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18699",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438589/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter to (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php or (7) history.php, a different set of vectors than CVE-2006-2998."
      }, {
        "lang" : "es",
        "value" : "Múltiples inclusiones de archivos PHP remotos en free QBoard 1.1 permiten a atacantes remotos    ejecutar código PHP de su elección a través de un URL en el parámetro qb_path a (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php o (7) history.php, un conjunto de vectores distinto a CVE-2006-2998."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_qboard:free_qboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DE640F9-5C01-431A-A141-B286F9E763C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438951/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18788",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438951/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows remote attackers to inject arbitrary web script or HTML via the keyword parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en comments.php de PhpWebGallery 1.5.2 y anteriores y posiblemente 1.6.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro keyword."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F0EE492-82CC-4B8D-A4C2-C03D90E3512C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A62835-F153-476A-8F73-D190E249C60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0A25DD-835C-43FF-A040-90B59B5C8D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029740C0-CC4B-412A-AD11-8B1D7ED66996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B249FD5-B164-41F3-970E-8701C8C469CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebgallery:phpwebgallery:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A75BEC-B94C-403A-92B6-36C4C6E49D65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20935",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439049/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18798",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439049/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to cause a denial of service (server crash) via unspecified vectors involving opening an empty inbox."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el servicio POP de Stalker CommuniGate Pro 5.1c1 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída de servidor) a través de vectores no especificados involucrando la apertura de un buzón de entrada vacío."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate:pro_5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E472C2C-6CFC-4A60-925D-3D92115BB3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate:pro_5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F9CEF3-B1AD-4970-B4CA-5696B9AC218D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalker:communigate:pro_5.1c1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40AB343E-6611-447D-A5A2-B4D73233A5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20905",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.communigate.com/CommuniGatePro/History.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.communigate.com/CommuniGatePro/History.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 5.1c2."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the domain parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo PHP remoto en styles/default/global_header.php de MyPHP CMS 0.3 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro domain (dominio)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_cms:myphp_cms:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA12653-167F-4346-A887-043572685E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphp_cms:myphp_cms:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD86A0C-8C2C-4E9F-921D-595A0C264B75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 SP4.2 allows remote attackers to delete arbitrary \"blocks\" via a link with a modified bid parameter in a del_block op on the block page in index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la función del_block de modules/Admin/block.php en Nuked-Klan 1.7.5 y anteriores y 1.7 SP4.2 permite a atacantes remotos eliminar \"blocks\" de su elección mediante un enlace con un parámetro bid modificado en un del_block op en la página block en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "5157FE81-262C-4AD2-80F3-BC6EC6CB7268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.7_sp4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8BF0DD-41C5-4FBF-BFD0-D6034473E3BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20898",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to Nuked-Klan version 1.7.6 or 1.7 SP4.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters involving the (1) getUserStateFromRequest function, and the (2) SEF and (3) com_messages modules."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Joomla! antes de 1.0.10 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de parámetros no especificados que involucran a (1) la función getUserStateFromRequest y los módulos (2) SEF y (3) com_messages."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20874",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1510/74/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/1511/78/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18742",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1510/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.joomla.org/content/view/1511/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands via unspecified parameters involving the (1) \"Remember Me\" function, (2) \"Related Items\" module, and the (3) \"Weblinks submission\"."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Joomla! antes de 1.0.10 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de parámetros no especificados que involucran (1) la función \"Remember Me\", (2) el módulo \"Related Items\" y (3) \"Weblinks submission\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9709F901-EDD2-4369-89F0-8AF3A63655E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C21464-3FD4-4528-A512-7C0DE70E331C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20874",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1510/74/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/1511/78/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18742",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1510/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.joomla.org/content/view/1511/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in maillist.php in PHPMailList 1.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en maillist.php de PHPMailList 1.8.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro email."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmaillist:phpmaillist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "092C9A47-592C-436B-8B4D-D26FEAD0A9CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2006/07/multiple-vulnerabilities-in.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20959",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2006/07/multiple-vulnerabilities-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allows remote attackers to obtain email addresses of subscribers, configuration information, and the admin username and password via direct requests to (1) list.dat or (2) ml_config.dat."
      }, {
        "lang" : "es",
        "value" : "PHPMailList 1.8.0 almacena información sensible bajo la raíz de documentos web con un control de acceso insuficiente, lo que permite a atacantes remotos conseguir direcciones email de subscriptores, información de configuración y el nombre de usuario y contraseña de admin mediante una petición directa a (1) list.dat o (2) ml_config.dat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmaillist:phpmaillist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "092C9A47-592C-436B-8B4D-D26FEAD0A9CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2006/07/multiple-vulnerabilities-in.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2006/07/multiple-vulnerabilities-in.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) show_courses or (2) current_cat parameters to (a) admin/create_course.php, show_courses parameter to (b) users/create_course.php, (3) p parameter to (c) documentation/admin/, (4) forgot parameter to (d) password_reminder.php, (5) cat parameter to (e) users/browse.php, or the (6) submit parameter to admin/fix_content.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ATutor antes de 1.5.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) show_courses o (2) current_cat a (a) admin/create_course.php, show_courses a (b) users/create_course.php, (3) p a (c) documentation/admin/, (4) forgot a (d) password_reminder.php, (5) cat a (e) users/browse.php, o (6) submit a admin/fix_content.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB903C6-ECB0-4203-BCC2-533CB404B64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD9CAD8-8ADA-459C-9DF8-C161EE31BF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.3_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1190C595-D62E-44CE-A642-2362A4F2D31E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20941",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.atutor.ca/view/3/8341/1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18857",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.atutor.ca/view/3/8341/1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T20:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en AstroDog Press Some Chess 1.5-RC2 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados, puede que incluyendo el parámetro gameID en board.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astrodog_press:some_chess:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D7AF4F-A18E-4D70-80C8-817F8AE3B7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astrodog_press:some_chess:1.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF74DDF5-817C-49B1-861A-7266D10865AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20885",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=586734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26784",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18745",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=586734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, which triggers the overflow when the convert_dirname function is called.  NOTE: the vendor has disputed this issue via e-mail to CVE, saying that it is only exploitable when the user has access to the configuration file or the Instance Manager daemon.  Due to intended functionality, this level of access would already allow the user to disrupt program operation, so this does not cross security boundaries and is not a vulnerability"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Desbordamiento de búfer por superación del límite en la función Instance_options::complete_initialization de instance_options.cc en el Instance Manager de MySQL antes de 5.0.23 y 5.1 antes de 5.1.12 podría permitir a usuarios locales provocar una denegación de servicio (caída de aplicación) mediante vectores sin especificar, lo que dispara el desbordamiento cuando se llama a la función convert_dirname. NOTA: el fabricante ha impugnado este problema por email a CVE, diciendo que solamente es explotable cuando el usuario tiene acceso al archivo de configuración o al demonio Instance Manager. Debido a su funcionalidad prevista, este nivel de acceso ya permitiría al usuario interrumpir la operación del programa, por lo cual esto no transpasa los límites de seguridad y no es una vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E063D-355D-4A5A-A05F-36BF582DE36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BED939-3366-4CBF-B6BF-29C0C42E97F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4F891-2A03-45A8-A49C-7F8B8F7D8407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E62AC4-954E-476C-98BE-C138E328AE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B88385C-F5FB-401F-80D5-5BF11CE3C19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F49A1D-BCA3-4772-8AB3-621CCC997B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F719DD8E-8379-43C3-97F9-DE350E457F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342BB65B-1358-441C-B59A-1756BCC6414A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8589B1E7-0D6D-44B4-A36E-8225C5D15828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FEEE64-899F-4F55-B829-641706E29E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8597F56-BB14-480C-91CD-CAB96A9DDD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB2323C-EFE2-407A-9AE9-8717FA9F8625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6341F695-6034-4CC1-9485-ACD3A0E1A079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF5F19-ECD9-457F-89C6-6F0271CF4766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mysql.com/bug.php?id=20622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-23.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.1/en/news-5-1-12.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2700",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=20622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.1/en/news-5-1-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider this issue to have security implications, and therefore have no plans to issue MySQL updates for Red Hat Enterprise Linux 2.1, 3, or 4 to correct this issue.",
        "lastModified" : "2006-07-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb."
      }, {
        "lang" : "es",
        "value" : "VirtuaStore 2.0 almacena archivos sensibles bajo la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos obtener información de la base de datos local accediendo directamente a database/virtuastore.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuastore:virtuastore:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506E6135-7767-4611-BCE8-7AD6FB977318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in the Pasta parameter when link=util, acao=ftp, and acaba=sim."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de ruta absoluto en administrador.asp in VirtuaStore 2.0 permite a atacantes remotos posiblemente leer directorios o archivos de su elección a través de una ruta absoluta con una letra de dispositivo de Windows en el parámetro Pasta cuando link=util, acao=ftp y acaba=sim."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuastore:virtuastore:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506E6135-7767-4611-BCE8-7AD6FB977318"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename."
      }, {
        "lang" : "es",
        "value" : "F-Secure Anti-Virus de 2003 a 2006 y otras versiones, Internet Security de 2003 a 2006 y Service Platform para Service Providers 6.x y anteriores permite a atacantes remotos evitar la búsqueda antivirus a través de un nombre de archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:workstations:*:*:*:*:*",
            "versionEndIncluding" : "5.44",
            "matchCriteriaId" : "723EB35B-5E24-4901-BDB6-D16D063F9857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:windows_servers:*:*:*:*:*",
            "versionEndIncluding" : "5.52",
            "matchCriteriaId" : "141114BE-BDF1-45D7-A4D7-BF55172FB2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:mimesweeper:*:*:*:*:*",
            "versionEndIncluding" : "5.61",
            "matchCriteriaId" : "CFE0DE01-2910-49C6-AF4B-5799FEB04338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:client_security:*:*:*:*:*",
            "versionEndIncluding" : "6.01",
            "matchCriteriaId" : "8C8DC4C2-E570-412E-BCF8-05B65D190383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "095A03CE-6B8F-4275-87BE-44E807F97939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.51:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "2CFD7DE5-37B0-4AA9-8026-D13EFA31DDA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "CAB9474C-A4F9-45C0-A77C-34B794AE2262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831F0C4D-C85F-46DA-BC9E-D3F56DE2B085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F996B07-8B07-42A6-86FC-B5B55F708861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2C1784-2482-4CBE-BE6D-4519C3FB64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6689D4E1-F8DC-46D9-BA35-4E4AE9C28456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0429B86A-F228-44E8-ABBB-D57BEE3679F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A0FDD3-3364-4452-BD6F-EB6F85D3119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788A5AB-C847-476C-9767-C6711F2D4EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_service_platform_for_service_providers:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A730182C-A1EC-410E-82F2-893815444638"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-4.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-4.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when \"Scan network drives\" is disabled, which allows remote attackers to bypass anti-virus controls."
      }, {
        "lang" : "es",
        "value" : "F-Secure Anti-Virus 2003 a 2006 y otras versiones, Internet Security 2003 a 2006 y Service Platform for Service Providers 6.x y anteriores no escanean archivos ubicados en medios extraíbles cuando la opción \"Escanear Unidades de Red\" está deshabilitada, lo cual permite a atacantes remotos evitar el control de los antivirus."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:workstations:*:*:*:*:*",
            "versionEndIncluding" : "5.44",
            "matchCriteriaId" : "723EB35B-5E24-4901-BDB6-D16D063F9857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:windows_servers:*:*:*:*:*",
            "versionEndIncluding" : "5.52",
            "matchCriteriaId" : "141114BE-BDF1-45D7-A4D7-BF55172FB2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:mimesweeper:*:*:*:*:*",
            "versionEndIncluding" : "5.61",
            "matchCriteriaId" : "CFE0DE01-2910-49C6-AF4B-5799FEB04338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:client_security:*:*:*:*:*",
            "versionEndIncluding" : "6.01",
            "matchCriteriaId" : "8C8DC4C2-E570-412E-BCF8-05B65D190383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "095A03CE-6B8F-4275-87BE-44E807F97939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.51:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "2CFD7DE5-37B0-4AA9-8026-D13EFA31DDA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:citrix_servers:*:*:*:*:*",
            "matchCriteriaId" : "CAB9474C-A4F9-45C0-A77C-34B794AE2262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831F0C4D-C85F-46DA-BC9E-D3F56DE2B085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F996B07-8B07-42A6-86FC-B5B55F708861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2C1784-2482-4CBE-BE6D-4519C3FB64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6689D4E1-F8DC-46D9-BA35-4E4AE9C28456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0429B86A-F228-44E8-ABBB-D57BEE3679F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A0FDD3-3364-4452-BD6F-EB6F85D3119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788A5AB-C847-476C-9767-C6711F2D4EA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-secure:f-secure_service_platform_for_service_providers:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A730182C-A1EC-410E-82F2-893815444638"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-4.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-4.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/26876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to execute arbitrary code via a long nickname."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Kaillera Server 0.86 y anteriores permite a atacantes remotos ejecutar código de su elección a través de un alias largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:christophe_thibault:kaillera:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.86",
            "matchCriteriaId" : "03143505-4AA9-40B5-BDBD-8FED31380707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/kailleraex-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115220500707900&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20973",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439455/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18871",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/kailleraex-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115220500707900&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439455/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote attackers to cause a denial of service (application crash) via a message with an incorrect \"object key\", which triggers an assert error."
      }, {
        "lang" : "es",
        "value" : "La función de orb.cc CORBA::ORBInvokeRec::set_answer_invoke de MICO (Mico Is CORBA) 2.3.12 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a tavés de un mensaje con un \"object key\" incorrecto, esto induce un error de declaración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mico:mico:2.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92ECF260-B226-4B2F-B611-285DF4396679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mico:mico:2.3.12_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EDF4F5-198D-4C14-AA39-39662A7B11E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047708.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mico.org/down.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20970",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439439/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439655/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047708.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://mico.org/down.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439439/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type.  NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función LsCreateLine (mso_203) en mso.dll y mso9.dll, tal como se utiliza en Microsoft Word y posiblemente en otros productos en Microsoft Office 2003, 2002 y 2000, permite a atacantes remotos asistidos por usuario provocar una denegación de servicio (caída) a través de un documento Word manipulado u otro tipo de archivo Office. NOTA: este problema fue originalmente reportado para permitir ejecución de código, pero el 10-07-2006 Microsoft declaró que la ejecución de código no es posible y el investigador original está de acuerdo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB85A3C-EFA3-485D-84C5-7976718AEAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9D02D769-061D-44A5-B019-F4E653DF615A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/07/10/441006.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047732.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115231380526820&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115261598510657&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439649/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439878/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18905",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/07/10/441006.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047732.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115231380526820&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115261598510657&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439649/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439878/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-10T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) view_ad.php; (3) event_id parameter in (c) view_event.php, (d) delete_event.php, and (e) edit_event.php; and (4) group_id in (f) view_group.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Buddy Zone 1.0.1 permite a atacantes remotos inyectar HTML y secuencias de comandos web de su elección a través de los parámetros (1) cat_id a (a) view_classifieds.php; (2) id en (b) view_ad.php; (3) event_id en (c) view_event.php, (d) delete_event.php y (e) edit_event.php; y (4) group_id en (f) view_group.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vastal_i-tech:buddy_zone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "E03F83C7-84A8-4603-BCB4-754694771550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20933",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26979",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26980",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26981",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26982",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26983",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26984",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438868/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440144/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2645",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438868/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440144/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0007",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en GIFIMP32.FLT, usado por Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, y otros productos, permite ataques asistidos por usuario para ejecutar código de su elección mediante una imagen GIF especialmente modificada para provocar la corrupción de la memoria cuando es analizada sintácticamente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q3/0005.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016470",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/668564",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27146",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439887/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18915",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2757",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-039",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A21",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/vulnwatch/2006-q3/0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/668564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439887/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0033",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Office 2003 SP1 y SP2, Office XP SP3, Office 2000 SP3 y otros productos, permite a atacantes con la ayuda del usuario ejecutar código de su elección a través de una imagen PNG manipulada que induce una corrupción de memoria cuando se analiza sintácticamente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21013",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016470",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-22.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/459388",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27147",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18913",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2757",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-039",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A163",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/459388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1300",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified \"URL paths\" that can access Application Folder objects \"explicitly by name.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft .NET framework 2.0 (ASP.NET) en Microsoft Windows 2000 SP4, XP SP1 y SP2, y Server 2003 hasta SP1, permite a atacantes remotos evitar las restricciones de acceso a través de \"URL paths\" no especificadas que pueden acceder a objetos Application Folder \"explícitamente por nombre\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A419F50E-F32C-461C-95D0-978C5351FBAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20999",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016465",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27153",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18920",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2751",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-033",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26802",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A419",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/20999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1314",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Server Service (SRV.SYS driver) de Microsoft Windows 2000 SP4, XP SP1 y SP2, Server de 2003 a SP1 y otros productos, permite a atacantes remotos ejecutar código de su elección a través de mensajes Mailslot de primera clase manipulados lo que dispara una corrupción de memoria y evita las restricciones de tamaño en mensajes Mailslot de segunda clase."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21007",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/1212",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/189140",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27154",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439773/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18863",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-02.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2753",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26818",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A600",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/189140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439773/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1315",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka \"SMB Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "The Server Service (SRV.SYS driver) en Microsoft Windows 2000 SP4, XP SP1 y SP2, Server de 2003 a SP1 y otros productos, permite a atacantes remotos obtener información sensible a través de una petición manipulada que filtra información en búfers SMB, lo que no está correctamente inicializado, también conocido como \"SMB Information Disclosure Vulnerability (Vulnerabilidad de Revelación de Información SMB)\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:server_service:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08E9DB-A5F4-43D8-93C5-1F849CEAD41A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21007",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016467",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/333636",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27155",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439881/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18891",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2753",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26820",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/333636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439881/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1316",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka \"Microsoft Office Parsing Vulnerability,\" a different vulnerability than CVE-2006-2389."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Microsoft Office 2003 SP1 y SP2, Office XP SP3, Office 2000 SP3 y otros productos, permite a atacantes ayudados por el usuario ejecutar código de su elección a través de un archivo Office con una cadena mal formada que dispara una corrupción de memoria relacionada con longitudes de archivo, también conocido como \"Microsoft Office Parsing Vulnerability (Vulnerabilidad de Análisis Sintáctico de Microsoft Office)\", una vulnerabilidad distinta de CVE-2006-2389."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21012",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016469",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/580036",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27148",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18912",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2756",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27607",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A918",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/580036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2372",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a crafted DHCP response."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el servicio DHCP Client para Microsoft Windows 2000 SP4, Windows XP SP1 y SP2 y Server 2003 hasta SP1 permite a atacantes remotos ejecutar código de su elección a través de una respuesta DHCP manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dhcp_client_service:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4925A948-1B0D-4CF7-B958-91BAE5930205"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0222.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21010",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1201",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016468",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_Microsoft_Windows_DHCP_Client_Service_Remote_Buffer_Overflow.pdf",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/257164",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27151",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439675/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444631/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18923",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2754",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-036",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A232",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0222.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_Microsoft_Windows_DHCP_Client_Service_Remote_Buffer_Overflow.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/257164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439675/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444631/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2389",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka \"Microsoft Office Property Vulnerability,\" a different vulnerability than CVE-2006-1316."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Office 2003 SP1 y SP2, Office XP SP3, Office 2000 SP3 y otros productos, permite a atacantes ayudados por el usuario ejecutar código de su elección a través de un archivo Office con una propiedad mal formada que dispara una corrupción de memoria relacionada con longitudes de documentos, también conocido como \"Microsoft Office Property Vulnerability (Vulnerabilidad de Propiedad de Microsoft Office)\", una vulnerabilidad distinta a CVE-2006-1316."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21012",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016469",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/409316",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27149",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18911",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2756",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27609",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A279",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/409316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0026",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-11T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via crafted Active Server Pages (ASP)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Microsoft Internet Information Services (IIS) 5.0, 5.1, y 6.0 permite localmente y posiblemente a atacantes remotos ejecutar código de su elección a través de Active Server Pages (ASP) manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C954A7-FF84-4DEB-8728-5B207F374ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "413C07EA-139F-4B7D-A58B-835BD2591FA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0316.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21006",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016466",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/395588",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27152",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18858",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2752",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26796",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A435",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/395588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-192A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read."
      }, {
        "lang" : "es",
        "value" : "The Remote Data Service Object (RDS.DataControl) de Microsoft Internet Explorer 6 en Windows 2000 permite a atacantes remotos provocar una denegación de servicio (caída) a través de series de operaciones que resultan en una longitud de cálculo no válida cuando se utiliza SysAllocStringLen, entonces se dispara una sobre-lectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:*:windows_server:*:*:*:*:*",
            "matchCriteriaId" : "8D4BD1B0-8A91-4ED2-9C0D-BF87D18A01C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "09A21D9F-6F51-4761-B7DB-E79CE60A0E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-8-rdsdatacontrol-url.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18900",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-8-rdsdatacontrol-url.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts property of the HtmlDlgSafeHelper object, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer 6 on Windows XP SP2 permite a atacantes remotos provocar una denegación de servicio (caída) activando la propiedad fonts del objeto HtmlDlgSafeHelper, lo que dispara una referencia nula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-11-htmldlgsafehelper-fonts.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27055",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18929",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2743",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27649",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-11-htmldlgsafehelper-fonts.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilter ActiveX object to true, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer 6 on Windows XP permite a atacantes remotos provocar una denegación de servicio (caída) activando la propiedad Enabled de un objeto ActiveX DXTFilter a verdadero, lo que dispara una referencia nula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/27014",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18903",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2732",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27623",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/27014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data property of a DirectAnimation DAUserData object before it is initialized, which triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "danim.dll de Microsoft Internet Explorer 6 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) \t\r\npor acceder a los datos de propiedad de un objeto DirectAnimation DAUserData antes de que sea inicializado, lo cual dispara un puntero a referencia NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:*:windows_server_2003:*:*:*:*:*",
            "matchCriteriaId" : "9B0F6E35-652C-4948-9FF4-DBF199B4FA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A53E9D33-ECCD-428B-A117-3EB04B9554C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68656E52-AD8A-474E-9160-CD5F8857254B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F47C82-E767-47A8-88DE-417B004ED7FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86E7189-CE21-4007-A3FA-39A6B51A5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBF9B51-5AF4-4317-9768-21D866AC7990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-9-directanimationdauserdata-data.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18902",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-9-directanimationdauserdata-data.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote attackers to execute arbitrary web script or HTML via the (1) name, (2) title, (3) news, (4) description, and (5) sitename parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en admin/actions.php de PHP-Blogger 2.2.5 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de loos parámetros (1) name, (2) title, (3) news, (4) description y (5) sitename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpblogger:php-blogger:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5AB1C4-3FA7-4906-A6D1-C2C9FE044339"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439440/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439440/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función loginADP de ajaxp.php en AjaxPortal 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección y evitar la autenticación a través de los parámetros (1) username o (2) password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myiosoft.com:ajaxportal:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A495D32-547A-4B0E-BEB6-D2FF4350CF42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-355.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439521/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439614/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-355.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439521/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439614/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in FreeHost allow remote attackers to execute arbitrary SQL commands via (1) readme parameter to FreeHost/misc.php or (2) index parameter to FreeHost/news.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en FreeHost permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) readme de FreeHost/misc.php o el parámetro (2) index de FreeHost/news.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freehost:freehost:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC14BC53-E95E-4809-9E1D-CD3032B0995A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438813/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438813/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in stats.php in RW::Download, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo PHP remoto en stats.php de RW::Download, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rwscripts.com:rw_download:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB96624-1416-4E11-A44B-0662D0AACA22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439524/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary SQL commands via the ID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en SayfalaAltList.asp de Webvizyon Portal 2006 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webvizyon.net:webvizyon_portal:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AA5DD1-F2D9-42A6-B325-74DB60CAA126"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439599/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18899",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439599/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-11T23:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in The Banner Engine (tbe) 4.0 allow remote attackers to execute arbitrary web script or HTML via the (1) text parameter in a search action to (a) top.php, and the (2) adminpass or (3) adminlogin parameter to (b) signup.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en The Banner Engine (tbe) 4.0 permiten a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través del (1) parámetro text parameter en una acción de búsqueda a (a) top.php, y el (2) parámetro adminpass o (3) parámetro adminlogin a (b) signup.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:native_solutions:the_banner_engine:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3429E46B-304E-4702-A31E-2BC90879170A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016432",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438972/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438972/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pluginpath[0] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en skins/advanced/advanced1.php de Sabdrimer Pro 2.2.4, cuando está activado register_globals, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro pluginpath[0]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sabdrimer_cms:sabdrimer_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.4",
            "matchCriteriaId" : "E2F741CB-BF10-4C7D-9614-8E29BF18036B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18907",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index/siteforge-bugs-action/proj.siteforge in SiteForge Collaborative Development Platform 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) _status, (2) _extra1, (3) _extra2, or (4) _extra3 parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index/siteforge-bugs-action/proj.siteforge de SiteForge Collaborative Development Platform 1.0.4 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) _status, (2) _extra1, (3) _extra2, o (4) _extra3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simian_systems_inc:siteforge_collaborative_development_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "AC60FD65-B8BF-407D-8183-8B4AFDD1755C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/siteforge-collaborative-development_15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/siteforge-collaborative-development_15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Clearswift MIMEsweeper for Web versiones anteriores a 5.1.15 Hotfix, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la URL, se ve reflejado en un mensaje de error cuando se intenta acceder a un sitio web bloqueado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.14",
            "matchCriteriaId" : "4A4870A9-1C01-49EC-B18D-EAD828FF5A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115249298204354&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115253320721404&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115253898206225&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20998",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439641/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440140/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115249298204354&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115253320721404&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115253898206225&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439641/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service (crash) via an encrypted archived .RAR file, which triggers a scan error and causes the Web Policy Engine service to terminate."
      }, {
        "lang" : "es",
        "value" : "Clearswift MIMEsweeper para Web antes de 5.1.15 Hotfix permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo .RAR encriptado archivado, lo que dispara un error de escaneado y provoca que termine el servicio de Web Policy Engine (Motor de Política Web)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clearswift:mimesweeper_for_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.14",
            "matchCriteriaId" : "4A4870A9-1C01-49EC-B18D-EAD828FF5A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20998",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a long CSeq field value in an INVITE message."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en SIPfoundry sipXtapi desarrollos anteriores a 24-03-2006 permite a atacantes remotos ejecutar código de su elección a través de un valor largo en el campo CSeq en un mensaje INVITE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sipfoundry:sipxtapi:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4FD743A-448C-4201-BF26-790DF11A1EDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047757.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047794.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20997",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439617/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440135/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18906",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047757.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047794.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439617/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440135/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Inyección SQL en PHCDownload 1.0.0 Final y 1.0.0 Release Candidate 6 y previas, permite a atacantes remotos ejecutar comandos SQL de su elección   a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcredo:phcdownload:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0_release_candidate_6",
            "matchCriteriaId" : "6DEB8A95-8019-4F85-AEB4-A6D8A08BDA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcredo:phcdownload:1.0.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6551670-61A5-451E-84FC-904B3E85DF02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/06/phcdownload-sql-injection-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/06/phcdownload-sql-injection-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Sport-slo Advanced Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) name and (2) form parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en guestbook.php en Sport-slo Advanced Guestbook 1.0, permiten a atacantes remotos inyectar secuencias de comandos Web de su elección o HTML a través de los parámetros (1) name y (2) form."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sport-slo:sport-slo_advanced_guestbook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789D456B-8B22-4EF6-A743-80FE2C61B64C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20977",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recent.php, (3) account.php, (4) classified.php, or (5) search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en BosClassifieds Classified Ads permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro insPath de (1) index.php, (2) recent.php, (3) account.php, (4) classified.php, o (5) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bosdev:bosclassifieds_classified_ads:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B802B58C-5006-416B-B994-6AA24EFEE6A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.jaascois.com/exploits/18602018/",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/27314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18883",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.jaascois.com/exploits/18602018/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/27314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to (1) image_upload.php and (2) file_upload.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión de archivo PHP remoto en el módulo Simpleboard de Mambo 1.1.0 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro sbp a (1) image_upload.php y (2) file_upload.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:simpleboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "DCF9AAE4-EB39-4551-A313-FF745BA76419"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115876919804966&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20981",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18917",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115876919804966&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service (kernel packet memory consumption and crash) via crafted IPv6 packets whose buffers are not released after they are processed."
      }, {
        "lang" : "es",
        "value" : "Fuga de memoria en Juniper JUNOS de 6.4 a 8.0, construidos antes del 10 de mayo de 2006, permite a atacantes remotos provocar una denegación de servicio (agotamiento del paquete de memoria del núcleo y caída) a través de paquetes IPv6 manipulados cuyos búfers no se liberan después de ser procesados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8089D28-839F-45CF-9247-969A9739E685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8664DCE8-CDED-4F79-AB0C-39EBAC70CB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534326C1-089F-4F5D-8C16-F9612DA81CB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975AF42B-DC98-40FA-8320-E836B14363E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05A9228-0C1F-4545-A1D9-3F1B3D350C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ABDDB7-20CB-4F56-8F12-7A584814E7ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3195C856-8C0F-44DA-8DBB-ADD1854F0D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15480017-59ED-446C-9E9C-13D710ABC9E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF1C2CC2-9EA4-4017-BFF7-399FEBA0DE9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F443DB8-1E98-4D66-A75D-DCC4716218E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51EBFBB-9236-436F-AC05-C7AFD9452A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851DD20A-9796-4B06-A9FF-C16D74310156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38C56079-E4AC-4CE2-805D-AB893F82070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913BE97D-81FB-44A6-B699-C0DBED49E130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690C6E3A-BD5E-4F68-BC65-866A7962731E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36DE975-8D35-4789-8A5F-F120F6B47174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0EE5FF2-A12F-41EF-9A3D-66B471288BF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.juniper.net/support/security/alerts/EXT-PSN-2006-06-017.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.juniper.net/support/security/alerts/IPv6_bug.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/294036",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.juniper.net/support/security/alerts/EXT-PSN-2006-06-017.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.juniper.net/support/security/alerts/IPv6_bug.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/294036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests."
      }, {
        "lang" : "es",
        "value" : "El demonio smdb (smbd/service.c) en Samba versiones 3.0.1 hasta la 3.0.22, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de un gran número de peticiones de conexión compartida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216145B7-4716-42F7-90DC-03884ECB2271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898968E5-577E-4B86-A804-EBEC67157A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8016DC4F-F410-4401-BDCC-91BE0D44D028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC116E5-B739-4E18-AA51-FFF59EBCA08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D40F682-9F2E-465F-98F7-23E1036C74A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9478CC84-802F-4960-ACAB-3700154E813F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BEA3806-E33A-49A6-99A4-095B4E543C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7D08FB-30B9-4E42-B831-21A0C095062C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E6C8A4-FA17-44EF-A447-C73108540B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D5EA00-CC2E-4E56-8297-A3C1CEDBBE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E05AD3-C7F0-421D-8C9B-604E553332E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A53517C-F12D-4D74-A722-5AE23598CEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF4A0A7-E176-4009-BAA2-E23B330D91A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EB6115-CC45-4464-8400-D7E3A9402803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B06DAF-869F-481B-965D-70353581A6E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF1A1D4-39DE-4227-A6E0-7E7817BDCCE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F0E277-09BD-4FA8-B2A3-7E83AD1656BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F260B05-3963-49BF-9D96-EB06722C5483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A7E91B-7B13-47E5-B8E6-CE7D6DC490F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1936E19-9887-4E53-AA0C-738ABD4B97EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2206C09-6A4B-4EC4-A206-E48EDF966913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B918306-8743-404D-A035-CC3997ADCC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43684906-D3AA-40FB-A75D-ED65C1DC9BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E39538-4811-49DB-97CF-1F018C58BAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C85D69FE-AF43-4B0E-A7A9-2D2C16426180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86347948-C08F-4F02-89A0-4F4A55CD4BA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20980",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20983",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/313836",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0591.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.samba.org/samba/security/CAN-2006-3403.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439757/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439880/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440767/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440836/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448957/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18927",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-314-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/313836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0591.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.samba.org/samba/security/CAN-2006-3403.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439757/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439880/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440767/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440836/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448957/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-314-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in com_pccookbook/pccookbook.php in the PccookBook Component for Mambo and Joomla 0.3 and possibly up to 1.3.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en com_pccookbook/pccookbook.php del componente PccookBook para Mambo y Joomla 0.3 y posiblemente hasta la 1.3.1, cuando register_globals es activado, permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:pc_cookbook:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AE12AE-C3CD-43D0-89E8-CFDC2A91F980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:pc_cookbook:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C25755F5-4252-45C0-9FFE-119E875CB15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv37-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21015",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439618/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv37-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439618/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified (1) pass and (2) session parameters, and (3) pass and (4) userlevel indices of the (a) Pivot_Vars[] or (b) Users[] array parameters."
      }, {
        "lang" : "es",
        "value" : "includes/editor/insert_image.php en Pivot 1.30 RC2 y anteriores crea las credenciales de autentificación desde parámetros que permite a atacantes remotos obtener privilegios para subir archivos a través de los parámetros: (1)\"pass\", (2) \"session\", (3) índices pass y (4) \"userlevel\" de las matrices (a) Pivot_Vars[] o (b) Users[]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivot:pivot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.30_rc2",
            "matchCriteriaId" : "E5D86FDA-4903-4AA7-BD63-108D253D8B5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pivot_130RC2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20962",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439495/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18881",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/pivot_130RC2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439495/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Paths[extensions_path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/edit_new.php en Pivot 1.30 RC2 y versiones anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL FTP o una ruta completa de fichero  mediante el parámetro Paths[extensions_path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivot:pivot:1.30_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB55A2D-699E-4BF1-AECB-37BFE0D8D7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pivot_130RC2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20962",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439495/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18881",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/pivot_130RC2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439495/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.30 RC2 and earlier, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) fg, (2) line1, (3) line2, (4) bg, (5) c1, (6) c2, (7) c3, and (8) c4 parameters in (a) includes/blogroll.php; (9) name and (10) js_name parameters in (b) includes/editor/edit_menu.php; and, even if register_globals is not enabled, the (11) h and (12) w parameters in (c) includes/photo.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Pivot 1.30 RC2 y anteriores, cuando está activado register_globals. Permite a atacantes remotos    inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) fg, (2) line1, (3) line2, (4) bg, (5) c1, (6) c2, (7) c3 y (8) c4 en (a) includes/blogroll.php; (9) name y (10) js_name en (b) includes/editor/edit_menu.php; e incluso si register_globals no está activado los parámetros 11) h y (12) w en (c) includes/photo.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivot:pivot:1.30_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB55A2D-699E-4BF1-AECB-37BFE0D8D7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/pivot_130RC2_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20962",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439495/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18881",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/pivot_130RC2_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439495/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing \"/content\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Nullsoft SHOUTcast DSP versiones anteriores a la 1.9.6, filtra secuencias de salto de directorio antes de decodificarse, lo que permite a atacantes remotos leer ficheros de su elección a través de secuencias codificadas punto punto (%2E%2E) en una petición HTTP GET para una ruta de archivo que contenga \"/content\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.5",
            "matchCriteriaId" : "6228FD2F-E446-43C0-BA4F-A9A4D83E0840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.7.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "8F6BDC78-C016-43CA-A0FC-D3872F4A3874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51161B33-A3F8-438B-99C7-9AE57A13FA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EFDB45-B6D9-482E-8EBF-79830E4BD025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.3:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "440E9595-71EE-42B5-8F81-3C63AC2040ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C79B1E-D8B7-49C0-8BB6-E9BBD46837E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:freebsd:*:*:*:*:*",
            "matchCriteriaId" : "E508D922-3817-4BD3-A4D5-B6981F10BDFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C08E8A3C-A83F-4339-AC5B-B8EC896B70A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "4A842C27-A792-4483-92EF-7CD08507C246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "B703039B-1EC8-41D2-8365-CA7359BFDFE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "EE770672-FF5D-41F7-A1CF-35811EF8098C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC4C250-C763-4D93-BE20-6EACF00C97C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.2:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "7C138869-BAFB-49EF-A6F9-F3F70D0A4D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5199CE97-4B9A-4515-979F-7629F7E24842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "7A4E885A-D64C-41E6-8F79-3569C7E95642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "BC4BF564-908B-4996-A3AF-0D73C2C80283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "57E21195-8378-48D2-B337-BCFF2822A4E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.5:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "F0893B1F-D8E5-4980-A524-4639325DA101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_server:1.9.5:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "6906F523-05B2-48C5-82F9-CE4520F3BF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=136721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://people.ksp.sk/~goober/advisory/001-shoutcast.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20524",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.shoutcast.com/#news",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=136721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://people.ksp.sk/~goober/advisory/001-shoutcast.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shoutcast.com/#news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nNullsoft, SHOUTcast DSP, 1.9.6\r\nNullsoft, SHOUTcast DSP, 1.9.7"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.7 allows remote attackers to read arbitrary files via unspecified vectors that are a \"slight variation\" of CVE-2006-3534."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Nullsoft SHOUTcast DSP en versiones anteriores a 1.9.7 permite a atacantes remotos leer archivos arbitrarios a través de vectores no especificados que son una \"ligera variación\" de CVE-2006-3534."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_dsp:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CF7D73-1060-4816-8510-80992B5FD24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:shoutcast_dsp:1.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97A1B42-B488-47EB-9FCA-7864EB6E155C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=136721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://people.ksp.sk/~goober/advisory/001-shoutcast.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-05.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.shoutcast.com/#news",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=136721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://people.ksp.sk/~goober/advisory/001-shoutcast.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.shoutcast.com/#news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in code/class_db_text.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbitrary PHP code via parameters such as (1) descripcion and (2) pais, which are stored directly in a PHP script.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party reports."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección directa de código estático en code/class_db_text.php de EJ3 TOPo 2.2.178 y anteriores. Permite a atacantes remotos ejecutar código PHP de su elección a través de parámetros como (1) descripcion y (2) pais, que están almacenados directamente en una secuencia de comandos. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de reportes de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97DE3DF-26E0-4899-BD33-D05E91C968FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2.178:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4C4E28-C301-427D-9E29-69A85EEC3ED6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Randshop before 1.2 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter, a different vector than CVE-2006-3375."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en Randshop anterior a la 1.2 permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro dateiPfad, un vector distinto de CVE-2006-3375."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:randshop:randshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "951A43FE-895E-4087-BC79-F9FDE394ECA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:randshop:randshop:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE73B1A-0603-43EF-B891-C8686747DA44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439750/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18865",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439750/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nRandshop, Randshop, 1.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-12T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files."
      }, {
        "lang" : "es",
        "value" : "Adobe Reader y Acrobat 6.0.4 y anteriores en Mac OSX, tiene un archivo y permisos de directorio inseguros, lo que permite a usuarios locales obtener privilegios sobrescribiendo archivos de programa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:mac_os_x:*:*:*:*:*",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "094C5CA3-3A53-4FBB-A3B0-AAACFB483798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:3.0:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "CFE305BD-C0A6-446F-B024-F863D18E7118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:3.1:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "BFBD3E27-47F7-47B2-AB79-3412E0C5CFAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "D07FEC05-6428-494D-9D06-3F32E9A888D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "91822723-E6A1-4BDD-B5DE-EC74EBBBA757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5a:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "50EAFD44-E165-4CDE-8E91-89FEE7B76380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:4.0.5c:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "CBE1AA7A-3ECA-4562-8352-2BE7BC198165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "D86D2131-3847-4FCE-95DC-1DD7E27EEDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.5:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "1BF315DE-ADB4-41C2-B751-CE1D85BD7C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:5.0.10:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "39BB7A9A-DD1D-496D-BD5A-9838BF89ADD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "8C6B978A-2D9B-442E-87FC-07401356C662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.1:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B22A936C-A184-426C-A35A-BAAE7A1798C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.2:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DBF188C8-9AEB-4090-80C8-12AEEC9A818A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.3:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "81BEE82F-FA1F-4CD4-95CC-CFB2F26ABB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:for_mac_os_x:*:*:*:*:*",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "513E7A9E-EBB9-443C-A20C-0C7295B8023F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:3.0:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "83F48E77-3ACA-4996-9662-7A7F304253DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0:*:for_mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "22FD4844-D304-4F90-8BB1-BF6634C7B9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "F7E6B88A-8039-44E8-ADCF-55605D6B0861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "642DCA9D-41C8-438B-A463-6ADBA9F52184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B4FFFB1C-3FC1-41D8-BBAB-BAC8090344EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0:*:for_mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B67896FB-2722-4A9E-8957-09F3AEBC3CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:for_mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "5166180B-7499-469C-83EF-A07E4BA785FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "2661711B-22F9-4793-9AEC-C369D664EF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:5.1:*:for_mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "7A86FD0B-0B14-4424-9073-E4B0AF5DBB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0:*:for_mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "3D340FEB-E80D-4FE0-937F-A0998CF27370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:for_mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "EA35B0B4-E4EA-4799-880E-6872B04F6CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:for_mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "1EC84245-B9AE-42B1-A1F2-3EBB69F7B59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:for_mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "FB1E657F-8DB5-4A4E-A789-93C6927A0776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21016",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-08.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18945",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability only exists in multi-user environments.\r\nThis vulnerability is addressed in the following product releases:\r\nAdobe, Acrobat Reader, 6.0.5 for Mac OSX\r\nAdobe, Acrobat, 6.0.5 for Mac OSX"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the (1) \"Your name\" field and (2) \"Enter Prayer Request here\" field."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en demo.php de BeatificFaith Eprayer Alpha permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del atributo SRC de un elemento SCRIPT de los campos (1) \"Your name\" (Tu nombre) y (2) \"Enter Prayer Request here\" (Introduce Petición de Oración aquí)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beatificfaith:eprayer:alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28A3046-F2FD-4F1D-BB14-0AF498B04B43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/437269/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.youfucktard.com/xsp/eprayer1.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/xsp/eprayer2.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437269/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.youfucktard.com/xsp/eprayer1.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/xsp/eprayer2.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DKScript.com Dragon's Kingdom Script 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the (1) Subject and (2) Message fields in a do=write (aka Send Mail Message) action in gamemail.php; the (3) Gender, (4) Country/Location, (5) MSN Messenger, (6) AOL Instant Messenger, (7) Yahoo Instant Messenger, and (8) ICQ fields in a do=onlinechar (aka Edit your Profile) action in index.php, as accessed by dk.php; a javascript URI in the SRC attribute of an IMG element in the (9) Title and (10) Message fields in a do=new (aka Create Thread) action in general.php; and a javascript URI in the SRC attribute of an IMG element in unspecified fields in (11) other Forum posts and (12) Forum replies."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en DKScript.com Dragon's Kingdom Script 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un URI javascript en el atributo SRC de un elemento IMG en los campos (1) Subject y (2) Message en una acción do=write (también conocida como Enviar Mensaje de Correo Electrónico) en gamemail.php; los campos (3) Gender, (4) Country/Location, (5) MSN Messenger, (6) AOL Instant Messenger, (7) Yahoo Instant Messenger, y (8) ICQ en una acción do=onlinechar (también conocida como Editar tu Perfil) en index.php, como el accedido por dk.php; un URI javascript en el atributo SRC de un elemento IMG en los campos (9) Title y (10) Message en una acción do=new (también conocida como Crear Hilo) en general.php; y un URI javascript en el atributo SRC de un elemento IMG en campos no especificados en otros (11) mensajes de Foro y (12) respuestas de Foro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dkscript:dragons_kingdom_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2751717-D972-40ED-B4DD-86126E64AC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20662",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437753/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2439",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking1.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking2.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking3.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking4.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking5.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking6.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking7.jpg",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437753/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking1.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking2.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking3.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking4.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking5.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking6.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/xsp/dragking7.jpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey function calls, which allows local users to cause a denial of service (system crash) via a certain combination of these function calls with an HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\VETFDDNT\\Enum argument."
      }, {
        "lang" : "es",
        "value" : "Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, y posiblemente otras versiones no validan apropiadamente llamadas a funciones RegSaveKey, RegRestoreKey, y RegDeleteKey, lo cual permite a usuarios locales provocar una denegación de servicio (caída de sistema) mediante determinadas combinaciones de estas llamadas a funciones con el argumento:\r\nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\VETFDDNT\\Enum ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_security_suite:6.1.737.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA41FAC2-F2EE-4EAD-B69D-D6FE2B5791FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonelabs:zonealarm_security_suite:6.5.722.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6B9F5F-D838-4309-A83D-438FDF897F2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-protection-of-registry-key-VETFDDNT-Enum.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438970/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-protection-of-registry-key-VETFDDNT-Enum.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438970/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Meine Links (aka My Links) in Kyberna ky2help allows remote authenticated users to execute arbitrary SQL commands via unspecified \"textboxes.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Meine Links (también conocido como My Links) en Kyberna ky2help permite a permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección mediante \"cajas de texto\" no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kyberna:ky2help:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF05982C-99E5-40AC-8C8C-9BCBFAFC00DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047634.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439034/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047634.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439034/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) shop name field in (a) editshop.php, (b) edititem.php, and (c) index.php; and via the (2) item field in editshop.php and edititem.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Garry Glendown Shopping Cart 0.9 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del nombre de campo (1)shop en (a) editshop.php, (b) edititem.php, y (c) index.php; y a través del campo (2) item en editshop.php y edititem.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boxcar_media:shopping_cart:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55FD981-5B2F-4CD7-9F16-35A5CC8D51B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439150/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439150/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the (1) idcat and (2) code parameters in a ketqua action in index.php; the id parameter in a (3) Attach and (4) ref action in index.php; the CODE parameter in a (5) Profile, (6) Login, and (7) Help action in index.php; and the (8) member_id parameter in coins_list.php.  NOTE: the developer has disputed this issue, stating that the \"CODE attribute is never present in an SQL query\" and the \"'ketqua' [action] and file 'coin_list.php' are not standard IPB 2.x features\".  It is unknown whether these vectors are associated with an independent module or modification of IPB"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Múltiples vulnerabilidades de inyección SQL en Invision Power Board (IPB) 1.x y 2.x permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) idcat y (2) code en una acción ketqua de index.php; el parámetro id en una acción (3) Attach y (4) ref de index.php; el parámetro CODE en una acción (5) Profile, (6) Login, y (7) Help de index.php; y el parámetro (8) member_id de coins_list.php. NOTA: el desarrollador ha negado este problema, afirmando que \"el atributo CODE no está presente en una consulta SQL\" y \"[la acción] 'ketqua' y el archivo 'coin_list.php' no son funcionalidades estándar de IPB 2.x\". Se desconoce si estos vectores están asociados con un módulo independiente o una modificación de IPB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF6BD7-04F2-4D69-8402-EC4B637EA083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0C566E-2AC5-47A2-9246-2FBC87828690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B83740E-6C38-4BEB-84A2-6B0F01799DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29692429-A920-4BAD-9D79-D36EBE74EFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D52AB16-A202-48B6-82C0-AD13EBCC7FCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C498DCB3-3CC7-4334-BF61-F5DA43F4B90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A7875E-DAF0-46CD-AE30-246EB3FC6BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2103FBA-1B72-43FC-A1ED-28F8C7DA0EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FBF21B-CF52-41BB-BAF1-AF822586D28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AF155D-BDF6-4B5F-89BF-62CDE6FB48DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F5777B-25A8-4D20-AD24-A639E315582F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF0C787-BDC5-4154-809A-864DA3D4769D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A69133-FF5A-457E-823F-64920A0DB9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C37B74-6486-46A2-AC2C-C27786ED697E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BC2011-5D19-4AF2-BCCD-38A03D0175FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439602/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18836",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439602/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a (1) Stats, (2) Mail, and (3) Reg action in index.php. NOTE: the developer has disputed this issue, stating that \"At no point does the CODE parameter touch the database. The CODE parameter is used in a SWITCH statement to determine which function to run."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Múltiples vulnerabilidades de inyección SQL en Invision Power Board (IPB) 1.3 Final permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro CODE de una acción (1) Stats, (2) Mail, y (3) Reg de index.php. NOTA: el desarrollador ha negado este problema, afirmando que \"En ningún punto el parámetro CODE toca la base de datos. El parámetro CODE se usa en una sentencia SWITCH para determinar qué función ejecutar\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B42A0B9-628F-4173-8F94-3EACDE1D57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A127C8-803E-44A5-BB30-09C351CF3ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438961/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439629/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438961/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439629/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web page with multiple empty APPLET start tags.  NOTE: a third party has disputed this issue, stating that the crash does not occur with Microsoft Internet Explorer 7.0 Beta3"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Microsoft Internet Explorer 7.0 Beta permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) mediante una página web con múltiples etiquetas de apertura APPLET. NOTA:una tercera parte ha negado este problema, afirmando que el cierre no ocurre con Microsoft Internet Explorer 7.0 Beta3"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "506711D9-6E57-4EED-8628-36C7F2324040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "ED471260-0272-431F-A91E-AC2883D92497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "63D18070-EC48-4904-9AE0-558F7F3B869D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/438754/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438865/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438754/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438865/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via a long HTTP POST request.  NOTE: this might be the same issue as CVE-2004-2463."
      }, {
        "lang" : "es",
        "value" : "Patrice Freydiere ImgSvr (también conocido como ADA Image Server) permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una petición POST HTTP larga. NOTA: este podría ser el mismo asunto que CVE-2004-2463."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ada:imgsvr:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0607684D-90AA-43A3-B361-5D4F3F26714B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438971/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18784",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438971/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine.  NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables other ways of stopping the virtual machine, so no privilege boundaries are crossed"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** EMC VMware Player permite a atacantes con la intervención del usuario provocar una denegación de servicio (fallo irrecuperable de la aplicación) mediante un valor largo del parámetro ide1:0.fileName en el archivo .vmx de una máquina virtual. NOTA: terceras partes han impugnado este problema, diciendi que el acceso de escritura al archivo .vmx habilita otras vías para detener la máquina virtual, así que no se cruzan límites de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9A9E09-959A-4A99-A25C-09AA4FA646D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/27524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437756/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437806/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437809/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437756/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437806/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437809/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en Horde Application Framework 3.0.0 hasta la 3.0.10 y 3.1.0 hasta la 3.1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de uan (1) URI javascript o una URI externa (2) http, (3) https, o (4) ftp en el parámetro url en services/go.php (también conocido como dereferrer), (5) una URI javascript en el parámetro module en services/help (también conocido como el visualizador de la ayuda), y (6) el parámetro name en services/problem.php (también conocido como el problema de la pantalla de presentación de informes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF82BE80-C62C-4E1A-8AB9-5773E49142B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DEABE1-B6C4-4C6F-A098-D5BC9F3C65A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E486E1-3BC7-444A-8BBB-6571CCF44E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8E2B1E-C3C7-466D-982C-36FC51D0BE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E3B91F-F391-4126-832C-C5582F5D6FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2912428D-9A74-48C2-8866-669355CAB535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A17589E-AAD1-432A-A5E3-623A8EF66572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA1F0BF-6F17-4062-86B0-83EEDA5EAC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505DFF07-4F63-4A0E-87E4-DC899F345307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B313A4C-12CE-4CA9-8036-26580152AE7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7730FD04-0CC8-4D96-A3B5-9D628381653E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D589E22C-7F87-43EF-B5FF-DC2B43E5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AD38FB-23DF-406D-8889-E9EB18D22C57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047687.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000287.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000288.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://moritz-naumann.com/adv/0011/hordemulti/0011.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016442",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047687.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000287.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000288.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://moritz-naumann.com/adv/0011/hordemulti/0011.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform \"Web tunneling\" attacks and use the server as a proxy via (1) http, (2) https, and (3) ftp URL in the url parameter, which is requested from the server."
      }, {
        "lang" : "es",
        "value" : "services/go.php en Horde Application Framework 3.0.0 hasta la 3.0.10 y 3.1.0 hasta la 3.1.1 no  restringe de forma adecuada su capacidad de imagen de proxy, lo cual permite a atacantes remotos llevar a cabo ataques \"Web tunneling\" y utilizar el servidor como un proxy a través de la URL (1) http, (2) https, y (3) ftp en el parámetro URL, el cual es respondido desde el servidor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A5CF62-60DD-4EA7-A6C3-2061548EF1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0A882D-9BEB-4A3C-9371-69260374E0B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A17E3AFB-849F-463D-96E8-686B049F48DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047563A7-5F6A-4DE2-8518-88E4E6EEB7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78356C5F-A76E-4CB1-894D-0D882A665096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0405EC4-12DA-4F15-A5B0-799D399C759E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C1DE26-E7B2-4A4E-9F6D-4206F7BC5EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED629B0-A214-47B5-9767-B47AFB154AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07F450D-6DF4-48F2-8776-E791BCBD469A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5B2E87-5A29-4EF8-8BCC-1E5AE28BE6EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55F4BF3-EFA5-4E58-A32C-7DF7F00B74CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F504EE-6F8F-4623-9F44-9A1D866DE269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde_application_framework:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17003C82-B711-496C-A2D4-0CC5FB2DCAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.horde.org/archives/announce/2006/000287.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000288.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0011/hordemulti/0011.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016442",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18845",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000287.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000288.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0011/hordemulti/0011.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified \"writable form fields and hidden fields,\" including \"authentication frontends.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en F5 Networks FirePass 4100 5.x permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de \"campos de formulario escribibles y ocultos\" no especificados incluyendo \"interfaces frontales de autenticación\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_4100:5.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85AE9E11-C5F0-462E-AEFA-68ABE3B6AB0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047635.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439033/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047635.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439033/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and destination port 68, and outbound UDP traffic with source port 68 and destination port 67."
      }, {
        "lang" : "es",
        "value" : "NCP Secure Enterprise Client (también conocido como VPN/PKI client) 8.30 Build 59, y posiblemente anteriores versiones, cuando cuando el cortafuegos de enlace y el personal (Link FireWall y Personal FireWall) son ambos configurados para bloquear todo el tráfico de red de entrada y salida, permite a atacantes dependientes del contexto enviar tráfico UDP de entrada con un puerto fuente 67 y un puerto de destino 68, y tráfico de salida UDP con un puerto fuente 68 y puerto de destino 67."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncp_network_communications:secure_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.30_build_59",
            "matchCriteriaId" : "CD90B7C7-3FBF-49A7-8116-EAD65C8965B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047547.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047547.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngine /data directory from 20060630 or earlier, does not properly receive and implement bullet signature updates, which allows context-dependent attackers to use the server for spam transmission."
      }, {
        "lang" : "es",
        "value" : "Premium Anti-Spam en Ipswitch IMail Secure Server 2006 y Collaboration Suite 2006 Premium, cuando utiliza un cierto archivo .dat en el directorio StarEngine /data desde 20060630 o anteriores, no recibe de forma adecuada e implemente un botón de actualización de firma, la cual permite a atacantes dependientes del contexto utilizar el servidos para hacer envíos de spam."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4031612D-7151-45DF-9AF6-7DEA14FA13B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_secure_server:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "827553B6-5D12-4D0B-A907-B1208A08D8FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ipswitch.com/support/ics/updates/security_advisory_20060630.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ipswitch.com/support/imail/releases/security_advisory_20060630.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ipswitch.com/support/ics/updates/security_advisory_20060630.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ipswitch.com/support/imail/releases/security_advisory_20060630.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php."
      }, {
        "lang" : "es",
        "value" : "PlaNet Concept planetNews permite a atacantes remotos evitar la autenticació y ejecutar código de su elección medainte una petición directa de news/admin/planetnews.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planet_concept:planetnews:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1A17BF-F4AC-46E0-ADB9-FA8ABE4D312A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016385",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438344/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438344/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language cookie, as demonstrated by using a gl_session cookie to inject PHP sequences into the error.log file, which is then included by index.php with malicious commands accessible by the ind parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php en MKPortal 1.0.1 Final. Permite a atqacantes remotos incluir y ejecutar archivos locales arbitrarios a través de secuencias de salto de directorio en la cookie language, como se demostró usando una cookie gl_session para inyectar secuencias PHP en el archivo error.log, el cual se incluye en ese momento por index.php con comandos maliciosos accesible por el parámetro ind."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mkportal:mkportal:1.0.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216B020A-24C8-4CEA-B039-FCD48C0B999B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20884",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016403",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438614/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.worlddefacers.de/Public/WD-MKP.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438614/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.worlddefacers.de/Public/WD-MKP.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension, and begins with a GIF header followed by JavaScript code, which is executed by Internet Explorer."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en submit.php de PHP-Fusion before 6.01.3 permiten a atacantes remotos inyectar web script o HTML de su elección usando edit_profile.php para enviar imágenes adjuntas de (1) avatar o (2) forum que  tienen extension .gif o .jpg, y comenzando con una cabecera GIF seguida de código JavaScript, el cual es ejecutado por Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D8A288-20D3-42A2-BF19-14417D9063F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EB6101-6BD0-4D6A-B681-7607B9424977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2AB1FF-B81B-4F19-9192-1E1CB66516D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D4A233-7466-4F44-8468-779AA6A60850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29821D4F-1EF2-4DA0-8CAB-67700D0B1A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1DCE7B-E049-4FA0-A972-D39BCE79E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F2384D-1E17-4DA8-A797-7E4729C2720F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D79B94-BBA2-47D2-9D2C-5EF59FE6D7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E92E863F-C72B-428E-A134-2CA5CA7058B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21F2030-F535-49A4-8E6E-FD1CBE689AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC61337-9477-46AC-AA5E-7722F594BCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06B0846-7C58-44D0-AAF9-E3CAA4050EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716EE68-D01C-4C5B-ACA5-30E58B834C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBE45DB-64DA-4EC5-9DF0-749D533E7510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59B4A30-B3F1-4200-844E-E3F7EEA91214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B24DACA-1F61-4AD6-9074-F330EFB28B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2252C51-1FA4-469B-B241-8EDB1D3DFB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5335762A-EA49-48D3-8A0C-0C031FECBC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.207:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25A8E77C-4687-4A3E-8112-52717E885C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CDAEAF-9E2E-42F4-B7D7-EF121CC5F978"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15B4762-66F2-4277-A975-00401C78F381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA03A905-10E9-4EF5-B6C0-739ADEB16705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8CD847-F478-4DC1-92A8-A0DB3CBE3BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.00.307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3E1E0C-2F23-4608-89BA-AE6CD467B4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.01.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4C5FD7-18A4-43CF-8A71-439A785DCF5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://php-fusion.co.uk/news.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20904",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438938/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18787",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://php-fusion.co.uk/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo PHP remoto en extcalendar.php de Mohamed Moujami ExtCalendar 2.0. Permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro mosConfig_absolute_path. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extcalendar:extcalendar:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE3656C2-B2E7-4DFC-BC72-9825A5294642"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv36-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439451/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440451/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18876",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv36-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439451/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440451/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MT Orumcek Toplist 2.2 stores DB/orumcektoplist.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request."
      }, {
        "lang" : "es",
        "value" : "MT Orumcek Toplist 2.2 almacena DB/orumcektoplist.mdb bajo la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos obtener información sensible mediante una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mt_orumcek:mt_orumcek_toplist:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77432A8-466E-46C7-B7E6-D1B2D3B2DC31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439611/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439611/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via (1) the judul_artikel parameter in teman.php and (2) the title of an article sent to admin, which is displayed when unauthenticated users visit index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Arif Supriyanto auraCMS 1.62 permiten a atacantes remotos inyectar web script o HTML de su elección a través de (1) el parámetro judul_artikel en teman.php y (2) el título de un artículo enviado al administrador, lo cual es visualizado cuando usuarios sin autenticar visitan index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arif_supriyanto:auracms:1.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF50CDDD-C980-463F-87A1-3C5852E9BE2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439494/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18867",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439494/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T00:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete all shoutbox messages via the (1) name and (2) pesan parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Arif Supriyanto auraCMS 1.62. Permiten a atacantes remotos  ejecutar comandos SQl de su elección y borrar todos los mensajes del shoutbox a través de los parámetros (1) name y (2) pesan."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arif_supriyanto:auracms:1.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF50CDDD-C980-463F-87A1-3C5852E9BE2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439494/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18867",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439494/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary SQL commands via the f parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en topics.php en Blue Dojo Graffiti Forums 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro f."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_dojo:graffiti_forums:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C098E7D-454E-40C5-9951-E65DE337CCA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21017",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=24",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439605/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18928",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439605/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers to bypass the authentication process and gain sensitive information, such as configuration information via (1) /btvoyager_getconfig.sh, PPP credentials via (2) btvoyager_getpppcreds.sh, and decode configuration credentials via (3) btvoyager_decoder.c."
      }, {
        "lang" : "es",
        "value" : "El firmware BT Voyager 2091 Wireless 2.21.05.08m_A2pB018c1.d16d y anteriores, y 3.01m y anteriores, permite a atacantes remotos evitar el proceso de autenticación y obtener información sensible, por ejemplo información de configuración, mediante (1) /btvoyager_getconfig.sh, credenciales PPP mediante (2) btvoyager_getpppcreds.sh, y decodificar credenciales de configuración mediante btvoyager_decoder.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bt:voyager_2091_wireless_adsl_router:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.21.05.08m_a2pb018c1.d16d",
            "matchCriteriaId" : "7C261D5B-7660-4D1A-B530-77E7A92D5C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:bt:voyager_2091_wireless_adsl_router:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.01m",
            "matchCriteriaId" : "C411B8FB-3E0C-4709-A7A1-802D069909AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ikwt.dyndns.org/projects/btvoyager-getconfig.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047733.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20982",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/projects/router-hacking-challenge/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440405/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ikwt.dyndns.org/projects/btvoyager-getconfig.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047733.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gnucitizen.org/projects/router-hacking-challenge/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440405/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a URL in the _PX_config[manager_path] parameter to (1) index.php, (2) rss.php, or (3) search.php, a different set of vectors and versions than CVE-2006-2645 and CVE-2006-0725."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en plume cms 1.0.4 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro (1) index.php, (2) rss.php, o (3) search.php, un conjunto diferente de vectores y versiones que en CVE-2006-2645 y CVE-2006-0725."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plume-cms:plume_cms:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737216F6-CC70-4117-BCDE-28F8421FA007"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016426",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438948/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438948/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in gallery/thumb.php in Winged Gallery 1.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en gallery/thumb.php de Winged Gallery 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winged_gallery:winged_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD88E722-0123-40E8-867E-C368DB0704C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438435/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18629",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438435/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the email, (2) cond, or (3) name parameters to (a) addressbook.view.php, (4) the daysprune parameter to (b) index.php, (5) the data[to] parameter to (c) compose.email.php, and (6) the markas parameter to (d) read.markas.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en HiveMail 1.3 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) email, (2) cond, o (3) name de (a) addressboook.view.php, el parámetro (4) daysprune de (b) index.php, el parámetro (5) data[to] de (c) compose.email.php, y el parámetro (6) markas de (d) read.markas.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A19437-0D2F-4C1F-B37E-6B0BC98993D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD9FE2A5-70D8-41A7-B201-541761EF8914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/07/hivemail-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20993",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/07/hivemail-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the fields[] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.results.php de HiveMail 1.3 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro fields[]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "940AA3D1-FA89-4A82-AC69-663742657BBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/07/hivemail-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20993",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/07/hivemail-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain manipulations related to the (1) searchdate and (2) folderids parameters."
      }, {
        "lang" : "es",
        "value" : "search.results.php en HiveMail 3.1 y anteriores  permite a atacantes remotos obtener la ruta de instalación a través de ciertas manipulaciones relacionadas con los parámetros (1) searchdate y (2) folderids."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "940AA3D1-FA89-4A82-AC69-663742657BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD125F9D-1E13-419C-900B-6BF71A5E98B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDA700A-A6AA-49EB-B847-E995A341FFFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A19437-0D2F-4C1F-B37E-6B0BC98993D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B310602-7C6C-4C36-AE99-605F3932AB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.1_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C444230-0988-49BD-BCFE-439A33FD9912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681B2B76-9AFC-45B2-960F-F8309A01444C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.2_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256B2BD7-34EA-42A7-A3F3-6F0F49FAD921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD9FE2A5-70D8-41A7-B201-541761EF8914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D43770F-B354-4F6F-BADB-246E3D1C2777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hivemail:hivemail:1.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02247FB6-3D9D-47E6-A6A0-3F772421193A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/07/hivemail-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/07/hivemail-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comando en sitios cruzados (XSS) en la interfaz de entrada de administración web en Juniper Networks (Redline) DX 5.1.x, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del campo de entrada username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:juniper:dx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1",
            "matchCriteriaId" : "12AA1011-1EBA-447E-992D-F1A8610AB47C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20990",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439758/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439758/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, or (3) nickname parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en guestbook.php en Fantastic Guestbook 2.0.1, y posiblemente versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) first_name, (2) last_name, o (3) nickname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fantastic_guestbook_project:fantastic_guestbook:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05926CD3-3E0A-410B-9A06-20C7521458D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://it.security.netsons.org/exploit/FGB.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21024",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27107",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440152/100/100/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18942",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2762",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27697",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://it.security.netsons.org/exploit/FGB.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440152/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "This vulnerability may also affect versions of this product previous to Fantastic, Guestbook, 2.0.1."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with the audit role."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en NetApp Data ONTAP 7.0x hasta la 7.0.4P8D9, 7.1x, 7.1.0.1x, y 7.2RC1, RC2, y RC3, tal y como se usan en IBM N series Filers y otros productos, permite a usuarios no autorizados ganar privilegios de acceso a comandos privilegiados a través de vectores desconocidos, probablemente relacionados con capacidades incorrectas con la función de auditoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:network_appliance_data_ontap:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "530B16D0-0070-4BD9-9B95-2CA8BAE47B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:network_appliance_data_ontap:7.0.4p8d9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D917F985-3880-49F0-8300-A909F57DB0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:network_appliance_data_ontap:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C3BD32-40B7-4B06-A1CD-D4068849E192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:network_appliance_data_ontap:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82AA7B6C-DB2F-4DB8-8880-2841B5D9BBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:network_appliance_data_ontap:7.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "220BBD91-6718-4054-B929-76DAC70E8682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:network_appliance_data_ontap:7.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "462228FB-7C82-4B7B-B263-280714040E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:network_appliance_data_ontap:7.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0B15E408-AA76-420B-842F-26F97004DBF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://now.netapp.com/NOW/products/vulnerability_0601/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20984",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&uid=ssg1S1002910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2761",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://now.netapp.com/NOW/products/vulnerability_0601/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=0&uid=ssg1S1002910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8, 2006 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo webform de Drupal 4.6 anterior al 8 de Julio de 2006 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE9A8A9-19D4-4C50-A4B5-2EFD8B05BAE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/72846",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21021",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/72846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) titel or (2) ausgabe parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en interna/hilfe.php de Papoo 3 RC3 y versiones anteriores permite a atacantes remotos inyectar scripts web o HTML de su elección a través del parámetro (1) titel ó (2) ausgabe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2F7F2A-D3A1-4A58-BFC1-3B89E1337C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C91682-C8D9-47B1-A203-36B3334C2F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:3.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD459CA3-7A6C-4CE0-BACB-28372EA1A9F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20978",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18895",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T01:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en forumthread.php en Papoo 3 RC3 y anteriores permite a atacantes remotos ejecutar comandos sql de su elección mediante el parámetro msgid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0_rc3",
            "matchCriteriaId" : "23040FFA-BAE3-4A64-B797-CBA9D19A458E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D2F7F2A-D3A1-4A58-BFC1-3B89E1337C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF31C99-E038-472B-B6C2-FC421264DA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C91682-C8D9-47B1-A203-36B3334C2F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A5E2B1-2223-48DE-B645-8E3D200CEB57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:3.0.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49671F48-443D-4E86-8321-34936CB8C170"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20978",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18895",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the WriteText function in agl_text.cpp in Milan Mimica Sparklet 0.9.4 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a player nickname."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en la función WriteText en agl_text.cpp en Milan Mimica Sparklet 0.9.4 y anteriores permiten a atacantes remotos ejecutar código de su elección a través de especificaciones de cadena en un alias de jugador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milan_mimica:sparklet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.4",
            "matchCriteriaId" : "14A83944-87C6-49B3-A3A6-DCC52595BB6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/sparkletfs-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20974",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439475/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2763",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/sparkletfs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439475/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to \"execute malicious scripts\" via unknown vectors (aka HS06-014-01)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en Hitachi Groupmax Collaboration Portal y Web Client anterior 07-20-/D, y uCosminexus Collaboration Portal y Forum/File Sharing anterior a 06-20-/C, permite a atacantes remotos \"ejecutar secuencias de comandos maliciosas\" a través de vectores desconocidos (también conocido como HS06-014-01)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "06_10_b",
            "matchCriteriaId" : "11C21696-043C-45A9-9CAE-5A7ADC612EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14077F3F-706D-4B57-A311-C906FAF53025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:06_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D428F8F-EFDB-4F28-A272-3CCF79EBB0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "07_10_b",
            "matchCriteriaId" : "576A4EE0-CD07-43F5-85A3-A8FC8F5500BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_portal:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E19CA67-F380-4B86-BA9E-FEE7FFA45627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_portal:07_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16157164-6751-4D83-9CDE-B71946B79B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "07_10_a",
            "matchCriteriaId" : "6D173A5D-F06A-48B7-AC5C-47A587094E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7F4020D-595F-4E3E-AE3C-D7917255A922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitachi:groupmax_collaboration_web_client:07_00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134864A9-7220-4D88-8E9B-806EAEA2DB95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20926",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nHitachi, Groupmax Collaboration Portal, 07-20-/D\r\nHitachi, Groupmax Collaboration Web Client, 07-20-/D\r\nHitachi, Cosminexus Collaboration Portal, 06-20-/C"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service (unstable operation) via a long string in the (1) \"Process name\", (2) \"Module name\", or (3) \"API name\" fields."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad desconocida en la protección de desbordamiento de búfer en McAfee VirusScan Enterprise 8.0.0 permite a usuarios locales provocar denegación de servicio (operación inestable) a través de una cadena larga en los campos (1) \"Process name\", (2) \"Module name\", o (3) \"API name\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC64100-46C1-4F3E-9D9D-84E7BAB0B20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439430/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439430/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the Date parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.php en SenseSites CommonSense CMS 5.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro Date. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensesites:commonsense_cms:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F2EE4E-DF7C-4B54-A87C-D089D9AEC4D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands via the Date parameter in a Default op."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en LifeType 1.0.5 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Date en una operación Default."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lifetype:lifetype:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DD0AA0-83FA-46A6-AE58-109060AEF195"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/LifeType105SQLInjJuly052006.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18835",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/LifeType105SQLInjJuly052006.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Fujitsu ServerView 2.50 hasta el 3.60L98 y 4.10L11 hasta el 4.11L81 permite a atacantes remotos leer archivos de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:serverview:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.60l98",
            "matchCriteriaId" : "6CCCD320-B8B2-4C0B-B305-5BB0B82F79E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:serverview:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10l81",
            "matchCriteriaId" : "210DC5FD-47DF-40A0-9FE5-9D24E004A4B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:serverview:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920BBD1B-D2F6-4558-9868-9FBD658109DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2373368472/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2376686161/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21011",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://software.fujitsu.com/jp/security/vulnerabilities/jvn-73368472-76686161.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2373368472/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2376686161/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://software.fujitsu.com/jp/security/vulnerabilities/jvn-73368472-76686161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Fujitsu ServerView 2.50 hasta la 3.60L98 y 4.10L11 hasta la 4.11L81 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:serverview:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920BBD1B-D2F6-4558-9868-9FBD658109DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:serverview:3.60l98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A4D19D-E4F0-48C4-B0BF-1A72F60C1290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:serverview:4.10l11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B39D9EF-ADCA-4E71-BA81-E0A10D355AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:serverview:4.10l81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85B0DC1-6FEF-4EEE-9988-DE47DF0998C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2373368472/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2376686161/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21011",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://software.fujitsu.com/jp/security/vulnerabilities/jvn-73368472-76686161.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2373368472/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2376686161/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://software.fujitsu.com/jp/security/vulnerabilities/jvn-73368472-76686161.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nFujitsu, ServerView, 3.60L99\r\nFujitsu, ServerView, 4.20L11B"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T10:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en pages.asp en ASP Stats Generator anterior a 2.1.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro order."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_stats_generator:asp_stats_generator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "FEF2CE31-E336-438B-B075-841FDEA5F447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016336",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hamid.ir/security/aspstats.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hamid.ir/security/aspstats.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to version 2.1.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T17:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Adobe Acrobat 6.0 to 6.0.4 allows remote attackers to execute arbitrary code via unknown vectors in a document that triggers the overflow when it is distilled to PDF."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Adobe Acrobat 6.0 hasta 6.0.4 permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos en un documento que dispara el desbordamiento cuando se convierte a PDF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183B5940-2310-4D2E-99F0-9792A801A442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8BB13E-2732-4F9E-A588-EA1C00893C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FCDCBF-597B-439C-8D8B-2819FC70C567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440B890A-90E9-4456-B92A-856CD17F0C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BD9D8D-39DA-403E-915D-E1B6A46A6BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21014",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-09.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/167228",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/167228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 6.0.5."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large (1) DTM and (2) S3M files."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en pila en Audacious AdPlug 2.0 y anteriores permiten a atacantes remotos con la intervención del usuario ejecutar código de su elección mediante archivos (1) DTM y (2) S3M grandes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audacious_media_player_team:adplug:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "7913891E-426F-4DAA-9773-7BB14419D15F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://adplug.cvs.sourceforge.net/adplug/adplug/src/dtm.cpp?view=log#rev1.17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/adplugbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20972",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21238",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21295",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439432/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18859",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2697",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://adplug.cvs.sourceforge.net/adplug/adplug/src/dtm.cpp?view=log#rev1.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://aluigi.altervista.org/adv/adplugbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439432/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T19:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of (1) CFF, (2) MTK, (3) DMO, and (4) U6M files."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en Audacious AdPlug 2.0 y anteriores permiten a atacantes remotos con la intervención de los usuarios ejecutar código de su elección a través del tamaño específico en la cabecera del paquete de los archivos (1) CFF, (2) MTK, (3) DMO, y (4) U6M."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audacious_media_player_team:adplug:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "7913891E-426F-4DAA-9773-7BB14419D15F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://adplug.cvs.sourceforge.net/adplug/adplug/src/cff.cpp?r1=1.16&r2=1.17",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/adplugbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20972",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21238",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21869",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-06.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439432/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18859",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2697",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://adplug.cvs.sourceforge.net/adplug/adplug/src/cff.cpp?r1=1.16&r2=1.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://aluigi.altervista.org/adv/adplugbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439432/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1302",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-13T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka \"Malformed SELECTION record Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Microsoft Excel 2000 a 2003 permite a atacantes con la intervención del usuario ejecutar código de su elección mediante un fichero .xls con ciertos campos artesanales en un campo SELECTION, lo que dispara una corrupción de memoria, también conocida como \"Vulnerabilidad de registro SELECTION malformado\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1238",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0605.htm",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439914/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18885",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A379",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/1238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0605.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439914/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1304",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-13T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a \"data filling operation.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Microsoft Excel 2000 hasta 2003 permite a atacantes con la intervención del usuario ejecutar código de su elección mediante un fichero .xls con un registro COLINFO artesanal, lo que dispara el desbordamiento durante una \"operación de relleno de datos\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0606.htm",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439909/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18888",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A545",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0606.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439909/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1306",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-13T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka \"Malformed OBJECT record Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2000 a 2004 permite a atacantes con implicación del usuario ejecutar código de su elección mediante un fichero .xls con un registro BIFF artesanal con un índice de array controlado por el atacante que es usado para un puntero a función, tcc \"Vulnerabilidad de registro OBJECT malformado\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secway.org/advisory/AD20060711.txt",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439884/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18886",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A950",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20060711.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439884/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2388",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-13T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of \"critical data offsets\" during the rebuilding process."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Excel 2000 hasta la versión 2004 permite a atacantes asistidos por el usuario ejecutar código arbitrario a través de comentarios de celdas mal formadas, lo que conduce a modificación de \"desplazamiento de datos críticos\" durante el proceso de reconstrucción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439786/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18938",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-022.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27604",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439786/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3135",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-07-13T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter in the (a) news module, (2) searchstring parameter in (b) the search module, (3) id parameter in (c) the webshop module, (4) username parameter in (d) index.php, and (5) Name, (6) Address, (7) Zip, (8) City, (9) Country, and (10) Email fields during (e) a user profile update."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en CMS Mundo 1.0 build 008, y posiblemente otras versiones, permiten a atacantes remotos ejecutar órdenes SQL de  su elección mediante el parámetro (1) 'news_id' en el módulo (a) 'news', el parámetro (2) 'searchstring' en el módulo (b) 'search', el parámetro (3) 'id' en el mulo (c) 'webshop', el parámetro (4) 'username' en (d) index.php, y los campos (5) Nombre, (6) Dirección, (7) Código Postal, (8) Ciudad, (9) País, y (10) Email durante una (e) actualización del perfil de usuario.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotwebscripts:cms_mundo:1.0_build_008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D64A62CB-D395-4BC2-A99D-B1D568C13C85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20589",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-52/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1236",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27139",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27140",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27141",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27142",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27143",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2783",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27712",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-52/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary commands via a malformed .swf file that results in \"multiple improper memory access\" errors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Adobe (Macromedia) Flash Player 8.0.24.0 permite a atacantes remotos ejecutar comandos de su elección mediante un archivo .swf mal formado que resulta en \"múltiples errores de acceso inapropiado a memoria\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20971",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21901",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22054",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22268",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-20.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/474593",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0674.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2702",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/474593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0674.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Adobe gave a statement that these issues do not affect the Linux versions of Macromedia Flash Player.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-13T21:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) via a malformed, compressed .swf file, a different issue than CVE-2006-3587."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Adobe (Macromedia) Flash Player 8.0.24.0 permite a atacantes remotos provocar una denegación de servicio (caída del navegador) mediante un fichero .swf comprimido mal formado, un asunto diferente de CVE-2006-3587."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32912721-F750-4C20-B999-E728F7D3A85D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21901",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22054",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22268",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-21.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0674.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2702",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0674.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Adobe gave a statement that these issues do not affect the Linux versions of Macromedia Flash Player.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1301",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-13T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302."
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2000 a 2004 permite a atacantes con la implicación del usuario ejecutar código de su elección mediante un fichero .xls con un registro SELECTION artesanal que dispara una corrupción de memoria, una vulnerabilidad diferente de CVE-2006-1302.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18853",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A557",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1308",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-13T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Excel 2000 a 2004 permite a atacantes con implicación del usuario ejecutar código de su elección mediante un fichero .xls con un valor FNGROUPCOUNT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047837.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18890",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27464",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A243",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047837.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1309",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-07-13T22:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Microsoft Excel 2000 a 2004 permite a atacantes con la implicación del usuario ejecutar código arbitrario mediante un fichero .xls con una etiqueta LABEL artesanal que dispara una corrupción de memoria.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "27C6E1BC-406E-4B0B-B513-33226AC4482D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C619E79B-90FB-4812-B0F3-115B47498492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC893353-909C-49A8-8C3A-AD325C1D365D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "896E23B1-AB34-43FF-96F3-BA6ED7F162AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AED7433-3C95-4868-B05D-244149E0E33E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18910",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A752",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-14T18:05:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493."
      }, {
        "lang" : "es",
        "value" : "mso.dll, usado por Microsoft PowerPoint 2000 a 2003, permite a atacantes remotos con la complicidad del usuario ejecutar órdenes de su elección mediante la configuración de la forma malformado en un fichero PPT , lo que causa una corrupción de memoria, explotado por Trojan.PPDropper.B, un asunto diferente que CVE-2006-1540 y CVE-2006-3493.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E392539-ABF6-4B5C-AEC3-C54B51E0DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711D9CC0-31B8-4511-A9F3-CA328A02ED84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A83E4CC-3182-465A-BE82-619445B23EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EACB44AC-9433-4D28-9EC4-1F6857C3A57D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.securiteam.com/?p=508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/936945",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440137/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440532/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2795",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.securiteam.com/?p=508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/936945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440137/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440532/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TriEditDocument.TriEditDocument object before it has been initialized, which triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 permite a atacantes remotos provocar denegación de servicio (Caida de aplicación) a través del acceso la propiedad URL de un objeto TriEditDocument.TriEditDocument anterior que ha sido inicializado, el cual dispara una referencia a un puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-12-trieditdocument-url.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27056",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18946",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2765",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27675",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-12-trieditdocument-url.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with elevated privileges via unspecified vectors, involving \"certain CLI commands,\" aka bug CSCse11005."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la interfaz de línea de comando (CLI) en Cisco Unified CallManager (CUCM) 5.0(1) hasta la 5.0(3a) permite a usuarios locales ejecutar comandos de su elección con privilegios elevados a través de vectores no especificados, afectando a \"ciertos comandos CLI\", también conocido como fallo CSCse11005."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5865997-F8B2-4ABB-96DF-3AE691A7CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9211420-9F35-4872-879A-5F7CA29C6299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DD4B55-4C68-45CD-988E-D470C26E5E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C1B081-1FD7-4BBD-84BD-E1E5F80C74FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to Cisco Unified CallManager version 5.0(4) :\r\nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/callmgr-50"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704."
      }, {
        "lang" : "es",
        "value" : "La interfaz de linea de comando (CLI) en Cisco Unified CallManager (CUCM) 5.0(1) hasta la 5.0(3a) permite a usuarios locales sobrescribir  archivos de su elección a través de la redirección de comandos de salida a un archivo o carpeta, también conocida como fallo CSCse31704."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5865997-F8B2-4ABB-96DF-3AE691A7CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9211420-9F35-4872-879A-5F7CA29C6299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DD4B55-4C68-45CD-988E-D470C26E5E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C1B081-1FD7-4BBD-84BD-E1E5F80C74FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a00806e0b9f.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a00806e0b9f.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 5.0(4) or later.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Cisco Unified CallManager (CUCM) 5.0(1) hasta la 5.0(3a) permite a atacantes remotos ejecutar código de su elección a través de un nombre de host en una respuesta SIP, también conocida como bug CSCsd96542."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5865997-F8B2-4ABB-96DF-3AE691A7CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9211420-9F35-4872-879A-5F7CA29C6299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DD4B55-4C68-45CD-988E-D470C26E5E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C1B081-1FD7-4BBD-84BD-E1E5F80C74FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21030",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190."
      }, {
        "lang" : "es",
        "value" : "La configuración por defecto en el servidor IOS HTTP en Cisco Router Web Setup (CRWS) anterior a 3.3.0 construcción 31 no requiere credenciales, lo cual permite a atacantes remotos acceder al servidor con niveles de privielgio de su elección, también conocido como fallo CSCsa78190."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:router_web_setup:3.3.0_build_30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7587F6EB-2495-4D9C-A0EF-5CE2858F464C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21028",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060712-crws.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/205225",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060712-crws.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/205225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.1(p1), as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service (kernel panic and possibly network outage) via a crafted IP packet."
      }, {
        "lang" : "es",
        "value" : "El controlador de dispositivo para los adaptadores de red gigabit basado en Intel en Cisco Intrusion Prevention System (IPS) 5.1(1) hasta la 5.1(p1), instalado en appliances Cisco Intrusion Prevention System 42xx, permite a atacantes remotos provocar denegación de servicio (kernel panic y posiblemente interrupción de la red) a través de paquetes IP manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC9FE98-33D1-4072-A9AE-91E014227599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC14025-7D62-4264-A898-5085E0227F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C6A1AB-7598-4477-AB3D-4648813855FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E703CAFC-2ED8-4B71-8559-593BF46EE568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.1\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE533A9E-2868-4C66-8ADD-D1785FFD4726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.1\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E4B9CD-D564-4FB4-BE61-B5E61E8847D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.1\\(p1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "344A1DD4-8A6B-46CF-B334-CE809932C7F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060712-ips.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060712-ips.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the \"Go Back\" option after the final \"Installation complete\" message and uses the main menu, which causes the password to be zeroed out in the installer's memory."
      }, {
        "lang" : "es",
        "value" : "passwd anterior a 1:4.0.13 sobre Ubuntu 6.06 LTS deja la contraseña de root en blanco en vez de cerrarlo cuando el administrador selecciona la opción \"Go Back\" después del mensaje final \"instalación completa\" y utiliza el menu principal, lo que provoca que la contraseña que se ponga a cero fuera de la memoria del instalador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8517E55-4357-4AFD-B571-5533123CB014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21022",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-316-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-316-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo Sections para PHP-Nuke permite a atacantes remotos ejecutar comandos sql de su elección mediante el parámetro artid en una operación viewarticle."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-nuke:sections_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37BC1D2-C2AC-46C0-8BE2-30482FABFE2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/438596/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/27879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/5154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438596/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/27879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/5154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_ads parameter in an EditAds op."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo Nuke Advanced Classifieds para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su eleccióna  través del parámetro id_ads en un opEditAds."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-nuke:advanced_classified_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551D9615-5B9F-4D0B-8EF5-BC459D8DD5CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/438817/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438817/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers to cause a denial of service (application crash) and possibly execute code via a long (1) Album release date (MBE_ReleaseGetDate), (2) data, or (3) error strings."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en pila en la función LookupTRM::lookup en libtunepimp (TunePimp) 0.4.2 permite a atacantes remotos con la intervención del usuario provocar denegación de servicio (caida de aplicación) y posiblemente ejecutar código a través de una (1) fecha larga de hacer público un album, (2) datos o (3) cadenas de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtunepimp:libtunepimp:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D88D1D2-0CC6-4B9E-AC76-9C70D51659C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.musicbrainz.org/ticket/1764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21026",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21027",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21277",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21323",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-318-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2785",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.musicbrainz.org/ticket/1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-318-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-24T17:34:37.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNVERIFIABLE **  Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gain privileges via unspecified vectors, as used in an attack against the Microsoft France web site.  NOTE: due to the lack of details and uncertainty about which product is affected, this claim is not independently verifiable."
      }, {
        "lang" : "es",
        "value" : "** NO VERIFICABLE ** Vulnerabilidad no especificada en en un módulo DNN Modules no especificado para DotNetNuke (.net nuke) permiten a atacantes remotos obtener privilegios mediante vectores no especificados, usados en un ataque contra un sitio web de Microsoft Francia. NOTA: debido a la falta de detalles y la incertidumbre sobre qué producto está afectado, esta afirmación no es verificable independientemente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7403D234-B91D-49B7-8871-3534C0D43656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zone-h.org/content/view/4770/31/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zone-h.org/content/view/4770/31/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the language parameter in the advanced theme."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en jscripts/tiny_mce/tiny_mce_gzip.php de FarsiNews 3.0 BETA 1 permite a atacantes remotos incluir y ejecutar ficheros mediante una secuencia .. (punto punto) y un byte nulo (%00) en el parámetro language en el tema advanced."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsinews:farsinews:3.0_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A804A51-FC91-463C-A6A2-80812D3B2A00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.farsinewsteam.com/showthread.php?p=16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016464",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439664/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440757/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18925",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.farsinewsteam.com/showthread.php?p=16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439664/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440757/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de FlexWATCH Network Camera 3.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seyeon:flexwatch_network_camera:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D200DDA6-A405-4745-8C20-A27554007CDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20994",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006300687985463.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439648/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440893/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450478/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18936",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006300687985463.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439648/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440893/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450478/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) admin/aindex.asp or (2) admin/aindex.html via a .. (dot dot) and encoded / (%2f) sequence in the URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en FlexWATCH Network Camera 3.0 y anteriores permite a atacantes remotos evitar las restricciones de acceso para (1) admin/aindex.asp o (2) admin/aindex.html a través de la secuencia .. (punto punto) y codificar la secuencia / (%2f) en la URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seyeon:flexwatch_network_camera:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "B9F6B330-9906-4185-9984-42F555608CF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20994",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006300687985463.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439648/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440893/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450478/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18948",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.digitalarmaments.com/2006300687985463.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439648/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440893/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450478/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:37:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 permite a atacantes remotos provocar una denegación de servicio (caída) estableciendo la propiedad Transition en un objeto ActiveX DXImageTransform.Microsoft.RevealTrans.1, lo cual provoca una referencia nula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-13-revealtrans-transition.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27057",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18960",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2793",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27713",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-13-revealtrans-transition.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2450",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-18T15:40:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as \"Type 1 - None\", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369."
      }, {
        "lang" : "es",
        "value" : "auth.c en LibVNCServer 0.7.1 permite a atacantes remotos evitar la validación a través de una respuesta en la cual el cliente especifica un tipo de seguridad insegura como por ejemplo \"Tipo 1 - None\", el cual es aceptado siempre aunque no es ofrecida por el servidor, un asunto diferente que CVE-2006-2369."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvncserver:libvncserver:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2AED2D-3554-43A0-A7AF-9CBB383D7655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/29",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/20940",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21349",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21393",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21405",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24525",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-05.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200703-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=431724&group_id=32584",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442986/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/18977",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200703-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=431724&group_id=32584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442986/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue does not affect the versions of LibVNCServer as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.",
        "lastModified" : "2006-08-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9 allows context-dependent attackers to cause a denial of service (application crash) to applications that use the library."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Solaris X Inter Client Exchange library (libICE) de Solaris 8 y 9 permite a atacantes dependientes del contexto provocar una denegación de servicio (caída de la aplicación) a programas que utilizan dicha librería."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102503-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102503-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-06T14:41:02.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Softbiz Banner Exchange Script (también conocido como Banner Exchange Network Script) 1.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de el parámetro (1) city de (a) insertmember.php, y (2) una cookie PHPSESSID en (b) lostpassword.php, (c) gen_configm_mem.php, y (d) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbizscripts:banner_exchange_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "553F203C-29FB-497F-B9B0-A81806CFAC3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ellsec.org/print.php?type=N&item_id=141",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438705/100/200/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18735",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27460",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27461",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://ellsec.org/print.php?type=N&item_id=141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438705/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file."
      }, {
        "lang" : "es",
        "value" : "El módulo Gallery en Simone Vellei Flatnuke 2.5.7 y anteriores, cuando actualización Gallery está activada no restringe las extensiones de los archivos actualizados que comienzan con una cabecera GIF, lo cual permite a usuarios remotos validados ejecutar código PHP de su elección a través de un archivos .php actualizado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.7",
            "matchCriteriaId" : "F23949E8-2FC2-429B-8F18-A71F8EE55BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37015F4-6F2C-4C29-93D3-AC3D718CCC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F525A5-D948-47F6-BADF-5D05DD35CF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D472A2E-113F-41AA-969E-7ACB65381E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A161EC-461C-4F4D-919A-81914A3F9097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E983BC-9611-40A7-A1B8-3F4A6F49877E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B94F502-23E6-4624-AB60-F393AC4BDD8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263DBD5A-63AD-4568-B29A-AC9268D77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35353BC-BB2E-4702-BC8D-9809617199F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80720E0A-2E73-47B2-BA0E-4CFA177F5BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/flatnuke257_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439975/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18966",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/flatnuke257_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439975/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that Gallery uploads are enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to inject arbitrary web script or HTML via the page_name parameter with an IMG tag containing a javascript URI in the SRC attribute."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en index.php en Orbitcoders OrbitMATRIX 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro page_name con una etiqueta IMG que contiene una URI javascript en el atributo SRC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitcoders:orbitmatrix:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A016828-64FA-4AA2-B2D4-D1F5A0086D8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439970/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439970/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result.  NOTE: it is not clear whether the information is target-specific. If not, then this issue is not an exposure."
      }, {
        "lang" : "es",
        "value" : "index.php en Orbitcoders OrbitMATRIX 1.0 permite a atacantes remotos obtener información sensible (esquemas parciales de la base de datos) a través de parámetros page_name modificados, lo cual refleja porciones de una consulta SQL en el resultado. NOTA: no está clara si la información tiene un objetivo-especifico. Si no, entonces este asunto no es una exposición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitcoders:orbitmatrix:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A016828-64FA-4AA2-B2D4-D1F5A0086D8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/439970/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439970/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en pm.php de Phorum 5 permite a atacantes remotos autenticados incluir y ejecutar ficheros locales mediante secuencias de salto de directorio en el parámetro GLOBALS[template], como ha sido demostrado inyectando secuencias PHP en un fichero de log, el cual cual es incluido por pm.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.14",
            "matchCriteriaId" : "2520A79B-FC05-47C4-9D15-46BDE0F6BEB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740F974F-D679-472C-966A-3E4C334E3C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D7E47E-10F5-4F50-8940-951B2C0011CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16042FAE-7370-425C-8810-4F9363B7CAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A25A6F-62CA-4C76-9D4C-821B1E15FB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6247DB0C-37B6-44EF-8B92-8CFCDA537039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C46298C-2492-4102-A264-E2A1D45AD423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2AD59F-42DF-407A-8FCA-E6E0067A2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E1044B-2101-4719-8749-17DD22F46055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E17261-A010-4929-99E5-A2511F205B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A461E2EB-9964-44DE-9C25-562D239201F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB6A4EC-D351-4EF8-8C6A-294A47DDCCC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B10230A-7D72-418E-8A29-E9F20762C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368C8142-836A-4FDB-9CD8-385FE06B9A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1470761E-DA6E-4D2A-B226-1ED782FB3654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB3ED23-821D-42FA-A24F-F2EDDA43D7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BA8736-5998-42E0-81E4-76E3669F8112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9811C9-EE92-4115-B81F-7A3030390BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A196AD2-7E48-40F4-923E-437FA76C97D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D147F0-FF83-4FF4-AEF1-71366E874876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D87C46-D9EC-418B-9C8C-71E7149C72D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F6BE0A-7E2F-457D-B4BA-6BAE1B44E7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.3.2b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C990B390-4768-41B0-BB8B-A56C2524623F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6650BE9D-5F4B-4B22-BD7E-ABCC067D5455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E0CA9-F6D4-4DD3-A3EA-F3A40965261B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F67B233-3087-43E6-94F2-5DF39FAA36B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7725AEF3-1C47-46B4-A35E-97152A84E731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F6C52C-F602-4C2A-8C8F-4A19DA41186F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F290E5-6508-4F62-8572-31B33750D341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D941B5F-B704-4596-8739-BFE34225DBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF13359B-162A-41DF-BB4F-DDD6CA2752F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1AE057-A85C-49D9-981A-3314BD945D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:3.4.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC1F375-34EF-4FEC-B0F4-6A081B6A3B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E532A66-A12D-48DD-B405-2345E5B715C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26E2C5A7-8B52-4BDF-80F1-5D45AEBE6E25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8DF602-0A22-45A9-A286-C237180701C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB109C36-BF0F-41E3-A1F4-0DB264BD4A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A31EA2D-2B01-4928-9B3E-9D666FD2758B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.4_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E87DE16C-7C68-4DA8-9BD9-C61D74E61D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.4a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5001527E-FE93-4BE7-BF79-7717D64CAF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D15ED599-6B84-4E03-8BA4-36E1D55F1F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D491A2B9-949A-4A56-A41F-23A222C03BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CFDB0B-6FBD-49F3-8238-81E92661297E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.7a_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC73A23F-2399-41B0-B6BD-289DF63F2C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.8_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD59DD99-1FC7-498B-9EA1-1AA8FE132EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1655572D-7D56-4D9D-9E0F-A67DF23FC934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387E0B83-B240-4922-8C57-CE0CDB000888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02321D7-2F3E-40F9-9A76-CFF339C93199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B908D49-F64A-488F-95F3-163AB9DAB02D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.13a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A26F8E5-0FFE-473D-BDA1-2D5340B5A4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF0655C-7C83-4363-A444-993B35D7A7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D0F7C4-902D-4186-8EFF-3876D6D6633E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F87C476-6A55-4B19-97B0-24204E96A63E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F8F544-1B09-4B22-B1F3-2CD1E8D7AECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACC6DD4-384B-44DE-9BC7-6F1DD374E6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D0AC3E-97F7-4A13-8E65-7E424D055E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.17a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D184385A-763A-4971-8051-20564D020787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B508F8-CFCC-4841-BF70-1ABB28EB1ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C365D62D-ACB1-44D3-935D-F79A79642684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B45305-FF8B-42F8-A726-F8604BADC323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70F4AB87-2D63-4208-8982-BBF978392285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/phorum5_local_incl_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.phorum.org/phorum5/read.php?14%2C114358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439976/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phorum5_local_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.phorum.org/phorum5/read.php?14%2C114358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439976/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that register_globals is enabled.\r\nThis vulnerability is addresses in the following product release:\r\nPhorum, Phorum, 5.1.15"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Phorum 5.1.14 permite a atacantes remotos inyectar secuencias de comando web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149A6B5A-84FC-4B6F-B053-0AC881BC03D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.phorum.org/phorum5/read.php?14%2C114358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phorum.org/phorum5/read.php?14%2C114358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that register_globals is enabled.\r\nThis vulnerability is addressed in the following product release:\r\nPhorum, Phorum, 5.1.15"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka enterprise edition) allow remote attackers to inject arbitrary web script or HTML via the (1) itemfor (aka \"Who is this item for?\") and (2) special (aka \"Special Instructions\") parameters to item.php, which is accessed from showorder.php, or (3) unspecified parameters to the login form at login.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en Chamberland Technology ezWaiter 3.0 Online y posiblemente Enterprise Software (también conocida como enterprise edition) permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros(1) itemfor (también conocido como \"Who is this item for?\") y special (también conocido como \"Special Instructions\") en item.php, el cual es accedido desde showorder.php, o parámetros (3) no especificados en el formulario de login en login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamberland_technology:ezwaiter_online:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4DB20E-3AFA-4500-A57C-DAAF9E3554C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/438792/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438792/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, possibly due to a SQL injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "index.php en Orbitcoders OrbitMATRIX 1.0 permite a atacantes remotos disparar un error SQL a través del parámetro page_name, posiblemente debido a una vulnerabilidad de inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orbitcoders:orbitmatrix:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A016828-64FA-4AA2-B2D4-D1F5A0086D8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439970/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439970/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Phorum 5.1.14, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección a través de vectores no especificados relacionados con una variables no inicializada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phorum:phorum:5.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149A6B5A-84FC-4B6F-B053-0AC881BC03D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0191.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phorum5_local_incl_xpl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phorum.org/phorum5/read.php?14%2C114358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0191.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/phorum5_local_incl_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phorum.org/phorum5/read.php?14%2C114358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in codes-english.php and (2) the img parameter in picture.php, after the name of an existing file."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Carbonize Lazarus Guestbook 1.6 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1)show en codes-english.php y el parámetro(2) img en picture.php, después del nombre de un fichero existente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carbonize:lazarus_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "FE2EE5B3-FEA8-47C3-95C3-24F8684EDC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439904/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18956",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439904/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message (aka comments), (3) website, and (4) email parameters, which bypasses XSS protection mechanisms that check for SCRIPT tags but not others, as demonstrated by a javascript URI in an onMouseOver attribute and the src attribute in an iframe tag.  NOTE: some vectors might overlap CVE-2006-2975, although the use of alternate manipulations makes it unclear."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en pblguestbook.php en Pixelated By Lev (PBL) Guestbook 1.32 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) name, (2) message (aka comments), (3) website, y (4) email, el cual evita el mecanismo de protección XSS que valida para la etiquetas del SCRIPT pero otras no, como se demostró con el URI javascript en un atributo onMouseOver y el atributo src en una etiqueta iframe. NOTA: algunos vectores podrían solaparse con CVE-2006-2975, aunque el uso de manipulaciones alternativas lo hacen poco claro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelated_by_lev:pixelated_by_lev_guestbook:1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B430F99-CFB3-420B-BBC8-9587B5317B55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439486/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439486/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script or HTML via the toid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo showtopic en Koobi Pro CMS 5.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro toid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dream4:koobi_pro:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0FF424-A5E6-4EEE-ACB5-F74990573214"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443294/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18970",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443294/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabildad de inyección SQL en el módulo showtopic en Koobi Pro CMS 5.6 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro toid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dream4:koobi_pro:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0FF424-A5E6-4EEE-ACB5-F74990573214"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443294/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18970",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443294/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter, which displays the path in an error message.  NOTE: it is not clear whether this is SQL injection or a forced SQL error."
      }, {
        "lang" : "es",
        "value" : "El módulo showtopic en Koobi Pro CMS 5.6 permite a atacantes remotos obtener información sensible a través de ' (comilla simple) en el parámetro p, el cual muestra la ruta en un mensaje de error. NOTA: no está claro si esto es inyección de SQL o un error forzado del SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dream4:koobi_pro:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0FF424-A5E6-4EEE-ACB5-F74990573214"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443294/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443294/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the directory and filename in a PropsResponse (PackageType) request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en el componente Framework Service en McAfee ePolicy Orchestrator agent 3.5.0.x y anteriores permite a atacantes remotos crear archivos de su elección a través de una secuencia .. (punto punto) en el directorio y nombre de archivo en una respuesta PropsResponse (PackageType)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.0",
            "matchCriteriaId" : "072DFC11-61DB-4F31-B095-9E7AF6363A24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060713.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060713.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to (1) player.php or (2) popup.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en FLV Players 8 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro url en (1) player.php o (2) popup.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flv:flv_player:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35DB56E-7BEE-422E-B103-75E666FDA8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/439886/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18954",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439886/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) an invalid p parameter to player.php, which reveal the path in an error message."
      }, {
        "lang" : "es",
        "value" : "FLV Players 8 permite a atacantes remotos obtener información sensible a través de (1) una respuesta directa en paginate.php o (2) un parámetro no válido p en player.php, el cual revela la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flv:flv_player:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35DB56E-7BEE-422E-B103-75E666FDA8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/439886/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439886/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:46:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en Linux kernel 2.6.17.4  y anteriores permite a usuarios locales ganar privilegios de root a través del uso de prctl con PR_SET_DUMPABLE en un camino que hace que /proc/self/environ llegue a tener el setuid de root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047907.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=0cb8f20d000c25118947fcafa81606300ced35f8%3Bhp=243a94af0427b2630fb85f489a5419410dac3bfc%3Bhb=18b0bbd8ca6d3cb90425aa0d77b99a762c6d6de3%3Bf=fs/proc/base.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_49_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440300/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-319-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/319-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047907.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=0cb8f20d000c25118947fcafa81606300ced35f8%3Bhp=243a94af0427b2630fb85f489a5419410dac3bfc%3Bhb=18b0bbd8ca6d3cb90425aa0d77b99a762c6d6de3%3Bf=fs/proc/base.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_49_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440300/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-319-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/319-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This vulnerability does not affect Red Hat Enterprise Linux 2.1 or 3 as they are based on 2.4 kernels.\n\nThe exploit relies on the kernel supporting the a.out binary format.  Red Hat Enterprise Linux 4, Fedora Core 4, and Fedora Core 5 do not support the a.out binary format, causing the exploit to fail.  We are not currently\naware of any way to exploit this vulnerability if a.out binary format is not enabled.  In addition, a default installation of these OS enables SELinux in enforcing mode.  SELinux also completely blocks attempts to exploit this issue.\n\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973#c10",
        "lastModified" : "2006-07-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en pblguestbook.php en Pixelated By Leb (PBL) Guestbook 1.32 y anteriores permite a atacantes remotos ejecutar órdenes SQL mediante los parámetros (1) 'name', (2) 'email', (3) 'website', (4) 'comments', (5) 'rate', y (6) 'private'"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelated_by_lev:pixelated_by_lev_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.32",
            "matchCriteriaId" : "F0909BD7-A423-41E1-9C62-779DDFF1BEF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439486/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439486/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing \"#\" character.  NOTE: as of 20060715, this could not be reproduced by third parties."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Security and Acceleration (ISA) Server 2004 permite a atacantes remotos evitar los filtros de extensiones de ficheros mediante una petición con un carácter \"#\" al final. NOTA: desde 20060715, esto no ha podido ser reproducido por terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:isa_server:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB374F9-AD99-4CC9-B004-DEC83A7FBA14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440105/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440247/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440299/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440446/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440558/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440105/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440247/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440299/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440446/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440558/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via crafted (1) Works, (2) Excel, and (3) Lotus 1-2-3 files."
      }, {
        "lang" : "es",
        "value" : "wksss.exe 8.4.702.0 en Microsoft Works Spreadshhet 8.0 permite a atacantes remotos causar una denegación de servicio (Consumición de CPU o caída) mediante ficheros artesanales de (1) Works, (2) Excel, y (3) Lotus 1-2-3.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293914AF-6101-4F50-9560-A4EA99D767C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440056/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18989",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440056/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via crafted Excel files."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en wksss.exe 8.4.702.0 en Microsoft Works Spreadsheet 8.0 permite a atacantes remotos provocar denegación de servicio (consumo de CPU o caida) a través de archivos EXCEL manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293914AF-6101-4F50-9560-A4EA99D767C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440056/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18989",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440056/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file.  NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en mso.dll en Microsoft PowerPoint 2003 permite a atacantes con la intervención del usuario ejecutar código de su elección a través de un archivo PowerPoint manipulado. NOTA: Debido a la falta de detalles disponibles en fecha 20060717, es confuso cómo esto se relaciona con CVE-2006-3656, CVE-2006-3660, y CVE-2006-3590, aunque es posible que sean todos diferentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A83E4CC-3182-465A-BE82-619445B23EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EACB44AC-9433-4D28-9EC4-1F6857C3A57D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440107/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440370/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18993",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2815",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440107/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed.  NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft PowerPoint 2003 permite a atacantes con la complicidad del usuario provocar una corrupción de memoria mediante un fichero PowerPoint manipulado artesanalmente, lo cual provoca la corrupción al cerrar el fichero. NOTA: debido a la falta de detalles disponibles desde el 17/07/2007, no está claro como esto está relacionado con CVE-2006-3655, CVE-2006-3660, y CVE-2006-3590, aunque es posible que todas ellas sean diferentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A83E4CC-3182-465A-BE82-619445B23EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EACB44AC-9433-4D28-9EC4-1F6857C3A57D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PP2003sp2patched_fr_exploit-method.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0607-exploits/mspp-poc3.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440108/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440370/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18993",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2815",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PP2003sp2patched_fr_exploit-method.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0607-exploits/mspp-poc3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440108/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long (1) StartColorStr or (2) EndColorStr property."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 permite a atacantes remotos provocar una denegación de servicio (excepción de desbordamiento de pila) a través del objeto de ActiveX DXImageTransform.Microsoft.Gradient con una propiedad larga (1) StartColorStr o (2) EndColorStr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-17-dximagetransformmicrosoftgradi.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-17-dximagetransformmicrosoftgradi.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderItem ActiveX object, which triggers a null dereference in the security check."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 permite a atacantes remotos provocar denegación de servicio (caida) a través del acceso a referencia a objeto de un objeto Active X FolderItem, el cual dispara un referencia null en la validación de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-15-folderitem-access.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-15-folderitem-access.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 Microsoft Internet Explorer 6 permite a atacantes remotos provocar una denegación de servicio (caída) estableciendo la propiedad location o URL del objeto ActiveX MHTMLFile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-16-mhtmlfile-location.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-16-mhtmlfile-location.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590, although it is possible that they are all different."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft PowerPoint 2003 tiene impacto desconocido y vectores de ataque con intervención del usuario relacionados con powerpnt.exe. NOTA: debido a la falta de detalles disponibles a fecha de 17/07/2006, no está claro cómo está relacionado con CVE-2006-3655, CVE-2006-3656, y CVE-2006-3590, aunque es posible que sean todas diferentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A83E4CC-3182-465A-BE82-619445B23EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EACB44AC-9433-4D28-9EC4-1F6857C3A57D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440106/30/30/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440370/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18993",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2815",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440106/30/30/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440370/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el Index.PHP del CuteNews 1.4.5 permite a atacantes remotos la inyección de secuencias de comandos web o HTML de su elección mediante vectores desconocidos. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAD595C-2110-4321-93D6-7B1E90CC8FC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/18918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.virangar.org",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.virangar.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. NOTE: this issue has been disputed by the vendor, who states \"The mentioned SQL injection vulnerability is not possible.\"  However, the relevant source code suggests that this issue may be legitimate, and the parameter is cleansed in 1.5.3.1"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADO ** Vulnerabilidad de inyección SQL en index.php en ATutor 1.5.3 permite a atacantes remotos ejecutar comandos SQL a través del parámetro fid. NOTA: este asunto ha sido impugnado por el vendedor, que indica que \"la mencionada vulnerabilidad de inyección SQL no es posible\". Sin embargo, el código fuente sugiere que este asunto podría estar legitimado,l y el parámetro está limpio en 1.5.3.1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14473CD-79D7-45FF-8BFD-BA61704CB003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0096.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439873/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440837/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18898",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439873/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440837/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local users to gain privileges.  NOTE: the vendor has notified CVE that this issue was fixed in 8.3.6."
      }, {
        "lang" : "es",
        "value" : "Finjan Vital Security Appliance 5100/8100 NG 8.3.5 almacena contraseñas en texto plano en un archivo de backup, el cual permite a usuarios locales ganar privilegios. NOTA: el vendedor ha notificado al CVE que este asunto se solucionó con la versión 8.3.6."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finjan:vital_security:ng-5100_8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8477ED98-B17B-425A-BEC1-B1D168B86B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:finjan:vital_security:ng-8100_8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B813B8E-033C-45BF-94D9-2C6726489F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047797.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440128/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047797.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440128/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor reports that version 8.3.6 of Finjan’s Vital Security Appliance (NG 5100/8100), released on 7/23/06, fixes this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial of service (ypserv hang) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el servidor NIS sobre Sun Solaris 8, 9, y 10 permite a atacantes locales y remotos provocar denegación de servicio (culegue del ypserv) a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "32CF7469-6D2F-4E34-8013-7F0D3433D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "11847B60-D66B-4386-940A-C53B11853E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F305CBD-4329-44DE-A85C-DE9FF371425E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:64_bit:*:*:*:*:*",
            "matchCriteriaId" : "63874B2D-AD5D-4BB4-A83B-7B717E570191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21047",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016494",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102462-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18972",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102462-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SquirrelMail 1.4.6 and earlier, with register_globals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors.  NOTE: while \"cookie theft\" is frequently associated with XSS, the vendor disclosure is too vague to be certain of this."
      }, {
        "lang" : "es",
        "value" : "SquirrelMail 1.4.6 y anteriores, con register_globals habilitado, permite a atacantes remotos secuestrar cookies en src/redirect.php a través de vectores desconocidos. NOTA: mientras que el \"robo de la cookie\" se asocia con el XSS, el vendedor indica que es muy impreciso que esto sea cierto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A884536-4D27-4350-B815-AB4E625879DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/17005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/changelog.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field, a different vulnerability than CVE-2006-3515."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en AjaxPortal 3.0, con magic_quotes_gpc desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo 'Search', un vulnerabilidad diferente que CVE-2006-3515."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myiosoft.com:ajaxportal:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A495D32-547A-4B0E-BEB6-D2FF4350CF42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439614",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sybase/Financial Fusion Consumer Banking Suite versiones anteriores a 20060706 tiene un impacto desconocido y vectores de ataque remotos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sybase:financial_fusion_consumer_banking_solution:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09FDD8A-BA0C-4DFC-8792-9A86DBCE8022"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sybase.com/detail?id=1041431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sybase.com/detail?id=1041431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a \".it\" (Impulse Tracker) file with an envelope with a large number of nodes."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función it_read_envelope en Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 y anteriores y actual CVS como el 20060716, incluido libdumb, permite a atacantes con la intervención del usuario ejecutar código de su elección a través de un archivo \".it\" (Impulse Tracker) con un sobre con un número grande de nodos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynamic_universal_music_bibliotheque:dumb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.3",
            "matchCriteriaId" : "B35D9F6D-36DD-450A-B7E1-73974B48EE77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/dumbit-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21092",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2835",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/dumbit-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users."
      }, {
        "lang" : "es",
        "value" : "Mercury Messenger, posiblemente 1.7.1.1 y otras versiones, cuando funciona sobre una plataforma multiusuario Mac OS X. almacena los registros de chat con permisos todos-lectura dentro del directorio /Users, lo cual permite a usuarios locales leer los registros de chat de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercury_messenger:mercury_messenger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.1.1",
            "matchCriteriaId" : "FBEFE20A-3047-4435-9E1F-7E3326C6B6F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/440243/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440243/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the environment is a multi-user Mac OS X platform."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a request to TCP port 515."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Winlpd 1.26 permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en una respuesta en el puerto TCP 515."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rabox:winlpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.26",
            "matchCriteriaId" : "5EF220A6-9252-4E8A-883E-08CED564CD0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://foro.elhacker.net/index.php/topic%2C131756.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21058",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=27332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://foro.elhacker.net/index.php/topic%2C131756.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=27332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la función communicate de estmaster.c para Hyper Estraier versiones anteriores a 1.3.3 permite a atacantes remotos realizar acciones no autorizadas como otros usuarios mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "386121B9-2796-4295-BD63-81D1A08C6AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04B2883-E8BD-4F9B-ADAE-28BE6981BF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF37DD5-26D1-4A6A-9A5A-A9F4FB71A70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCB2566-865D-4E5A-A251-FD057AC14939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3BD030-1B79-4578-9D65-D3135BF6BE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F921F80F-A78B-49EE-86BC-170DF79149D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498EB12A-17CE-477B-83BB-503A28333A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "657A881A-5B79-45C5-A78F-8CB914E7E1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C744DCF-51A5-4FA3-A6E0-5B1FEAAC8FD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9631C3B4-11AE-47F0-AA76-1197B4E15842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C79F3B-1A14-41BB-8FDC-410328B29276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C5F7D73-4A09-4CD3-9C42-0E8A17F4B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED50041B-A310-46ED-850D-F76F1F685783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CEFB1C-689C-411F-BDCE-B9E05A28DC3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E7F965E-3C2D-42D3-BD9B-4C2864BBBC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7614C653-7933-42A0-BCDA-F5F6F32DB48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1850C2-98E6-496B-85B4-40BF8707E763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD6D6FE-7D6B-4DE9-AC20-0FF212249D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CA9CB9-A4AA-4632-AC9B-BF5036038E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807DE72A-B4A6-4458-AF64-22EFF4FC4871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC45692D-30E8-4A99-B46C-B0D1B98F991F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31210E7A-918F-40B9-B1E1-87C0157F8DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A78821E6-5806-49EF-BB6C-CA11D649C68D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8539D84-C4B0-4146-ADFB-65E09B68A5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper_estraier:hyper_estraier:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91E42C0-14CF-40F4-8EFD-108371FF2B8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21049",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=432119",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=432119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nHyper Estraier, Hyper Estraier, 1.3.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument."
      }, {
        "lang" : "es",
        "value" : "KDE Konqueror 3.5.1 y anteriores permite a atacantes remotos provocar denegación de servicio (caida de aplicación) a través de la llamada al método replaceChild sobre un objeto DOM, el cual dispara una referencia NULL, somo se demostró con la llamada a document.replaceChild con un argumento 0 (zero)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.1",
            "matchCriteriaId" : "47E4D28B-032C-47CF-A917-B7B716FC8342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417F34FB-A6B0-4090-BDC9-6D4C1BF0D3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61416A22-7309-4890-80B8-6E7C09C7BE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F918814C-F129-4534-921A-38AF678A7016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D435E39F-4F70-481B-9225-B072B79BEB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD68BAB-8945-4A22-938E-12C01D0111D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3220BF-B0AF-4C90-89BD-B425EE58021D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "619EB7F6-8694-4344-A4C9-A35DA58391AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC65385-B190-44BE-9AF8-B14F48303046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8A54F6-96A9-44B8-97C8-50DA7276708D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BE888B-FE26-4378-B853-29995A55920C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E4FC9B-F47C-4BD5-B2C7-23CBAD2D5488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0172B167-5780-4F80-ACC9-2FB8B60D6717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AA19A3-CB04-4267-A8D3-49BEC5892CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24B7C8D-FD99-429B-86C2-D508A0D6FBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C0DB31D-D075-409C-9ED9-A9E1D96332CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9FBD50-02B9-459D-8600-57897E195A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED38ED0A-3213-4F0C-A76D-DC88B8E5CFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:konqueror:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0102A8-7149-425C-9956-FB3640BFFA85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-14-konqueror-replacechild.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18978",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-322-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-14-konqueror-replacechild.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-322-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider a crash of a client application such as Konqueror to be a security issue.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (application crash) via a large owner value, which causes an assert error."
      }, {
        "lang" : "es",
        "value" : "nNetObject.cpp en Armagetron Advanced 2.8.2 y anteriores permite a atacantes remotos provocar denegación de servicio (caida de aplicación) a través de un valor propietario largo, el caul podría provocar un error de declaración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.8.2",
            "matchCriteriaId" : "2254CDBD-509B-4EA4-83FD-BA88082AE133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron_advanced:0.2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597F64D9-AA8F-4738-AE1D-49D03C5BD361"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/atrondos-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/atrondos-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-18T15:47:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a large number handled by the id_req_handler function."
      }, {
        "lang" : "es",
        "value" : "nNetObject.cpp de Armagetron Advanced 2.8.2 y anteriores permite a atacantes remotos provocar una denegación de servicio (agotamiento de CPU) mediante un número grande manejado por la función id_req_handler."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.8.2",
            "matchCriteriaId" : "2254CDBD-509B-4EA4-83FD-BA88082AE133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armagetron:armagetron_advanced:0.2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597F64D9-AA8F-4738-AE1D-49D03C5BD361"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/atrondos-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/atrondos-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the (1) language parameter in accounts/inc/include.php and (2) lang_settings parameter in admin/inc/include.php, which is not properly sanitized by the securepath function, a related issue to CVE-2005-4556."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio absoluto en (a) MERAK Mail Server para Windows 8.3.8r con anteriores IceWarp Web Mail 5.6.1 y (b) VisNetic MailServer anterior a 8.5.0.5 permite a atacantes remotos incluir archivos de su elección a través de una ruta completa de Windows y controlador de cartas en el parámetro (1) language en accounts/inc/include.php y (2) parámetro lang_settings en admin/inc/include.php, lo cual no es desinfectado por la función securepath, un asunto relacionado con CVE-2005-4556."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deerfield:visnetic_mail_server:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA00556D-F5B0-46DA-9A86-B737DC7A8A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F933D19-3CFD-4DB8-8D4F-80CE3D8B1FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.3.8r:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A4CCD574-8BA5-4FF9-928E-D7BC9A0377B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18953",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18966",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-12/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-14/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440297/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19002",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-12/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-14/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440297/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname in the lang_settings parameter to mail/index.html, which is not properly sanitized by the validatefolder PHP function, possibly due to an incomplete fix for CVE-2005-4558."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio de ruta absoluta en (1) MERAK Mail Server para Windows 8.3.8r con anteriores IceWarp Web Mail 5.6.1 y (2) VisNetic MailServer anterior a 8.5.0.5 permite a usuarios remotos validados incluir archivos de su elección a través del parámetro language modificado y un nombre de ruta completo Windows o UNC en el parámetro lang_settings en mail/index.html, lo cual no es saneadoo de forma adecuada por la función PHP validatefolder, posiblemente debido a una solución incompleta para CVE-2005-4558."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deerfield:visnetic_mail_server:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA00556D-F5B0-46DA-9A86-B737DC7A8A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icewarp:web_mail:5.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F933D19-3CFD-4DB8-8D4F-80CE3D8B1FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:merak:mail_server:8.3.8r:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "A4CCD574-8BA5-4FF9-928E-D7BC9A0377B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18953",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18966",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-12/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-14/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440297/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19002",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/18966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-12/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-14/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440297/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3466",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2023-11-07T01:59:02.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-3600.  Reason: This candidate is a reservation duplicate of CVE-2006-3600.  Notes: All CVE users should reference CVE-2006-3600 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3467",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en FreeType en versiones anteriores a 2.2 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un archivo PCF manipulado, según lo demostrado mediante el archivo de prueba Red Hat bad1.pcf, debido a una solución parcial de CVE-2006-1861."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "6351F282-0A46-4A6D-9793-D338845EFF2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Aug/0002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21144",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21232",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21285",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21566",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21567",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21606",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21626",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21701",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21793",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21798",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21836",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22332",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22907",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23400",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23939",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27271",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-186.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-284.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1178",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:129",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0500.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0634.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0635.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444318/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-324-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-341-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0381",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10673",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Aug/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/33937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.apple.com/kb/HT3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-186.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-284.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0634.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0635.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451419/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-324-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-341-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/download/esx/esx-254-200610-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3468",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only."
      }, {
        "lang" : "es",
        "value" : "Linux kernel 2.6.x, cuando utiliza NFS y EXT3, permite a atacantes remotos provocar denegación de servicio (panic en el sistema de archivos) a través de paquetes UDP manipulados con un procedimiento de búsqueda V2 que especifica una cabecera de fichero mala (número de inode), lo cual dispara un error y provocar un directorio exportado se remontado en solo lectura."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*",
            "matchCriteriaId" : "A12077FF-39D0-474A-AB6C-62926CC065B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*",
            "matchCriteriaId" : "508BC14E-41D8-4847-AE0F-7830E2EE0522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lkml.org/lkml/2006/7/17/41",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21369",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22148",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22822",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_57_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_64_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0046/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=199172",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9809",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lkml.org/lkml/2006/7/17/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_57_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_64_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=199172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en time.cc de MySQL Server 4.1 anterior a 4.1.21 y 5.0 anterior al 1 de abril de 2006 permite a usuarios autenticados remotamente provocar una denegación de servicio (caída) mediante una cadena de formato en lugar de una fecha como el primer parámetro para la función date_format, la cual es posteriormente utilizada en una llamada de escritura formateada para mostrar el mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBEDF5A-5205-4012-B9B8-0FA304E7119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC969A5-52CC-44F2-A929-DE559A5D7624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C06765-D153-4D4D-B8CD-DB2E386E082B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E241159-FAA4-4DCF-AB68-BE36DF95D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6995B6-B594-454B-BD26-EACFB8241DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC14E107-7C11-4D5B-994B-CCACFD62097E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4F891-2A03-45A8-A49C-7F8B8F7D8407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=20729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21147",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21366",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31226",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1112",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0768.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-321-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=20729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0768.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-321-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue was addressed in mysql packages as shipped in Red Hat Enterprise Linux 4 via:\n\nhttps://rhn.redhat.com/errata/RHSA-2008-0768.html\n\nThis issue did not affect mysql packages as shipped with Red Hat Enterprise Linux 2.1, 3, or 5, and Red Hat Application Stack v1 and v2.",
        "lastModified" : "2008-07-25T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key."
      }, {
        "lang" : "es",
        "value" : "vmware-config.pl en VMware for Linux, ESX Server 2.x, y Infrastructure 3 no valida el código de retorno desde la llamada a la función Perl chmod, lo cual podría permitir un fichero llave SSL sea creado con una umask no segura que permite a usuarios locales leer o modificar la llave SSL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:infrastructure:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0E3A11-F411-4653-96ED-05ECE4DCF401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9A9E09-959A-4A99-A25C-09AA4FA646D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB051A5C-5F66-4732-949A-48B0FDE4AFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA47458-E783-4A6A-ABF1-59E8D87E9B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A348CABB-CD52-4C55-9653-154C75605CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA74505A-3550-4646-B2D6-6E6D0924023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7632C2AE-4B59-4B17-8A6B-C1D05C2824FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC77D81A-12AA-4948-9970-9461289DC648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A10ABE-E778-4133-B1AA-05FE6829A34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CB97F9-9DF6-4493-A245-F4901F4DD22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C862131A-64D8-4C2D-815F-19971D63AF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.vmware.com/kb/2467205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21120",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440583/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441082/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.vmware.com/kb/2467205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440583/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441082/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3627",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador GSM BSSMAP en Wireshark (también conocido como Ethereal) 0.10.11 hasta 0.99.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06828062-5F31-4532-9E24-34F29CE30218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738F4F0-41C6-48CF-8233-C94D79DCA807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E88C1647-8B05-421E-AA1F-25F9B248D761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27821",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11307",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nWireshark, Ethereal, 0.99.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3628",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de formato de cadena en Wireshark (atmbién conocido como Ethereal) 0.10.x a 0.99.0 permite a atacantes remotos provocar denegación de servicio y posiblemente ejecutar código de su eleccción a través de los disectores (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, y (5) NTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F1374-B044-472F-ACE4-34FF26F36DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB05480-C3C0-41B4-A4E8-D40A6E482618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27362",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27363",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27364",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27369",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27822",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27824",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27825",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9175",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nEthereal Group, Ethereal, 0.99.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3629",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el disector MOUNT en Wireshark (también conocido como Ethereal) 0.9.4 a 0.99.0 permite a atacantes remotos provocar denegación de servicio (consumo de memoria) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F1374-B044-472F-ACE4-34FF26F36DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB05480-C3C0-41B4-A4E8-D40A6E482618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27365",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27826",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10492",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nEthereal Group, Ethereal, 0.99.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3630",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples errores de superación de límite (off-by-one) en Wireshark (también conocido como Ethereal) 0.9.7 hasta 0.99.0 tienen impacto y vectores de ataque remotos desconocidos a través de los analizadores (1) NCP NMAS y (2) NDPS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27367",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27368",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27827",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11350",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3631",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en en el analizador de SSH de Wireshark (aka Ethereal) 0.9.10 hasta 0.99.0 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD509BD0-3E90-47E5-97DA-F8814002EDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8E63FC-A3AA-455E-8AA7-E3577468F022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B432986-F5AE-4506-B584-3B4E943A9C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3017F8E8-F28D-46E0-A256-0121BAD588A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF60E892-31E4-42E0-BA34-6C8D9BBA944D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF374E8-36A3-43AA-B86C-092F5B244841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nEthereal Group, Ethereal, 0.99.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3632",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Wireshark (también conocido como Ethereal) 0.8.16 hasta 0.99.0 permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección a través del analizador de protocolo NFS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E737F77-ABE6-4E3E-9156-4FAF841E8314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B5EB4E-D9D6-4324-BEB6-85C2845AC102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.17a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C25FB130-5D15-47EB-97B6-F368EFF958BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC35478-9276-4732-9F0D-13CA958C617C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77000951-EF3E-41D8-8545-497BA3E5C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934E636C-5EC3-436C-990F-D9434776CEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73117E69-715B-4779-A5D8-218E15122A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB461B6B-B731-4732-AAD0-191BE50189D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19961880-D38A-4785-A7C5-879A061119BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831705D2-C4DE-475F-B908-8859064AFB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4622585-20E2-46E9-B773-74729FF22EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86ADCB6-0940-4CB9-85F1-A7694210FB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6289-D2E2-4369-BB40-EA6EE7025D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A48938-30B8-4403-B08A-177FFCB9054B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B81EFD-27C1-411C-AFF3-E5340627E3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680934CF-7F9B-41E4-AA03-ECD96F477AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBCCE368-64E6-4CEC-B068-9B8BA2527289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5374A4-5194-45FD-895D-B04FDC7E853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338CEFD7-EBC0-43FB-B482-9A3D0834447E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7666DE-0AC1-483C-B96B-E57AC04094CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136FF83B-2B03-4E5F-95C1-84195BE8392A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB12CA01-E0EA-4E84-802F-CC52268D65FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9704EC6E-7219-41FC-BE00-CD91A246C61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B93B95E-F295-468C-A6A2-5AA6DE729E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE94BFB1-67E2-4503-AEA8-2CD5DBD4F88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D45EF17-50C9-4FF9-A41C-C78A0C40AD20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729D34A7-45FD-40E8-ACC6-C5746E611789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82B4A05-CF96-4EF6-AA0D-40F9D6FF003C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82FE048-D644-4909-AEA6-CFB853460555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F04983B-4A05-4E83-A7E9-D7090AA067AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.10.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F1374-B044-472F-ACE4-34FF26F36DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereal_group:ethereal:0.99.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB05480-C3C0-41B4-A4E8-D40A6E482618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27371",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27830",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9468",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0602.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200607-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nEthereal Group, Ethereal, 0.99.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process."
      }, {
        "lang" : "es",
        "value" : "FatWire Content Server 5.5.0 permite a atacantes remotos evitar las restricciones de acceso y obtener privilegios de administración mediante vectores de ataque no especificados en el proceso de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fatwire:fatwire_content_server:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CB71CD9-2C53-4603-BC28-684F77935719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0242.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21020",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.s21sec.com/avisos/s21sec-032-en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439896/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0242.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.s21sec.com/avisos/s21sec-032-en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439896/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary web script or HTML via the phpage parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en photocycle de Photocycle 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro phpage."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photocycle:photocycle:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A04051-2DAA-4F42-B590-7D4C99E1C614"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439968/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440078/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439968/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440078/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, (2) refererpagesfilterex, (3) urlfilterex, (4) urlfilter, (5) hostfilter, or (6) hostfilterex parameters, a different set of vectors than CVE-2006-1945."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en awstats.pl de AWStats 6.5 build 1.857 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) refererpagesfilter, (2) refererpagesfilterex, (3) urlfilterex, (4) urlfilter, (5) hostfilter, o (6) hostfilterex, un juego de vectores distinto de CVE-2006-1945."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5_1.857",
            "matchCriteriaId" : "EAE4E972-EFD0-4226-8917-8C71CCC551AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-360-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-360-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters."
      }, {
        "lang" : "es",
        "value" : "awstats.pl en AWStats 6.5 build 1.857 y anteriores permite a atacantes remotos obtener la ruta de instalación a través de los parámetros (1) year, (2) pluginmode o (3) month."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5_1.857",
            "matchCriteriaId" : "EAE4E972-EFD0-4226-8917-8C71CCC551AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-360-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-360-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en poll.php de Flipper Poll 1.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flipper_poll:flipper_poll:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "F634EDD3-45AA-455B-902A-215E1409CAAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115031160401269&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0606-exploits/flipper.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439971/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115031160401269&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.org/0606-exploits/flipper.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/26503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439971/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_calendar parameter, which overwrites the $path_to_calendar variable from an extract function call."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en calendar.php de SoftComplex PHP Event Calendar 1.4 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro path_to_calendar, el cual sobrescribe la variable $path_to_calendar de una llamada a la función extract."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softcomplex:php_event_calendar:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11C8395-170E-4355-8ACC-AA85AB6AE4CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21074",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440265/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18965",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.solpotcrew.org/adv/solpot-adv-01.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440265/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.solpotcrew.org/adv/solpot-adv-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in the tpath parameter to cn_config.php.  NOTE: the news.php vector is already covered by CVE-2005-0859."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en CzarNews 1.12 hasta 1.14 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro tpath de cn_config.php. NOTA: el vector news.php ya ha sido considerado por CVE-2005-0859."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:czaries_network:czarnews:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091D2F1D-9EC7-477E-A488-5DB9AA011763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:czaries_network:czarnews:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB52553C-3450-4821-AE04-B3B08EA498BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:czaries_network:czarnews:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E46CCB6-A6A0-4EFB-B35C-F68F54758EFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21038",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and \"remote users\" to cause a denial of service (crash)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en [SYSEXE]SMPUTIL.EXE de HP OpenVMS 7.3-2 permite a usuarios locales y \"usuarios remotos\" provocar una denegación de servicio (caída)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:openvms:7.3-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852A393C-CEDD-43F0-95BA-50D259C04843"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/VMS732_MP-V0100.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21067",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/VMS732_MP-V0100.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el servicio Universal Plug and Play (UPnP) de D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router permite a atacantes remotos ejecutar código de su elección mediante una petición M-SEARCH larga al puerto UDP 1900."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:di-604_broadband_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBCE20D2-7EA1-43D0-A6F5-24FD81818326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:di-784:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6154B777-7263-4AF6-AD24-589D7DD5B1CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:ebr-2310_ethernet_broadband_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B18332-54DF-45C4-9D8E-95C4D2F598C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:wbr-1310_wireless_g_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D69AC68-EC86-4607-ABDB-75897907CAB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:wbr-2310_rangebooster_g_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A57C817A-E969-4B1B-A898-C61A3D1EE662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dlink:di-524:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AA4CB4-DE99-412C-B02E-57A5EC0802E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dlink:di-624:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADE3827-C247-47A7-B7CF-DE7EC8F0CD3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0363.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21081",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060714.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/971705",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440298/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440852/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0363.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060714.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/971705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440298/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440852/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Room.php de Francisco Charrua Photo-Gallery 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_charrua:photo-gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1F9E17C-2E9E-4F7E-9AEC-EF36F1CC041E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21084",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440124/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2834",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440124/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter.  NOTE: this issue has been disputed by a third party that claims that \" the myadmindir variable is set before any GET variables are processed."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en user-func.php en Codeworks Gnomedia SubberZ[Lite] permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro myadmindir. NOTA: este asunto ha sido impugnado por un tercera fuente que indica que \"la varibale myadmindir está asignada antes de que las varibales GET estén procesadas\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworks:gnomedia_subberz:lite:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D599488-E904-49DB-99B1-9999AABD2168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440139/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440864/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440139/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440864/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) components/com_minibb.php or (2) components/minibb/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de inclusión remota de archivo en PHP en MiniBB Forum 1.5a y anteriores permite a atacantes remotoso ejecutar código PHP de su elección a través de una URL en el parámetro absolute_path en (1) components/com_minibb.php o (2) components/minibb/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minibb:forum:1.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8E2EDD-5BB5-49F9-99B0-A989E3E51901"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv39-matdhule-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440132/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv39-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440132/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to (1) ignore-pm.php, (2) sendmail.php, (3) reply.php or (4) sub-join.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en VBZooM 1.11 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del parámetro UserID en (1) ignore-pm.php, (2) sendmail.php, (3) reply.php o (4) sub-join.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11",
            "matchCriteriaId" : "9EA0F360-F6AB-478F-B9ED-B516D3EA948E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1244",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440114/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440141/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440145/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/491770/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440114/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440141/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440145/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/491770/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/42254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP code via a URL in the lm_path parameter.  NOTE: the vendor has disputed this issue to SecurityTracker, stating that the $lm_path variable is set to a constant value.  As of 20060726, CVE concurs with the vendor based on SecurityTracker's post-disclosure analysis"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en enduser/listmessenger.php in ListMessenger 0.9.3 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro lm_path. NOTA: el vendedor ha impugnado este asunto en SecurityTracker, basándose en que la variable $lm_path está asignada a un valor constante.  \t\r\nEn fecha 20060726, CVE concurre con el vendedor basado en el análisis del mensaje-de acceso de SecurityTracker."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silentweb:listmessenger:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "588CDF22-C859-4F46-890B-5E3EB6C9AA23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-July/000946.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440291/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-July/000946.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440291/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3693",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\\`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call."
      }, {
        "lang" : "es",
        "value" : "Rocks Clusters 4.1 y anteriores permite a usuarios locales ganar privilegios a través de comandos incluidos con el caracter de escape (\\') en un argumento en el comando (1) mount-loop (mount-loop.c) o (2) umount-loop (umount-loop.c), el cual no es filtrado en una llamada de la función del sistema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocks_clusters:rocks_clusters:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "2CFEC078-15CB-43CF-89BD-5F4025B9EC42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21065",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440126/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19003",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xavier.tigerteam.se/advisories/TSEAD-200606-6.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xavier.tigerteam.se/exploits/rocksmountdirty.sh",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://xavier.tigerteam.se/exploits/rocksumountdirty.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440126/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xavier.tigerteam.se/advisories/TSEAD-200606-6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xavier.tigerteam.se/exploits/rocksmountdirty.sh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://xavier.tigerteam.se/exploits/rocksumountdirty.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe level\" checks via unspecified vectors involving (1) the alias function and (2) \"directory operations\"."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Ruby anterior a 1.8.5 permite a atacantes remotos evitar la validación \"nivel de seguro\" a través de vectores no especificados afectando a la función (1)alias y (2) \"operaciones de directorio\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A297F510-49B6-4038-B256-D24AEE5B2E53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C92061D-1279-411C-95ED-89DE07B1FD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF848DA-AF77-427B-A6D1-582844F38C05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2313947696/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2383768862/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21009",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21233",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21236",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21272",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21337",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1139",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0604.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18944",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-325-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2313947696/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2383768862/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0604.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-325-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trac before 0.9.6 does not disable the \"raw\" or \"include\" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458."
      }, {
        "lang" : "es",
        "value" : "Trac anterior a 0.9.6 no deshabilita los comandos \"raw\" o \"nclude\" cuando se mantiene a usuarios no válidos con la funcionalidad de texto reestructurado (reStructuredText) desde docutils, lo cual permite a atacantes remotos leer archivos de su elección, realizando ataques de secuencias de comandos en sitios cruzados (XSS), o provocar denegación de servicio a través de vectores no especificados. NOTA: esto podría estar relacionado con CVE-2006-3458."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edgewall_software:trac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.5",
            "matchCriteriaId" : "9FC0F377-A06F-42B8-ACDF-EB59F0C912F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20958",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.edgewall.org/wiki/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2729",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.edgewall.org/wiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to 0.9.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) via long arguments to mshta.exe."
      }, {
        "lang" : "es",
        "value" : "filtnt.sys en Outpost Firewall Pro before 3.51.759.6511 (462) permite a usuarios locales provocar denegación de servicio (caida) a través de argumentos en mshta.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agnitum:outpost_firewall:3.5.631:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2209C0CC-208D-43AA-B260-18856EE831EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21095",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440427",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19026",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain privileges and execute commands (a) via the \"open folder\" option when no instance of explorer.exe is running, possibly related to the ShellExecute API function; or (b) by overwriting a batch file through the \"Save Configuration As\" option. NOTE: this might be a vulnerability in Microsoft Windows and explorer.exe instead of the firewall."
      }, {
        "lang" : "es",
        "value" : "Agnitum Outpost Firewall Pro 3.51.759.6511 (462), tal y como se usa en (1) Lavasoft Personal Firewall 1.0.543.5722 (433) y (2) Novell BorderManager Novell Client Firewall 2.0, no restringe de forma adecuada las actividades de usuario para ganar privilegios y ejecutar comandos (a)a través de la opción \"abrir carpeta\" cuando una instancia de explorer.exe está funcionando, posiblemente relacionado con la función API ShellExecute, o (b) a través de la re-escritura de un fichero de proceso por lotes a través de la opción \"Guardar configuración como\". NOTA: esto podría estar relacionado con la vulnerabilidad en Microsoft Windows y la instnacia explorer.exe del firewall."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agnitum:outpost_firewall:3.51.759.6511:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D53F7EA-FC12-44AB-8DE8-035E4BD8AE7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lavasoft:lavasoft_personal_firewall:1.0.543.5722.433:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1090AA-5A26-4600-B284-37D714AD28D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:client_firewall:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A29B4A-377D-4264-ABD1-6A14C9BDBC7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21089",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ben.goulding.com.au/secad.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440426/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2851",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/903/3762108_f.SAL_Public.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.ben.goulding.com.au/secad.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/903/3762108_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB01 for Change Data Capture (CDC) component and (2) DB03 for Data Pump Metadata API.  NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB01 is related to multiple SQL injection vulnerabilities in SYS.DBMS_CDC_IMPDP using the (a) IMPORT_CHANGE_SET, (b) IMPORT_CHANGE_TABLE, (c) IMPORT_CHANGE_COLUMN, (d) IMPORT_SUBSCRIBER, (e) IMPORT_SUBSCRIBED_TABLE, (f) IMPORT_SUBSCRIBED_COLUMN, (g) VALIDATE_IMPORT, (h) VALIDATE_CHANGE_SET, (i) VALIDATE_CHANGE_TABLE, and (j) VALIDATE_SUBSCRIPTION procedures, and that DB03 is for SQL injection in the MAIN procedure for SYS.KUPW$WORKER."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Database 10.1.0.5 tienen un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# (1) DB01 para el componente Change Data Capture (CDC) y (2) DB03 para Data Pump Metadata API. NOTA: en fecha de 20060719, Oracle no ha cuestionado la demanda de un investigador confiable que DB01 está relacionado con múltiples vulnerabilidades de inyección SQL en SYS.DBMS_CDC_IMPDP utilizando los procedimientos (a) IMPORT_CHANGE_SET, (b) IMPORT_CHANGE_TABLE, (c) IMPORT_CHANGE_COLUMN, (d) IMPORT_SUBSCRIBER, (e) IMPORT_SUBSCRIBED_TABLE, (f) IMPORT_SUBSCRIBED_COLUMN, (g) VALIDATE_IMPORT, (h) VALIDATE_CHANGE_SET, (i) VALIDATE_CHANGE_TABLE, y (j) VALIDATE_SUBSCRIPTION, y que DB03 es para inyección SQL en el proceso MAIN para SYS.KUPW$WORKER."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047994.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_cdc_impdp.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_kupw%24worker.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440439/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440440/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047994.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_cdc_impdp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_kupw%24worker.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440439/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440440/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 and 9.2.0.6 has unknown impact and attack vectors, aka Oracle Vuln# DB02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Core RDBMS en Oracle Database 9.0.1.5 y 9.2.0.6  tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# DB02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 for Web Distributed Authoring and Versioning (DAV) and (2) DB23 for XMLDB."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Database 9.2.0.6 y 10.1.0.4 tienen un impacto desconocido y vectores de ataque, también conocido como racle Vuln# (1) DB04 para Web Distributed Authoring y Versioning (DAV) y (2) DB23 para XMLDB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Dictionary component in Oracle Database 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors, aka Oracle Vuln# DB05."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Dictionary en Oracle Database 8.1.7.4, 9.0.1.5, y 9.2.0.6 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# DB05."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB06 in Export; (2) DB08, (3) DB09, (4) DB10, (5) DB11, (6) DB12, (7) DB13, (8) DB14, and (9) DBC01 for OCI; (10) DB16 for Query Rewrite/Summary Mgmt; (11) DB17, (12) DB18, (13) DB19, (14) DBC02, (15) DBC03, and (16) DBC04 for RPC; and (17) DB20 for Semantic Analysis.  NOTE: as of 20060719, Oracle has not disputed third party claims that DB06 is related to \"SQL injection\" using DBMS_EXPORT_EXTENSION with a modified ODCIIndexGetMetadata routine and a call to GET_DOMAIN_INDEX_METADATA, in which case DB06 might be CVE-2006-2081."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en  Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, y 10.2.0.2 tienen un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# (1) DB06 en Export; (2) DB08, (3) DB09, (4) DB10, (5) DB11, (6) DB12, (7) DB13, (8) DB14, and (9) DBC01 para Query Rewrite/Summary Mgmt; (11) DB17, (12) DB18, (13) DB19, (14) DBC02, (15) DBC03, y (16) DBC04 para RPC; y(17) DB20 para Semantic Analysis. NOTA: en fecha 20060719, Oracle no ha disputado a terceros que DB06 está relacionado con la “inyección SQL” utilizando DBMS_EXPORT_EXTENSION con una rutina ODCIIndexGetMetadata y una llamada a GET_DOMAIN_INDEX_METADATA, en cuyo caso DB06 podría estar CVE-2006-2081."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/932124",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/932124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln# DB07."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en InterMedia para Oracle Database 9.0.1.5, 9.2.0.6, y 10.1.0.4 tiene un impacto desconocido y vectores de ataque, también conocido como oracle Vuln# DB07."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10.1.0.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en racle ODBC Driver para Oracle Database 10.1.0.4 tiene un impacto deconocido y vectores de ataque, tambíen conocido como Oracle Vuln# 10.1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Statistics and (2) DB22 for Upgrade & Downgrade.  NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB21 is for a local SQL injection vulnerability in SYS.DBMS_STATS, and that DB22 is for SQL injection in SYS.DBMS_UPGRADE."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Database 10.1.0.5 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# (1) DB21 para Statistics y (2) DB22 para Upgrade & Downgrade. NOTA: en fecha 20060719, Oracle no ha disputado este asunto por un investigador creible que DB21 es para vulnerabildades de inyección SQL local en SYS.DBMS_STATS, y que DB22 es para inyección SQL en SYS.DBMS_UPGRADE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047992.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047993.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_stats.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_upgrade.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440447/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440453/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047992.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047993.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_stats.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_upgrade.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440447/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440453/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 has unknown impact and attack vectors, aka Oracle Vuln# AS01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server 9.0.2.3 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# AS01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 and 9.0.3.1 has unknown impact and attack vectors, aka Oracle Vuln# AS02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server 9.0.2.3 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# AS02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server 9.0.2.3, , 9.0.3.1, 9.0.4.2, 10.1.2.0.2, y 10.1.2.1, tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# AS03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# AS04."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server 9.0.2.3, , 9.0.3.1,  y 10.1.2.0.0, tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# AS04."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2328BA88-C390-46EA-8C30-9F0A001C10EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# (1) AS05 and (2) AS08."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server9.0.2.3, 9.0.3.1, 9.0.4.2, y 10.1.2.0.0 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# (1) AS05 y (2) AS08."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2328BA88-C390-46EA-8C30-9F0A001C10EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 9.0.4.1 has unknown impact and attack vectors, aka Oracle Vuln# AS06."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server 9.0.2.3, 9.0.3.1, y 9.0.4.1 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# AS06."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DEB7BD-FB71-4C22-A0FF-89923B263DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852BF209-3C6F-403B-920D-50C46D37515B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 9.0.4.2 and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# AS07."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server 9 9.0.4.2 y 10.1.2.0.0 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# AS07."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2328BA88-C390-46EA-8C30-9F0A001C10EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 10.1.3.0 has unknown impact and attack vectors, aka Oracle Vuln# AS09."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server 10.1.3.0 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# AS09."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3575AD-C253-4FBA-A2D8-509DABED8431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS10."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Oracle Application Server 10.1.2.0.2 y 10.1.2.1 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# AS10."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FFDBFF-C219-49E7-AD16-0657D6D4E8BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln# OCS01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OC4J para Calendar para Oracle Collaboration Suite 10.1.2  tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# OCS01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS01 for Internet Expenses; (2) APPS02, (3) APPS05, (4) APPS06, (5) APPS07, (6) APPS08, (7) APPS09, and (8) APPS10 for Oracle Application Object Library; (9) APPS11, (10) APPS12, and (11) APPS13 for Oracle Applications Technology Stack; (12) APPS14 for Oracle Call Center Technology; (13) APPS15 for Oracle Common Applications; (14) APPS18 for Oracle Self-Service Web Applications; and (15) APPS19 for Oracle Workflow Cartridge."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite y Applications 11.5.10CU2 tienen un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# (1) APPS01 para Internet Expenses; (2) APPS02, (3) APPS05, (4) APPS06, (5) APPS07, (6) APPS08, (7) APPS09, y (8) APPS10 para Oracle Application Object Library; (9) APPS11, (10) APPS12, y (11) APPS13 para Oracle Applications Technology Stack; (12) APPS14 para Oracle Call Center Technology; (13) APPS15 para Oracle Common Applications; (14) APPS18 para Oracle Self-Service Web Applications; y (15) APPS19 para Oracle Workflow Cartridge."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS03 and (2) APPS04 for Oracle Application Object Library; and (3) APPS20 for Oracle XML Gateway."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite y Applications 11.5.9 tienen un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# (1) APPS03 y (2) APPS04 para Oracle Application Object Library; y (3) APPS20 para Oracle XML Gateway."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Exchange for Oracle E-Business Suite and Applications 6.2.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS16 and (2) APPS17."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Exchange para Oracle E-Business Suite y Applications 6.2.4 tienen un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# (1) APPS16 y (2) APPS17."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:exchange:6.2.4_for_oracle_e-business_suite_and_applications:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5EC3B3A-405C-429D-871C-D4CBB26D0B40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en CORE: Repository para Oracle Enterprise Manager 9.0.1.0 y 9.2.0.1 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# EM01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:9.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDF1C44-8D91-4CFB-AC88-0FE802A2AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:9.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE5093-86EC-411C-A9F8-C6DE2343D5AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en  Enterprise Config Management para Oracle Enterprise Manager 10.1.0.3 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# EM02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA27FFD-6C75-4013-AE5D-58E929BFB39F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors, aka Oracle Vuln# EM03 and EM04."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Management Service para Oracle Enterprise Manager 10.1.0.5 y 10.2.0.1 tienen impacto y vectores de ataque desconocidos, también conocido como Oracle Vuln# EM03 y EM04."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8AA2911-B4DB-4793-BE98-93D54FB0F1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:10.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F996F584-5EF1-44B8-AEDD-D8BC56FFAE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en PeopleSoft Enterprise Portal para Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, y 8.9 Bundle #3 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# PSE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.4:bundle16:*:*:*:*:*:*",
            "matchCriteriaId" : "B9252FAB-9193-48B2-AAEF-FDE29F2B30F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:bundle10:*:*:*:*:*:*",
            "matchCriteriaId" : "0540CA11-F54D-47B6-AC93-738946A6A555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle3:*:*:*:*:*:*",
            "matchCriteriaId" : "10E690DD-59EF-436C-AEA3-4CF48D15CA4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en PeopleSoft Enterprise Portal para Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 y 8.9 Bundle #3 tiene un impacto desconocido y vectores de ataque, también conocido como Oracle Vuln# PSE02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:bundle10:*:*:*:*:*:*",
            "matchCriteriaId" : "0540CA11-F54D-47B6-AC93-738946A6A555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle3:*:*:*:*:*:*",
            "matchCriteriaId" : "10E690DD-59EF-436C-AEA3-4CF48D15CA4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attack vectors, aka Oracle Vuln# JDE01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en JD Edwards HTML para Oracle OneWorld Tools EnterpriseOne Tools 8.95 y 8.96 tiene un impacto desconocio y vectores de ataque, también conocido como Oracle Vuln# JDE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:8.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16E0855-512D-4104-83B3-0581BCAC07C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:8.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BB726AB-EE66-4EC6-A11E-868B6FBDB973"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440758/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-200A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the (1) HKLM\\SYSTEM\\CurrentControlSet\\Services\\SNDSrvc and (2) HKLM\\SYSTEM\\CurrentControlSet\\Services\\SymEvent registry keys."
      }, {
        "lang" : "es",
        "value" : "Norton Personal Firewall 2006 9.1.0.33 permite a usuarios locales provocar denegación de servicio (caida) a través de ciertas operaciones de RegSaveKey, RegRestoreKey y RegDeleteKey sobre las llaves del registro (1) HKLM\\SYSTEM\\CurrentControlSet\\Services\\SNDSrvc y (2) HKLM\\SYSTEM\\CurrentControlSet\\Services\\SymEvent"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.0.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8C73F1-FEF1-40A3-BFAB-CE226B98E001"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Norton-Insufficient-protection-of-Norton-service-registry-keys.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Norton-Insufficient-protection-of-Norton-service-registry-keys.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary code via a long argument to the LIST command."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en FileCOPA FTP Server anterior a 1.01 publicada el 18th July 2006, permite a atacantes remotos validados ejecutar código de su elección a través de argumentos largos en el comando LIST."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intervations:filecopa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.01_2006-04-06",
            "matchCriteriaId" : "84B86497-B492-46FD-9317-B72479249D6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21108",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.appsec.ch/docs/2006-07-19-fileCopa.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.appsec.ch/docs/2006-07-19-fileCopa.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) gr_1_id, (2) gr_2_id, (3) gr_3_id, and (4) doc_id parameters in (a) index.php; the (5) uid and (6) pwd parameters in (b) php/esa.php; and possibly other vectors related to files in php/lib/ including (c) del.php, (d) download_backup.php, (e) navig.php, (f) restore.php, (g) set_12.php, (h) set_14.php, and (i) upd_doc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Eskolar CMS 0.9.0.0 permite a atacantes remotos ejcutar comandos SQL de su elección a través de los parámetros  (1) gr_1_id, (2) gr_2_id, (3) gr_3_id, y (4) doc_id en (a) index.php; los parámetros (5) uid y (6) pwd en (b) php/esa.php; y posiblemente otros vectores relacionados con los ficheros en php/lib/ incluido (c) del.php, (d) download_backup.php, (e) navig.php, (f) restore.php, (g) set_12.php, (h) set_14.php, y (i) upd_doc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eskolar_cms:eskolar_cms:0.9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DEE5381-86E4-4CB3-B10B-4A802B31B622"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19045",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 (118844-29 on x86) and without patch 118833-11 (118855-08) allows remote authenticated users to cause a denial of service via unspecified vectors that lead to \"kernel data structure corruption\" that can trigger a system panic, application failure, or \"data corruption.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el Kernel en Solaris 10 con 118822-29 (118844-29 sobre x86) y sin el parche 118833-11 (118855-08) permite a usuarios remotos validados provocar denegación de servicios a través de vectores no especificados que llevan a \"corrupción de la estructura de datos del kernel\" que puede disparar panico del sistema(panic system), fallo de aplicación, o \"corrupción de datos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21109",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102344-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2872",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102344-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a large negative integer argument to the getDataMemberName method of a OWC11.DataSourceControl.11 object, which leads to an integer overflow and a null dereference."
      }, {
        "lang" : "es",
        "value" : "DataSourceControl en Internet Explorer 6 sobre Windows XP SP2 con Office instalado permite a atacantes remotos provocar denegación de servicio (caida) a través de un argumento entero largo negativo en el método getDataMemberName de un objeto OWC11.DataSourceControl.11, el cual lleva a un desbordamiento de entero y una referencia NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-19-datasourcecontrol.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27111",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2883",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27803",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-19-datasourcecontrol.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Microsoft Internet Explorer 6 sobre Windows XP SP2 permite a atacantes remotos provocar denegación de servicio (caida) y ejecutar código de su elección a través deun argumento 0x7fffffff en el método setSlice sobre un objeto ActiveX WebViewFolderIcon, el cual dará lugar a una copia de memoria no válida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://riosec.com/msie-setslice-vuln",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22159",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/753044",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447174/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447383/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447426/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447490/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19030",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-270A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-283A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://riosec.com/msie-setslice-vuln",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/753044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447174/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447383/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447490/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-270A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-283A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5.0.4 and earlier allows remote user-assisted attackers to cause a denial of service (crash) via a form with a multipart/form-data encoding and a user-uploaded file.  NOTE: a third party has claimed that this issue might be related to the LiveHTTPHeaders extension."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 1.5.0.4 y anteriores permite a atacantes remotos con la complicidad del usuario provocar una denegación de servicio caída mediante una codificación multipart/form-data en un fichero subido por el usuario. NOTA: una tercera parte afirma que este asunto podría estar relacionado con la extensión LiveHTTPHeaders."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/440119/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440506/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440119/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440506/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider a user-assisted crash of a client application such as Firefox to be a security issue.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Cisco Security Monitoring, Analysis and Response System (CS-MARS) anterior a 4.2.1 envía con una base de datos de Oracle que contiene cuentas y contraseñas por defecto, lo permite a atacantes obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7BF76D-85A6-4976-B6A8-3D39579C4DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48D948-7524-41F9-A818-F6774049A574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52CC0B4-6C76-420C-98DF-D5B24826E2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F69D1B2-17A3-457D-8381-ABF214608F4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21118",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016537",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19071",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name."
      }, {
        "lang" : "es",
        "value" : "jmx-console/HtmlAdaptor en el jmx-console en el servidor de aplicaciones Web JBoss, como el que va incluido en Cisco Security Monitoring, Analysis and Response System (CS-MARS) anterior a 4.2.1, permite a atacantes remotos obtener privilegios como administrador CS-MARS y ejecutar código Java de su elección mediante la acción invokeOp en el nombre de servicio BSHDeployer jboss.scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:security_monitoring_analysis_and_response_system:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42441750-8181-4945-B160-81B6A8837451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21118",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440641/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19071",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2887",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440641/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el Command Line Interface (CLI)para Cisco Security Monitoring, Analysis y Response System (CS-MARS) anterior a 4.2.1, permite a administradores CS-MARS locales ejecutar comandos de su elección como root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7BF76D-85A6-4976-B6A8-3D39579C4DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C48D948-7524-41F9-A818-F6774049A574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52CC0B4-6C76-420C-98DF-D5B24826E2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:cs-mars:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F69D1B2-17A3-457D-8381-ABF214608F4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21118",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016537",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19071",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Mail2Forum (module for phpBB) 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the m2f_root_path parameter to (1) m2f/m2f_phpbb204.php, (2) m2f/m2f_forum.php, (3) m2f/m2f_mailinglist.php or (4) m2f/m2f_cron.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Mail2Forum (module para phpBB) 1.2 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro m2f_root_path  en 1) m2f/m2f_phpbb204.php, (2) m2f/m2f_forum.php, (3) m2f/m2f_mailinglist.php o (4) m2f/m2f_cron.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mail2forum:mail2forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "FEA6C01A-B913-4787-ABF3-9FBF914C7862"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21083",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19038",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en core/videodb.class.xml.php en el componente VideoDB para Mambo 0.3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:videodb:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0A30B9-1EE4-494E-BCCB-E5C0EF0ECACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:videodb:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4104E0B-CAD4-4DA6-AD88-8CC656EA3020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:videodb:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B30EDAC-C71F-4244-AE71-C80D07813DFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21082",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control panel in SWsoft Plesk 8.0 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en filemanager/filemanager.php en el panel de control en SWsoft Plesk 8.0 y anteriores permite a usuarios remotos validados inyectar secuencias de comando web o HTML a través del parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:plesk_control_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0",
            "matchCriteriaId" : "44DDBD97-EBB2-4E26-B82E-D0F777BB4E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440292/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19017",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/abbc/abbc.class.php en el componente LoudMouth para Mambo 4.0j, y posiblemente otras versiones incluidas la 4.1, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:loudmouth:4.0j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C72774D2-106E-4A03-B0FF-7FAEC9C84151"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19044",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0.0 for Mambo 4.5.1 CMS, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en sitemap.xml.php en Sitemap component (com_sitemap) 2.0.0 para Mambo 4.5.1 CMS, cuando register_globals está habiliado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro  mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:sitemap:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DF905C-D61F-4288-A65F-FA0AE1333193"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0180.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21055",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18991",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/24592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/24592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in server.php in the Hashcash Component (com_hashcash) 1.2.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en server.php en el componente Hashcash com_hashcash) 1.2.1 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashcash:hashcash:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CA41BD-50CD-4493-B96A-DC6A3126DA4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0180.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21053",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com_htmlarea3_xtd-c) for ImageManager 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en popups/ImageManager/config.inc.php en el componente HTMLArea3 Addon (com_htmlarea3_xtd-c) para ImageManager 1.5 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmlarea3:htmlarea3:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE878596-FB1A-4B09-B9E0-71003D05E951"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0180.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19047",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0180.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters."
      }, {
        "lang" : "es",
        "value" : "Múltilpes vulnerabilidades de inyección SQL en class.php en Professional Home Page Tools Guestbook permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) hidemail, (2) name, (3) mail, (4) ip, o (5) text."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:professional_home_page_tools:professional_home_page_tools_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82226BC6-89FE-4E31-BAE8-AF3F7E5E98BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21102",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash."
      }, {
        "lang" : "es",
        "value" : "setcookie.php para el login de administrador en Professional Home Page Tools Guestbook registra la hash de la contraseña del administrador en una cookie, el cual permite a atacantes conducir un ataque por fuerza bruta para adivinar la contraseña después de obtener el hash."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:professional_home_page_tools:professional_home_page_tools_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82226BC6-89FE-4E31-BAE8-AF3F7E5E98BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21102",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Include/editor/rich_files/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the class_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de inclusión remota de archivo en PHP en Include/editor/rich_files/class.rich.php en FlushCMS 1.0.0-pre2 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro class_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flushcms:flushcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_pre2",
            "matchCriteriaId" : "A6EEEF33-0783-4E00-AA8B-08A37B308A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21090",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the class_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en Include/editor/class.rich.php en FlushCMS 1.0.0-pre2 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro class_path. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flushcms:flushcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_pre2",
            "matchCriteriaId" : "A6EEEF33-0783-4E00-AA8B-08A37B308A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21090",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in (1) lib-comment.php (1.4.0sr4) or (2) comment.php (0.3.11sr6)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Geeklog 1.4.0sr4 y anteriores, y 1.3.11sr6 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados cuando se validan comentarios en (1) lib-comment.php (1.4.0sr4) o (2) comment.php (0.3.11sr6)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C869DAF3-7662-4EEF-98DA-11A622DEF8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B2FCD0-5295-4E27-A9AB-4E55CDC4CAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:sr2:*:*:*:*:*:*",
            "matchCriteriaId" : "25E45D9D-ADAF-427F-9B77-FCA02EC0E489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:sr3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2B3430-4066-4750-B856-805E06596AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:sr4:*:*:*:*:*:*",
            "matchCriteriaId" : "F388CFEC-343A-49D6-B8DF-4DBA210A16DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:sr5:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8B6EE1-3B36-4A5E-A95A-DCEE640BD6BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.3.11:sr6:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2503B7-3E3C-44A4-9B18-3076546DD5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA849E7-86A1-424D-B379-3BF46DABEBE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:sr2:*:*:*:*:*:*",
            "matchCriteriaId" : "BC65751E-46F4-4684-9F1E-606CFF097CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:sr3:*:*:*:*:*:*",
            "matchCriteriaId" : "60643E25-4130-449B-99D0-6D1B2B8A0AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geeklog:geeklog:1.4.0:sr4:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6D47BE-8161-4114-BE42-D57213FA6F80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2381108784/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21094",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2865",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27813",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2381108784/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.geeklog.net/article.php/geeklog-1.4.0sr5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Zen Cart 1.3.0.2 allows remote attackers to obtain sensitive information via empty (1) _GET[], (2) _SESSION[], (3) _POST[], (4) _COOKIE[], or (5) _SESSION[] array parameters, which reveals the installation path in an error message.  NOTE: this issue might be resultant from a global overwrite vulnerability."
      }, {
        "lang" : "es",
        "value" : "index.php en Zen Cart 1.3.0.2 permite a atacantes remotos obtener información sensible a través de parámetros de array vacios (1) _GET[], (2) _SESSION[], (3) _POST[], (4) _COOKIE[], o (5) _SESSION[], los cuales revelan la ruta de instalación en un mensaje de error. NOTA: Este asunto sería el resultado de una vulnerabilidad global sobre-escrita."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EBE72F-4A37-4D38-B512-CC05C739F33D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438805/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438805/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inc/init.php in Archive Mode (Light) in MyBB (aka MyBulletinBoard) 1.1.4 calls the extract function with EXTR_OVERWRITE on HTTP POST and GET variables, which allows remote attackers to overwrite arbitrary variables, as demonstrated via an SQL injection using the _SERVER[HTTP_CLIENT_IP] parameter in archive/index.php."
      }, {
        "lang" : "es",
        "value" : "inc/init.php en el Modo Archivo (Ligero) o Archive Mode (Light) de MyBB (también conocido como MybulletinBoard) 1.1.4 llama a la función extract con EXTR_OVERWRITE en las variables de HTTP POST y GET, lo cual permite a atacantes remotos sobrescribir variables de su elección, como se ha demostrado mediante una inyección SQL utilizando el parámetro _SERVER[HTTP_CLIENT_IP] en archive/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=10115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20873",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=15",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/26809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=10115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/26809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in MyBB (aka MyBulletinBoard) 1.1.4, related has unspecified impact and attack vectors related to \"user group manipulation.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en MyBB (también conocido como MyBulletinBoard) 1.1.4, tiene impacto y vectores de ataque desconocidos relacionados con \"manipulación de grupos de usuarios\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=10115",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20873",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=15",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26810",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=10115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMyBB, MyBB, 1.1.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) 1.1.4 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en MyBB (también conocido como MyBulletinBoard) 1.1.4 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=10115",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20873",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=15",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26811",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=10115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMyBB, MyBB, 1.1.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using \"java&#115;cript\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en inc/functions_post.php de MyBB (alias MyBulletinBoard) en versiones 1.0 RC2 hasta 1.1.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un URI javascript con una referencia de carácter numérico SGML en la etiqueta \"url\" de BBCode, como se ha demostrado utilizando \"javascript\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2F2E0F-94E6-4D63-903F-0090E9D90BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC63F97-643C-43B9-83E5-E43928CB1CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43876FE9-F002-4524-B6C2-5DE4992E0A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE10B8B4-167D-430D-9C7D-6CF934F17D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4_security_patch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488811F6-7CC9-4F56-AD7C-81247B351851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD20FC3-BAE3-4623-B64D-3AA7073C404A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4409B6-9F4D-4136-BA74-43736215A122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525AD7D5-C94C-4BCD-8C03-B48E8BC91BB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.mybboard.net/showthread.php?tid=10115",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://myimei.com/security/2006-06-22/mybb-114-function_postphpxss-attack-in-url-tag.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20873",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=15",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26808",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438588/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18702",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.mybboard.net/showthread.php?tid=10115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://myimei.com/security/2006-06-22/mybb-114-function_postphpxss-attack-in-url-tag.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/26808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438588/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMyBulletinBoard, MyBulletinBoard, 1.1.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute arbitrary files via a \"file///\" URI in the sPath parameter to the Execute function."
      }, {
        "lang" : "es",
        "value" : "El control ActiveX Touch Control 1.0.0.55 permite a atacantes remotos leer y posiblemente ejecutar archivos de su elección mediante un URI \"file///\" en el parámetro sPath de la función Execute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:touch_control:activex_control:2.0.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7081402-D128-4B9F-BBAC-D2FC4808BD9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/439154/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439154/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en category.php de Diesel Joke Site permite a atacantes remotos ejecutar comandos sql de su elección mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dieselscripts:diesel_joke_site:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACB2E4A-3F27-44B9-851E-CF5B4BAD12CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0497.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20263",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/25769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438875/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18760",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0497.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/20263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/25769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/438875/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Till Gerken phpPolls 1.0.3 allows remote attackers to create a new poll via a direct request to phpPollAdmin.php3 with the poll_action parameter set to create."
      }, {
        "lang" : "es",
        "value" : "Till Gerken phpPolls 1.0.3 permite a atacantes remotos crear una nueva encuesta mediante una petición directa a phpPollAdmin.php3 con el parámetro poll_action establecido con el valor create."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:till_gerken:phppolls:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2514BBBA-3D89-4D90-82C6-EEAC9C0D5686"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439625/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439625/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Huttenlocher Webdesign hwdeGUEST 2.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the \"name input\" field in new_entry.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Huttenlocher Webdesign hwdeGUEST 2.1.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección, como se ha demostrado con el campo \"name input\" (inserción de nombre) en new_entry.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huttenlocher_webdesign:hwdeguest:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "DBC19A2D-5011-494B-B1F4-5045B11B7389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440455/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440455/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Darren's $5 Script Archive osDate 1.1.7 and earlier allows users to boost their own ratings via a txtrating parameter with a score greater than the intended maximum of 10."
      }, {
        "lang" : "es",
        "value" : "Darren's $5 Script Archive osDate 1.1.7 y anteriores permite a usuarios aumentar ilícitamente sus propias calificaciones mediante un parámetro txtrating con una puntuación mayor que el máximo pretendido de 10."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darrens_5-dollar_script_archive:osdate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.7",
            "matchCriteriaId" : "6CD67698-6969-4491-8817-84FC7720F1C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darrens_5-dollar_script_archive:osdate:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306B87FA-57F1-4E2B-A87D-D4BD4CA20C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darrens_5-dollar_script_archive:osdate:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61D1005-948D-4F09-B640-0490322712C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440490/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440592/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443198/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440490/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440592/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443198/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-21T14:03:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in showprofile.php in Darren's $5 Script Archive osDate 1.1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the onerror attribute in an HTML IMG tag with a non-existent source file in txtcomment parameter, which is used when posting a comment."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en showprofile.php de Darren's $5 Script Archive osDate 1.1.7 y versiones anteriores permite a atacantes remotos inyectar scripts web o HTML de su elección mediante el atributo onerror en una etiqueta HTML IMG con un fichero fuente no existente en el parámetro txtcomment, que se usa cuando se envía un comentario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darrens_5-dollar_script_archive:osdate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.7",
            "matchCriteriaId" : "6CD67698-6969-4491-8817-84FC7720F1C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darrens_5-dollar_script_archive:osdate:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306B87FA-57F1-4E2B-A87D-D4BD4CA20C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darrens_5-dollar_script_archive:osdate:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61D1005-948D-4F09-B640-0490322712C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0285.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440490/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440592/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19034",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0285.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440490/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440592/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/gallery_admin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types."
      }, {
        "lang" : "es",
        "value" : "admin/gallery_admin.php en planetGallery anterior a 14.07.2006 permite a atacantes remotos ejecutar código PHP de su elección a través de la actualización de archivos con una doble extensión y accedidos directamente en el directorio de imágenes, lo caul evita la validación de expresiones regulares para tipos seguros de archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:planet_concept:planetgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2006-05-22",
            "matchCriteriaId" : "3BFAC70A-B2D4-4309-9494-2C74EE7E6284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0434.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21099",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440643/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19091",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440643/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires administrative user privileges.\r\nThis vulnerability is addressed in the following product release:\r\nPlaNet Concept, planetGallery, 14.07.2006"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pass and (2) pass2 parameters in (a) add.php or the (3) id parameter in (b) members/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en Top XL 1.1  y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) pass y (2) pass2 parameters en (a) add.php o el parámetro (3) id en (b) members/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:top_xl:top_xl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "D1AD0F9B-21D2-49D9-ABCA-E0B5E7E8F884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:top_xl:top_xl:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE9507C-0F47-477A-9F03-6EADC0A0E2D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21145",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls22.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440652/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440889/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19098",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls22.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440889/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that register_globals is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) i_cat or (2) method parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en phpFaber TopSites 2.0.9 y anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) i_cat o (2) method."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfaber:topsites:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.9",
            "matchCriteriaId" : "E961E82E-6DF4-4E07-A898-003A2CEE87A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21141",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls21.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440648/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls21.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440648/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) articles.php, (2) contact.php, (3) displaypage.php, (4) faq.php, (5) mainbody.php, (6) news.php, (7) registration.php, (8) whosOnline.php, (9) components/com_calendar.php, (10) components/com_forum.php, (11) components/minibb/index.php, (12) components/minibb/bb_admin.php, (13) components/minibb/bb_plugins.php, (14) modules/mod_calendar.php, (15) modules/mod_browser_prefs.php, (16) modules/mod_counter.php, (17) modules/mod_online.php, (18) modules/mod_stats.php, (19) modules/mod_weather.php, (20) themes/bizz.php, (21) themes/default.php, (22) themes/simple.php, (23) themes/original.php, (24) themes/portal.php, (25) themes/purple.php, and other unspecified files."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en component.php en iManage CMS 4.0.12 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro absolute_path en (1) articles.php, (2) contact.php, (3) displaypage.php, (4) faq.php, (5) mainbody.php, (6) news.php, (7) registration.php, (8) whosOnline.php, (9) components/com_calendar.php, (10) components/com_forum.php, (11) components/minibb/index.php, (12) components/minibb/bb_admin.php, (13) components/minibb/bb_plugins.php, (14) modules/mod_calendar.php, (15) modules/mod_browser_prefs.php, (16) modules/mod_counter.php, (17) modules/mod_online.php, (18) modules/mod_stats.php, (19) modules/mod_weather.php, (20) themes/bizz.php, (21) themes/default.php, (22) themes/simple.php, (23) themes/original.php, (24) themes/portal.php, (25) themes/purple.php, y otros archivos no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imaginex-resource:imanage_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.12",
            "matchCriteriaId" : "8A272751-BA19-423F-8AEB-B78F17C4B24D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv40-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440642/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv40-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440642/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the logincookie[user] setting in the login cookie."
      }, {
        "lang" : "es",
        "value" : "PHP-Post 0.21 y 1.0, y posiblemente versiones anteriores, cuando auto-login está activado, permite a atacantes remotos evitar las restricciones de seguridad y obtener privilegios de administrador a través de la modificación de la configuración logincookie[user] en la cookie de login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B35654C-59D5-4A75-B528-261FC714B8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-post:php-post:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC1AB36-20D4-4CC5-BAC7-64EF750A49BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21115",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-380.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19046",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-380.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and Mambo 4.5.3+ allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en smf.php en SMF-Forum 1.3.1.3 Bridge Component (com_smf) para Joomla! y Mambo 4.5.3+ permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:smf-forum:1.3.1.3_bridge_component:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9245C2C6-FDBE-41E0-9BCD-C7F15F78C788"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.mamboserver.com/showthread.php?t=83001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21079",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.mamboserver.com/showthread.php?t=83001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/18924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in performs.php in the perForms component (com_performs) 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en performs.php en el componente perForms (com_performs) 1.0 y anteriores para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:performs_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "E09D9EF8-2CC1-42FC-A8E2-2DD0FA5FA512"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21044",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016498",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439997/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439997/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote attackers to execute arbitrary SQL commands via the CLIENT-IP HTTP header ($_SERVER['HTTP_CLIENT_IP'] variable), as utilized by index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función init en class_session.php en MyBB (también conocido como MyBulletinBoard) 1.1.5 permit a atacantes remotos ejecutar comandos SQL de su elección a través de la cabecera CLIENT-IP HTTP ($_SERVER['HTTP_CLIENT_IP'] variable), tal y como se utiliza en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EC0E67-111A-4989-A311-6B051D37CEE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/mybb_115_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440163/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2811",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/mybb_115_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440163/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en order/index.php en IDevSpot (1) PhpHostBot 1.0 y (2) AutoHost 3.0 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:autohost:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A566A14-314C-47E4-AB12-9F305591CC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:phphostbot:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8AC4B1-EAA1-4107-968B-21AE854486D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/07/phphostbot-remote-file-inclusion-vuln.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/07/phphostbot-remote-file-inclusion-vuln.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en IDevSpot PhpLinkExchange 1.0 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:phplinkexchange:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F19236F-E4B4-4230-AFE2-0564E18CC8AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pridels0.blogspot.com/2006/07/phplinkexchange-remote-file-inclusion.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21126",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2900",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pridels0.blogspot.com/2006/07/phplinkexchange-remote-file-inclusion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) \"Save As Draft\" option is used or (2) a \",\" (comma) is inside the \"phrase\" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC, and BCC fields, which allows remote attackers to obtain the list of original recipients."
      }, {
        "lang" : "es",
        "value" : "IBM Lotus Notes 6.0, 6.5, y 7.0 no maneja adecuadamente las respuestas a mensajes de correo con nombres de usuario alternativo cuando la opción(1) \"Guardar como borrador\" es utilizada o (2) una \",\" (coma) está dentro de la porción de una dirección, la cual podría hacer que el email sea envíado a usuarios que fueron borrados desde los campos To, CC y BBC, lo cual permite a un atacante remotos obtener una lista de receptores originales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E234AD1-7202-421E-82C8-880E84876021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AEB13D-C7C6-426F-8484-85EFF7245DF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21243602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21240386",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21243602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21240386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges."
      }, {
        "lang" : "es",
        "value" : "Citrix MetaFrame para XP 1.0 característica 1, excepto cuando funciona sobre Windows Server 2003, instala una llave de registro con un ACL no seguro, lo cual permite a usuarios remotos validos ganar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe:1.8:*:microsoft_nt_4.0_server_terminal_server:*:*:*:*:*",
            "matchCriteriaId" : "73DDD50B-3671-4299-84A2-C34D591BBB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe:1.8:*:microsoft_windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "1D249D93-F64E-4461-8CD4-B8B4B5163865"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:metaframe_presentation_server:3.0:*:microsoft_windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "56AD6C25-A646-4595-98DB-C5DEB1DCB024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:presentation_server:4.0:*:microsoft_windows_2000:*:*:*:*:*",
            "matchCriteriaId" : "ED0D3B9B-29A6-48C4-9D09-F4B1BCD180FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21076",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.citrix.com/article/CTX110492",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19056",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.citrix.com/article/CTX110492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) ANKET/anket.mdb, (2) HABER/keyifweb.mdb, (3) ASP/download.mdb, or (4) SAYAC/aktif.mdb in the database/A9S7G6ASD790 directory."
      }, {
        "lang" : "es",
        "value" : "Keyifweb Keyif Portal 2.0 almacena información sensible bajo la raiz web con insuficientes controles de acceso, lo cual permite a atacantes remotos descargar una base de datos a través de una respuesta directa para (1) ANKET/anket.mdb, (2) HABER/keyifweb.mdb, (3) ASP/download.mdb, o (4) SAYAC/aktif.mdb en el directorio database/A9S7G6ASD790."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keyifweb:keyif_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED4114E-787A-4FB4-9BC3-134732834A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440415/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440415/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Solaris 10 allows context-dependent attackers to cause a denial of service (panic) via unspecified vectors involving the event port API."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Solaris 10 permite a atacantes dependienetes del contexto provocar denegación de servicio (panic) a través de vectores que afectaban al evento del puerto API."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102485-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102485-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the kernel debugger (kmdb) in Sun Solaris 10, when running on x86, allows local users to cause a denial of service (system hang) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el kernel debugger (kmdb) en Sun Solaris 10, cuando funciona bajo x86, permite a usuarios locales provocar denegación de servicio (cuelgue del sistema) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21133",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102512-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102512-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors involving (1) the /net mount point and (2) the \"-hosts\" map in a mount point."
      }, {
        "lang" : "es",
        "value" : "Sun Solaris 10 permite a usuarios locales provocar denegación de servicio(panic) a través de vectores no especificados afectando al punto de montaje /net y (2) el mapa \"-host\" en un punto de montaje."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102286-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102286-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec pcAnywhere 12.5 uses weak default permissions for the \"Symantec\\pcAnywhere\\Hosts\" folder, which allows local users to gain privileges by inserting a superuser .cif (aka caller or CallerID) file into the folder, and then using a pcAnywhere client to login as a local administrator."
      }, {
        "lang" : "es",
        "value" : "Symantec pcAnywhere 12.5 utiliza unos permisos por defecto débiles para la carpeta \"Symantec\\pcAnywhere\\Hosts\", lo cual permite a un usuario local ganar privilegios a través de la insercción de un superusuario archivo .cif (también conocido como llamador o CallerID)  dentro de la carpeta, y por lo tanto utilizando un cliente pcAnywhere entrar como administrador local."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067CAB0F-D513-4A70-B6C6-06EE290A2F6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21113",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalbullets.org/?p=3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440448/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalbullets.org/?p=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440448/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif (aka caller or CallerID) file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin."
      }, {
        "lang" : "es",
        "value" : "Symantec pcAnywhere 12.5 ofusca la contraseña en un cuadro de texto del GUI con asteriscos, pero no la encripta en el fichero .cif asociado (también conocido como caller o CallerID), lo que permite a usuarios locales obtener la contraseña de la ventana utilizando herramientas como el Nirsoft Asterwin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067CAB0F-D513-4A70-B6C6-06EE290A2F6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalbullets.org/?p=3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440448/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalbullets.org/?p=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440448/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec pcAnywhere 12.5 uses weak integrity protection for .cif (aka caller or CallerID) files, which allows local users to generate a custom .cif file and modify the superuser flag."
      }, {
        "lang" : "es",
        "value" : "Symantec pcAnywhere 12.5 utiliza protección de integridad débil para los ficheros .cif (también conocido como caller o CallerID), lo cual permite a usuarios locales generar un fichero .cif personalizado y modificar la bandera de super-usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067CAB0F-D513-4A70-B6C6-06EE290A2F6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalbullets.org/?p=3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440448/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalbullets.org/?p=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440448/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread."
      }, {
        "lang" : "es",
        "value" : "kpf4ss.exe en Sunbelt Kerio Personal Firewall 4.3.x anterior a 4.3.268 no se engancha adecuadamente a la función CreateRemoteThread de la API, lo cual permite a usuarios locales provocar una denegación de servicio (caída) y evitar mecanismos de protección llamando a CreateRemoteThread."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.246",
            "matchCriteriaId" : "3C62DCE1-7D68-4467-8DD5-D90D258A70D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21060",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Kerio-Terminating-kpf4ss-exe-using-internal-runtime-error.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440112/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Kerio-Terminating-kpf4ss-exe-using-internal-runtime-error.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440112/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code via (1) a long unit name in Net::recv_add_unit,; (2) large values to Net::recv_rules, Net::recv_select_unit, Net::recv_options, and Net::recv_unit_data; and (3) a large mapdata GEODATA structure in Net::recv_map_data."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en multiplay.cpp en UFO2000 svn 1057 permite a atacantes remotos ejecutar código de su elección a través (1) una unidad de nombre largo en Net::recv_add_unit,; (2) valores grandes en Net::recv_rules, Net::recv_select_unit, Net::recv_options, y Net::recv_unit_data; y (3) una gran mapa de datos de la estructura GEODATA en Net::recv_map_data."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufo2000:ufo2000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "svn_1057",
            "matchCriteriaId" : "DC663208-48C7-4FCE-BEFE-B473C26F9904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/multiplay.cpp?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_transport.cpp?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/multiplay.cpp?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_transport.cpp?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple array index errors in the (1) recv_rules, (2) recv_select_unit, (3) recv_options, and (4) recv_unit_data functions in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code and cause a denial of service (opponent crash) via certain packet data that specifies an out-of-bounds index."
      }, {
        "lang" : "es",
        "value" : "Múltiples errores de índice de array en las funciones (1) recv_rules, (2) recv_select_unit, (3) recv_options, y (4) recv_unit_data en multiplay.cpp en UFO2000 svn 1057 permite a atacantes remotos ejecutar código de su elección y provocar denegación de servicio (caida de oponente) a través de ciertos paquetes de datos que especifican un indice fuera del limite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufo2000:ufo2000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "svn_1057",
            "matchCriteriaId" : "DC663208-48C7-4FCE-BEFE-B473C26F9904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/multiplay.cpp?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/multiplay.cpp?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a keysize or valsize that is inconsistent with the packet size, which leads to a buffer over-read."
      }, {
        "lang" : "es",
        "value" : "La función decode_stringmap en server_transport.cpp para UFO2000 svn 1057 permite a atacantes remotos provocar una denegación de servicio (terminación de demonio) mediante un tamaño de clave (keysize) o un tamaña de valor (valsize) que es inconsistente con el tamaño del paquete, lo cual conduce a una lectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufo2000:ufo2000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "svn_1057",
            "matchCriteriaId" : "DC663208-48C7-4FCE-BEFE-B473C26F9904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_transport.cpp?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_transport.cpp?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a large keysize or valsize, which causes a crash when the resize function cannot allocate sufficient memory."
      }, {
        "lang" : "es",
        "value" : "La función decode_stringmap en server_transport.cpp para UFO2000 svn 1057 permite a atacantes remotos provocar una denegación de servicio (finalización del demonio) mediante valores keysize o valsize grandes, lo cual provoca una caída cuando la función resize no puede reservar suficiente memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufo2000:ufo2000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "svn_1057",
            "matchCriteriaId" : "DC663208-48C7-4FCE-BEFE-B473C26F9904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_transport.cpp?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_transport.cpp?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ServerClientUfo::recv_packet in server_protocol.cpp in UFO2000 svn 1057 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving the packet.c_str function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ServerClientUfo::recv_packet en server_protocol.cpp in UFO2000 svn 1057 permite a atacantes remotos ejecutar comandos SQl de su elección a través de vectores no especificados afectando a la función packet.c_str."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ufo2000:ufo2000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "svn_1057",
            "matchCriteriaId" : "DC663208-48C7-4FCE-BEFE-B473C26F9904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_protocol.cpp?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/ufo2ko-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewcvs.cgi/ufo2000/trunk/src/server_protocol.cpp?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200702-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SD_DIR parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en constants.php de SiteDepth CMS 3.01 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro SD_DIR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitedepth:sitedepth_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.01",
            "matchCriteriaId" : "F06E61F5-B836-4C75-8323-1978C3E57E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls20.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440647/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls20.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440647/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field.  NOTE: the vendor has disputed this issue, stating \"if someone were to type in any sql injection code, that code would never be queried."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inyección SQL en Amazing Flash AFCommerce Shopping Cart permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo de búsqueda. NOTA: el fabricanet ha impugnado este problema, afirmando \"si alguien introdujese un código de inyección sql, ese código nunca sería  una consulta\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazing_flash_commerce:afcommerce_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D54D37-E09A-4E6A-820C-2F41EED18686"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440589/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440848/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440589/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440848/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DeluxeBB before 1.08 allow remote attackers to inject arbitrary web script or HTML via the (1) membercookie cookie in header.php and the (2) redirect parameter in misc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en DeluxeBB anterior a 1.08 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la cookie (1) membercookie en header.php y el parámetro (2) redirect en misc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.07",
            "matchCriteriaId" : "6AEFACE5-6714-4ACF-B8D9-6F8EF554C236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21116",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the \"space\" user, post as the guest user, and block the ability of an administrator to ban the \"space\" user."
      }, {
        "lang" : "es",
        "value" : "DeluxeBB 1.07 y anteriores no maneja adecuadamente un nombre de usuario compuesto por un solo carácter de espacio, lo cual permite a usuarios autenticados remotamente acceder al sistema como el usuario \"espacio\", enviar mensajes como el usuario invitado, y bloquear la capacidad de un administrador de expulsar al usuario \"espacio\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.07",
            "matchCriteriaId" : "6AEFACE5-6714-4ACF-B8D9-6F8EF554C236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en DeluxeBB 1.07 y anteriores permite a atacantes remotos evitar el control de autenticación, falsificar usuarios, y modificar la configuración mediante las cookies (1) memberpw y (2) membercookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV, and (4) _SERVER variables via the _COOKIE (aka COOKIE) variable, which can overwrite the other variables during an extract function call, probably leading to multiple security vulnerabilities, aka \"pollution of the global namespace.\""
      }, {
        "lang" : "es",
        "value" : "DeluxeBB 1.07 y anteriores permite a atacantes remotos sobrescribir las variables (1) _GET, (2) _POST, (3) _ENV, y (4) _SERVER mediante la variable _COOKIE (también conocida como COOKIE), la cual puede sobrescribir las otras variables durante una llamada a la función extract, probablemente llevando a múltiples vulnerabilidades de seguridad, también conocida como \"contaminación del espacio de nombres global\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase \"union select\" or possibly other statements that do not match the uppercase \"UNION SELECT.\""
      }, {
        "lang" : "es",
        "value" : "DeluxeBB 1.07 y versiones anteriores permite a atacantes remotos evitar mecanismos de protección de inyección de SQL mediante la variable login y otras variables concretas, usando en mínusculas \"union select\" ó posiblemente otras consultas que no coinciden con \"UNION SELECT\" en mayúsculas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21116",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440435/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-24T12:19:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the \"new review\" text box."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Amazing Flash AFCommerce Shopping Cart permite a atacantes remotos inyectar scripts web o HTML de su elección mediante la caja de texto \"nueva revisión\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazing_flash_commerce:afcommerce_shopping_cart:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E01A42-340F-4429-8560-CE9E4E8D810D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440589/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440848/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440589/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440848/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese Tracker 0.9.9 and earlier allows user-assisted attackers to execute arbitrary code via a crafted file with a large amount of extra data."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función Loader_XM::load_instrument_internal en loader_xm.cpp para Cheese Tracker 0.9.9 y anteriores permiet a atacantes con la intervención del usuario ejecutar código de su elección a través de ficheros manipulados con una gran cantidad extra de datos.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cheese_tracker:cheese_tracker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.9",
            "matchCriteriaId" : "13BB2E7C-2E59-4299-89FF-1A44DD81C06F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/cheesebof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440962/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/cheesebof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440962/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup."
      }, {
        "lang" : "es",
        "value" : "heartbeat.c de heartbeat before 2.0.6 indica permisos no seguros en una llamada shmget para memoria compartida, lo cual permite a usuarios locales provocar una denegación de servicio no especificada mediante vectores desconocidos, posiblemente durante una ventana de rápida desaparición en el arranque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linux-ha:heartbeat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "8F2466C1-3309-4E49-B9BC-2D9E2C1FAC4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21162",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21231",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21240",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21521",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21629",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mail-archive.com/linux-ha-cvs%40lists.linux-ha.org/msg00753.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-326-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2994",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/linux-ha-cvs%40lists.linux-ha.org/msg00753.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-326-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3816",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file (krbookmarks.xml), which allows attackers to steal passwords by obtaining the file."
      }, {
        "lang" : "es",
        "value" : "Krusader 1.50-beta1 hasta 1.70.0 almacena las contraseñas para las conexiones remotas en texto claro en el archivo de marcadores (krbookmarks.xml), lo cual permite a atacantes remotos robar contraseñas obteniendo el archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krusader:krusader:1.50_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97117E1-1054-407E-9891-28078FB7EFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krusader:krusader:1.60.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6FF252-38EB-49B5-90E2-66C163A58829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krusader:krusader:1.70.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8313DDBC-1ED0-4897-B7B8-BEBDF732E350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krusader:krusader:1.70.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09774EF-A440-4C10-BDCD-467475AAB872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://groups.google.com/group/krusader-news/browse_thread/thread/ec719041ed4a1a14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://krusader.sourceforge.net/phpBB/viewtopic.php?p=7965",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://groups.google.com/group/krusader-news/browse_thread/thread/ec719041ed4a1a14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://krusader.sourceforge.net/phpBB/viewtopic.php?p=7965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el loudblog/index.php del Loudblog en versiones anteriores a la 0.5 permite a atacantes remotos la inyección de secuencias de comandos web o HTML de su elección mediante el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17E5977-B8FF-4D16-9C97-AA1AC3ED4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC60116B-ECDE-425B-8164-B6C6AE4CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C80931-083A-4F93-A69C-CCE0726FC3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CBFB6-DB9C-4DA2-AFD9-DCCA48AC6305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D065C6-34FF-47E5-AF1E-E342D29EB188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=756",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21098",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securesky-tech.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19082",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securesky-tech.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php and (2) year, (3) month, and (4) day parameter in (b) registration.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en ATutor 1.5.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) lang en (1) lang parameter in (a) index_list.php y los parámetros (2) year, (3) month, y (4) day en (b) registration.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1909A2-45D7-4388-9BB6-33BDEF52A0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAE5D26-1CD1-43F4-80AC-08B7588E3FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160F70B7-4686-47EF-8510-1BDBC89FB280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BDCA86-C4D0-49B1-A8FE-E81C9B29B04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB903C6-ECB0-4203-BCC2-533CB404B64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD9CAD8-8ADA-459C-9DF8-C161EE31BF04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14473CD-79D7-45FF-8BFD-BA61704CB003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5_rc_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6816BB3F-3D13-486B-BBAE-EBF6BB0AE5BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=28187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439873/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=28187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439873/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nATutor, ATutor, 1.5.3_pl1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en GeodesicSolutions GeoAuctions Enterprise 1.0.6  permitea a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro d."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geodesicsolutions:geoauctions_enterprise:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC6A5A5-322F-4556-A3EF-D7AD0CB8F526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0607-exploits/geoauctionsSQL.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19093",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.packetstormsecurity.org/0607-exploits/geoauctionsSQL.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the 'accumulative feedback' feature is turned on."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic 2.0.3 allows remote attackers to execute arbitrary SQL commands via the b parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en  GeodesicSolutions (1) GeoAuctions Premier 2.0.3 y (2) GeoClassifieds Basic 2.0.3  permite a atacantes remotos ejecutar comandos SQL a través del parámetro b."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geodesicsolutions:geoauctions_premier:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF9F475-E7FA-4975-964D-460D6A73F97F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geodesicsolutions:geoclassifieds_basic:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79579693-EEDF-4606-9313-90A2DA73EC6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/show/osvdb/106367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/126329/GeoCore-MAX-DB-7.3.3-Blind-SQL-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/58308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.exploit-db.com/exploits/33075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.packetstormsecurity.org/0607-exploits/geoauctionsSQL.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19093",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/67078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/show/osvdb/106367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/126329/GeoCore-MAX-DB-7.3.3-Blind-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/58308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.exploit-db.com/exploits/33075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.packetstormsecurity.org/0607-exploits/geoauctionsSQL.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/67078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the 'accumulative feedback' feature is turned on."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function.  NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow."
      }, {
        "lang" : "es",
        "value" : "systeminfo.c para Sun Solaris permite a usuarios locales leer memoria del núcleo mediante un valor 0 para el argumento de número de variables en la llamada al sistema sysinfo, lo cual provoca que se utilice un argumento -1 en la función copyout. NOTA: este problema ha sido referido como un desbordamiento superior de entero, pero probablemente se parece más a un error de presencia de signo o un desbordamiento inferior de entero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102343-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440849/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440986/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19104",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102343-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440849/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440986/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nSun, Solaris, 10_x86 patch 118833-09 or later\r\nSun, Solaris, 10 patch 118855-06 or later\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IPv4 implementation in Sun Solaris 10 before 20060721 allows local users to select routes that differ from the routing table, possibly facilitating firewall bypass or unauthorized network communication."
      }, {
        "lang" : "es",
        "value" : "La implementación IPv4 en Sun Solaris 10 anterior a 21/07/2006 permite a usuarios locales elegir rutas que difieren de la tabla de rutas, posiblemente facilitando el rodeo de cortafuegos o la comunicación de red no autorizada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102509-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19108",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102509-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user_login, (2) full_name, and (3) URL parameters in register.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (4) cat_list and (5) key parameters in a certain portion of the admin interface."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Kailash Nadh boastMachine (anteriormente conocido como bMachine) 3.1 y versiones anteriores permite a atacantes remotos inyectar scripts web o HTML de su elección a través del parámetro (1) user_login, (2) full_name, y (3) URL, en register.php; y permite a administradores remotos autenticados inyectar scripts web o HTML de su elección a través del parámetro (4) cat_list y (5) key, e porciones concretas de la interfaz admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19759CD-3F3D-4A96-8DD0-828BA628427D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD75997-6BFC-4161-A12A-8AB03FBDB562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC1D5AE-1D9C-416A-8A34-61931C810478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3FA6A-5221-4607-961F-075A78EC6BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621CCF40-F2DD-4F07-9F8B-37053AB04293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the blog parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en bmc/Inc/core/admin/search.inc.php en Kailash Nadh boastMachine (formalmente bMachine) 3.1 y anteriores permite a administradores remotos validados ejecutar comandos SQL a través del parámetro blog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19759CD-3F3D-4A96-8DD0-828BA628427D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD75997-6BFC-4161-A12A-8AB03FBDB562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC1D5AE-1D9C-416A-8A34-61931C810478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3FA6A-5221-4607-961F-075A78EC6BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621CCF40-F2DD-4F07-9F8B-37053AB04293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, \"UNION,\" and \"SELECT,\" which are not filtered by the product, which only checks for \"insert,\" \"delete,\" \"update,\" and \"replace.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lista negra incompleta en Kailash Nadh boastMachine (formerly bMachine) 3.1 y anteriores permite a administradores remotos validados evitar los mecanismos de protección de inyección SQL con el uso de comas, caractéres de cuota, los caracteres almohadillas (#), \"UNION,\" y \"SELECT,\" los cuales no son filtrados por el producto, que solo valida para \"insert,\" \"delete,\" \"update,\" y\"replace.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19759CD-3F3D-4A96-8DD0-828BA628427D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD75997-6BFC-4161-A12A-8AB03FBDB562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC1D5AE-1D9C-416A-8A34-61931C810478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3FA6A-5221-4607-961F-075A78EC6BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621CCF40-F2DD-4F07-9F8B-37053AB04293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2849",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote attackers to perform unauthorized actions as an administrator and delete arbitrary user accounts via a delete_user action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en bmc/admin.php en Kailash Nadh boastMachine (formalmente bMachine) 3.1 y anteriores permite a atacantes remotos realizar acciones no autorizadas como se demostró con un administrador y borrar cuentas de usuario de su elección a través de la acción delete_user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19759CD-3F3D-4A96-8DD0-828BA628427D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD75997-6BFC-4161-A12A-8AB03FBDB562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC1D5AE-1D9C-416A-8A34-61931C810478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3FA6A-5221-4607-961F-075A78EC6BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621CCF40-F2DD-4F07-9F8B-37053AB04293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to upload files with arbitrary extensions to the bmc/Inc/Lang directory.  NOTE: because the uploaded files cannot be accessed through HTTP, this issue is a vulnerability only if there is a likely usage pattern in which the files would be opened or executed by local users, e.g., malware files with names that entice local users to open the files."
      }, {
        "lang" : "es",
        "value" : "La selección de Idioma en la interfaz admin en Kailash Nadh boastMachine (formalmente bMachine) 3.1 y anteriores permite a administradores remotos validados actualizar archivos con extensiones de su elección en el directorio bmc/Inc/Lang. NOTA: Dado que la actualización de archivos no puede ser accedida desde HTTP, este asunto es una vulnerabilidad solo si hay un patrón probable de uso en el cual los archivos fueran abiertos o ejecutados por los usuarios locales, e.g., archivos de malware con nombres que tientan a usuarios locales a abrir esos archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19759CD-3F3D-4A96-8DD0-828BA628427D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD75997-6BFC-4161-A12A-8AB03FBDB562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC1D5AE-1D9C-416A-8A34-61931C810478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:2.9b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3FA6A-5221-4607-961F-075A78EC6BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "621CCF40-F2DD-4F07-9F8B-37053AB04293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file."
      }, {
        "lang" : "es",
        "value" : "La selección de backup en Kailash Nadh boastMachine (formalmente bMachine) 3.1 y anteriores utiliza nombres de archivo predecibles para backups de bases de datos y almancena nombres de archivo bajo la raiz web con insuficientes controles de acceso, lo caul permite a atacantes remotos obtener información sensible a través de la descarga del fichero de backup."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kailash_nadh:boastmachine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "E07E0861-8D6F-4771-8260-E6490570B0C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.acid-root.new.fr/advisories/boastmachine.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440306/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Gerrit van Aaken Loudblog 0.5 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17E5977-B8FF-4D16-9C97-AA1AC3ED4C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC60116B-ECDE-425B-8164-B6C6AE4CC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75C80931-083A-4F93-A69C-CCE0726FC3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7CBFB6-DB9C-4DA2-AFD9-DCCA48AC6305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDD94A5-01FB-4A61-BAA9-7875D5B18867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D065C6-34FF-47E5-AF1E-E342D29EB188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F62AC146-CD00-461E-94D5-B83A2F091414"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC22B80-2D74-4799-85D9-11BC9F1B6229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gerrit_van_aaken:loudblog:0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CA4C3A-B15E-4C3A-A59C-19C575FCD081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=762",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/loudblog_05_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440763/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://loudblog.de/forum/viewtopic.php?id=770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/loudblog_05_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440763/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID."
      }, {
        "lang" : "es",
        "value" : "index.php en EJ3 TOPo 2.2.178 permite a atacantes remotos sobrescribir entradas existentes y establecer nuevas contraseñas para las entradas sobrescritas mediante una URL con un ID de entrada modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2.178:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4C4E28-C301-427D-9E29-69A85EEC3ED6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439890/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439890/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors."
      }, {
        "lang" : "es",
        "value" : "EJ3 TOPo 2.2.178 incluye la contraseña en texto claro en el campo ID en index.php, lo cual permite a atacantes locales o remotos dependientes del contexto obtener entradas de contraseñas mediante ficheros de traza, referencias, u otros vectores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ej3:topo:2.2.178:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4C4E28-C301-427D-9E29-69A85EEC3ED6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439890/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/439890/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do."
      }, {
        "lang" : "es",
        "value" : "Apache Tomcat 5 anterior a 5.5.17 permite a atacantes remotos listar directorios a través de un punto y coma (;) precedido de un nombre de archivo con una extensión mapeada, como se demostró con las URLs finalizadas con /;index.jsp y /;help.do."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03C08A88-9377-4B32-8173-EE2D121B06D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56581E2-9ECD-426A-96D8-A9D958900AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0C01D5-773F-469C-9E69-170C2844AAA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "357651FD-392E-4775-BF20-37A23B3ABAE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9276A093-9C98-4617-9941-2276995F5848"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0467.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/30899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/30908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/37297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sec-consult.com/289.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/468048/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500396/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500412/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1979/references",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0467.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/37297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tomcat.apache.org/security-5.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0261.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sec-consult.com/289.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/468048/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500396/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/500412/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/507729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1979/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/34183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue is not a security issue in Tomcat itself, but is caused when directory listings are enabled.\n\nDetails on how to disable directory listings are available at: http://tomcat.apache.org/faq/misc.html#listing",
        "lastModified" : "2006-08-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php de UNIDOmedia Chameleon LE 1.203 y anteriores, y posiblemente Chameleon PRO, permite a atacantes remotos leer archivos de su elección mediante el parámetro rmid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unidomedia:chameleon_le:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.203",
            "matchCriteriaId" : "DD8B03A0-0FD2-4117-942A-1D2DAB3F3DCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440765/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440765/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T13:22:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout."
      }, {
        "lang" : "es",
        "value" : "delcookie.php de Professional Home Page Tools Guestbook cambia la fecha de caducidad de una cookie en lugar de borrar el valor de la cookie, lo cual facilita a los atacantes robar la cookie y obtener el resumen (hash) de la contraseña de administrador después de la desconexión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:professional_home_page_tools:professional_home_page_tools_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82226BC6-89FE-4E31-BAE8-AF3F7E5E98BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21102",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T19:17:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with \"../\" sequences."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en FastJar 0.93, como se usa en Gnu GCC 4.1.1 y anteriores, y 3.4.6 y anteriores, permite a atacantes remotos con la intervención del usuario sobrescribir archivos de su elección mediante un archivo .jar que contenga nombres de archivo con secuencias \"../\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastjar:fastjar:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B060188-1E84-45F3-95C4-B204970D2F1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.debian.org/debian-gcc/2006/05/msg00317.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0473.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/17839",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21100",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200711-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-189.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/21337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0220.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/15669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1017987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.debian.org/debian-gcc/2006/05/msg00317.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0473.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/17839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200711-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-189.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/21337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0220.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/15669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1017987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2005/2686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198912\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n",
        "lastModified" : "2006-09-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3119",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-assisted attackers to bypass the filter and execute malicious Postscript commands."
      }, {
        "lang" : "es",
        "value" : "El visor Postscript/PDF fbgs framebuffer de fbi anterior a 2.01 tiene una errata que impide a un filtro actuar correctamente, lo cual permite a usuarios autenticados remotamente evitar el rilgro y ejecutar comandos Postscript maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fbi:fbi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00",
            "matchCriteriaId" : "995CEF2C-DD55-44DC-9BB7-F150CB376720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21169",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21191",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21599",
        "source" : "security@debian.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-22.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1124",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19131",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2982",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28038",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScarab is not able to access the URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebScarab anterior a 20060718-1904, cuando se usa con Microsoft Internet Explorer 6 SP2 o Konqueror 3.5.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del URL, que no es saneado antes de ser devuelto en un mensaje de error cuando WebScarab no es capaz de acceder al URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owasp:webscarab:2006-06-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDBABF39-83A9-4013-AF9A-47D77863E609"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047995.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0012/webscarabxss/0012.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21114",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440441/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047995.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0012/webscarabxss/0012.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440441/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HTML via an HTML message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el Zoho Virtual Office 3.2 Build 3210 permite a atacantes remotos  ejecutar secuencias de comandos web o HTML de su elección mediante un mensaje HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adventnet:zoho_virtual_office:3.2_build_3210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3F2D75-8CA4-4A2F-A3D8-304966640621"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21085",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440417/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19016",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440417/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en com_calendar.php en Calendar Mambo Module 1.5.7 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_calendar:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "642EA5EE-CD20-4659-A52D-6CB336039ED8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440407/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19027",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440407/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Quick 'n Easy FTP Server 3.0 allows remote authenticated users to execute arbitrary commands via a long argument to the LIST command, a different issue than CVE-2006-2027."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Quick'n Easy FTP Server 3.0 permite a usuarios remotos validados ejecutar comandos de su elección a través de una argumento a el comando LIST, un asunto diferente que CVE-2006-2027."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pablo_software_solutions:quick_n_easy_ftp_server:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC56BB9-BFD5-4C9D-96B6-DB95F3D5F92B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21127",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/exploits/5WP0C2AJ5W.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19067",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2875",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/exploits/5WP0C2AJ5W.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en lzh.fmt en WinRAR 3.00 hasta 3.60 beta 6 permite a atacantes remotos ejecutar código de su elección a través de un nombre de archivo en un archivo LHA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BDA79B-B1CC-479C-A1DA-41DDDE098EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16A1E0B7-020F-4110-9603-58CA8CEB7581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE627C32-9F4B-4D36-AC4B-5D01A47BFD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3366C2D1-F30A-413B-94A2-7DBDACC083EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8585089C-A6B5-4BFE-BEA3-133B94F24F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1011521-AEF2-40EB-B671-66B20FF01CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73F9019-EA47-4962-B080-C65ED42000F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9843D850-DC4C-49D5-AAEB-EF75FB54F08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9B3100-2223-4201-AE29-B4A4EAFF2595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B556-A1B4-4AEF-8223-5ED44819515D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89BC32A-6D3B-4B83-BD49-856233EEF51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611BDE-8CB6-4FCE-BB12-D16BF60BCE64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.60_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "769CCD65-7409-4685-A228-AE69BEBA5795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.60_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2229C927-EB0A-4EE4-95FB-7F7EEAA0E5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.60_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D721A91B-17D8-4AAF-AC2E-1D9ABEBC39B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.60_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F097ED7F-E004-4163-AE7D-0EA89517709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.60_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C152F70-47A9-466F-8299-4A9C36540A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.60_beta6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1860DC9-69C8-4464-A15F-1BF38A2845A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hustlelabs.com/advisories/04072006_rarlabs.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21080",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rarlabs.com/rarnew.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hustlelabs.com/advisories/04072006_rarlabs.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.rarlabs.com/rarnew.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en extadminmenus.class.php de MultiBanners 1.0.1 para Mambo permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_multibanners:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B397CC4-6B3F-40BA-A44F-C67ABFA4E215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21168",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440881/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440881/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.php, (5) newtask.php, and (6) rss.php, in MoSpray (aka com_mospray) 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en (1) admin.php, y posiblemente (2) details.php, (3) modify.php, (4) newgroup.php, (5) newtask.php, y (6) rss.php, en MoSpray (también conocido como com_mospray) 1.8 RC1 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro basedir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canebluem:mospray:1.8_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C162B7-2A68-456F-89B4-9A20727D7347"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-14-mospray-basedir.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21166",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440939/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2932",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-14-mospray-basedir.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440939/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CGI wrapper for IP Calculator (IPCalc) 0.40 allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI environment variable), which is used in the actionurl variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en CGI wrapper para IP Calculator (IPCalc) 0.40 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la URI (variable de entorno REQUEST_URI), el cual es utilizado en la variable actionurl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krischan_jodies:ip_calculator:0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE08A35-1100-4B10-A440-C17D72F7D6F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0487.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/att-0487/NDSA20060705.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21151",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440860/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441304/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0487.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/att-0487/NDSA20060705.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440860/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441304/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code via a (1) long message handled by the recvTextMessage function in multiplay.c or a (2) long filename handled by NETrecvFile function in netplay/netplay.c."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Warzone 2100 y Warzone Resurrection 2.0.3 y anteriores permiten a atacantes remotos ejecutar código de su elección a través de un mensaje (1) long manejado por la función recvTextMessage en multiplay.c o un (2) manejador de nombre de fichero por la función NETrecvFile en netplay/netplay.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pumpkin_studios:warzone:2100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FA76C5-2A9C-4667-A806-0AAC82B346B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pumpkin_studios:warzone_resurrection:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49722924-F42D-458B-93FC-FA09E824B9F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/warzonebof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/warzonebof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old_settings.php exists, allows remote attackers to execute arbitrary PHP code via a URL in the RootDirectory parameter.  NOTE: this issue has been disputed by a third party who states that the RootDirectory parameter is initialized before being used, for version 1.0.  CVE analysis concurs with the dispute, but it is unclear whether older versions are affected"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en upgrader.php de Vanilla CMS 1.0.1 y anteriores, cuando existe /conf/old_settings.php, permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro RootDirectory. NOTA: esta vulnerabilidad ha sido impugnada por una tercera parte que afirma que el parámetro RootDirectory se inicializa antes de ser utilizado, para la versión 1.0. El análisis de CVE coincide con la impugnación, pero no está claro si las versiones anteriores están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "AC4B0CBC-CFD0-406C-839B-59989734A693"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-July/000937.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-July/000944.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440938/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442450/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19127",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-July/000937.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-July/000944.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442450/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the old_prefix parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en upgradev1.php en X7 Chat 2.0.4 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro old_prefix."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CDF79E-3088-4115-9FF8-103CD3A5AB39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0B3DAA-5189-4604-9CBE-E0FE6C751513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x7_group:x7_chat:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C1C061-D93F-4E6E-9BDD-9376604F5ABE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19123",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-25T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the (1) name or (2) comment (\"text\") fields."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Micro GuestBook permite a atacantes remotos ejecutar comandos sql de su elección mediante los campos (\"de texto\") (1) name o (2) comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phptoys:micro_guestbook:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC05E77-C139-45E6-9AA5-575F1D58904F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://it.security.netsons.org/exploit/MicroGuestBook.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440855/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://it.security.netsons.org/exploit/MicroGuestBook.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440855/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-26T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to \"force the device into layer 2 fallback (L2FB)\", causing a denial of service (page fault), via a malformed packet."
      }, {
        "lang" : "es",
        "value" : "TippingPoint IPS bajo TippingPoint Operating System (TOS) anterior a 2.2.4.6519 permite a atacantes remotos \"forzar al dispositivo dentro de (L2FB) \" (layer 2 fallback), provocando una denegación de servicio (fallo de pagina), a través de paquetes malformados.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:3com:tippingpoint_ips_tos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3.6514",
            "matchCriteriaId" : "225C0A41-4A74-4246-A752-73B580F8EF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.3com.com/securityalert/alerts/3COM-06-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440944/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.3com.com/securityalert/alerts/3COM-06-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440944/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3633",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed."
      }, {
        "lang" : "es",
        "value" : "OSSP shiela 1.1.5 y anteriores permite a usuarios autenticados remotamente ejecutar comandos de su elección en el servidor CVS mediante meta-caracteres de línea de comandos en un nombre de archivo que es enviado (commited)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.5",
            "matchCriteriaId" : "BB25CF9F-B80B-4ED1-A412-DB9CEC9702A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4ADD90-131F-4741-A844-3B2174BE70FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8BD603-A42B-4256-90DA-57AEB6C9E50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A865B5B-747E-4291-A04B-BD7D62000971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31C1B50-381A-4821-B392-0DA9FA61A69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E76393-336A-4FF7-BC73-6B580B619C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782A6EF6-2997-45A7-BD58-159124FA2A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A93BF8B-61D2-4BC7-886A-1CBCDCFEA03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83BDB983-518D-4633-AADA-3950A89D2CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FBB3AE-46D7-4799-BD83-141B142F3642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA3FC26-F2A4-4C4F-B582-680A22084DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC9D8CF-3E8F-463D-963E-6BAE419B8E39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC369D29-3A18-4C10-A73B-A264383F9EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossp:shiela:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40268639-EB96-44F8-A76B-10998992E58F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21209",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.014-shiela.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19199",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sourcefire.com/services/advisories/sa072506.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2986",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27978",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.014-shiela.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sourcefire.com/services/advisories/sa072506.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with \"TYPEOF\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección en eval  (evaluación directa de código dinámico) en la secuencia de comandos de configuración en TWiki 4.0.0 hasta 4.0.4 permite a atacantes remotos ejecutar código Perl de su elección mediante una petición HTTP POST que contiene un parámetro nombre (name) que empieza por \"TYPEOF\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E0A8F3-02EE-4A6D-BAAC-1D52DF063197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F893E121-82FA-41C8-9BA4-606E6DA01408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620356EA-F106-41DF-AADA-C1EF5A5A0829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979D8BC8-0032-496F-9503-F3BBBC8FA7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0804FF93-6554-4F56-9974-017198ED5F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertCmdExecWithConfigure",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=27556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlertCmdExecWithConfigure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=27556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and possibly other products, allow remote attackers to execute arbitrary code via long (1) DELTAINTERVAL, (2) LOGFOLDER, (3) DELETELOGS, (4) FWASERVER, (5) SYSLOGPUBLICIP, (6) GETFWAIMPORTLOG, (7) GETFWADELTA, (8) DELETERDEPDEVICE, (9) COMPRESSRAWLOGFILE, (10) GETSYSLOGFIREWALLS, (11) ADDPOLICY, and (12) EDITPOLICY commands to the Syslog daemon (syslogserver.exe); (13) GUIADDDEVICE, (14) ADDDEVICE, and (15) DELETEDEVICE commands to the Topology server (Topology.exe); the (15) LICMGR_ADDLICENSE command to the License Manager (EnterpriseSecurityAnalyzer.exe); the (16) TRACE and (17) QUERYMONITOR commands to the Monitoring agent (Monitoring.exe); and possibly other vectors related to the Syslog daemon (syslogserver.exe)."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en pila en eIQnetworks Enterprise Security Analyzer (ESA) anterior a 2.5.0, como se utiliza en productos que incluyen (a) SideWinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, y posiblemente otros productos, permiten a atacantes remotos ejecutar código de su elección mediante comandos largos (1) DELTAINTERVAL, (2) LOGFOLDER, (3) DELETELOGS, (4) FWASERVER, (5) SYSLOGPUBLICIP, (6) GETFWAIMPORTLOG, (7) GETFWADELTA, (8) DELETERDEPDEVICE, (9) COMPRESSRAWLOGFILE, (10) GETSYSLOGFIREWALLS, (11) ADDPOLICY, y (12) EDITPOLICY para el demonio Syslog (syslogserver.exe); comandos (13)GUIADDDEVICE, (14)ADDDEVICE, Y (15) DELETEDEVICE para el servidor de Topología (Topology server, topology.exe); el comando (15) LICMGR_ADDLICENSE para el Administrador de Licencias (EnterpriseSecurityAnalyzer.exe); (16) TRACE y (17) comandos QUERYMONITOR del agente Monitoring (Monitoring.exe); y posiblemente otros vectores relacionados con el demonio Syslog (syslogserver.exe)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eiqnetworks:enterprise_security_analyzer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "EC115BE1-FDDA-4681-BCEB-B48DFF4CDCA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archive.cert.uni-stuttgart.de/bugtraq/2006/08/msg00152.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21211",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21213",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21214",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21215",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21218",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eiqnetworks.com/products/enterprisesecurity/EnterpriseSecurityAnalyzer/ESA_2.5.0_Release_Notes.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/513068",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441195/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441197/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441198/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441200/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-03.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-04.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-07.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3007",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3008",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3009",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3010",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-023.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archive.cert.uni-stuttgart.de/bugtraq/2006/08/msg00152.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eiqnetworks.com/products/enterprisesecurity/EnterpriseSecurityAnalyzer/ESA_2.5.0_Release_Notes.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/513068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441195/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441197/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441198/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441200/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql."
      }, {
        "lang" : "es",
        "value" : "Opsware Network Automation System (NAS) 6.0 instala /etc/init.d/mysql con permisos inseguros, lo cual permite a usuarios locales leer la contraseña de root para la base de datos MySQL MAX u obtener privilegios mediante la modificación de /etc/init.d/mysql."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opsware:network_automation_system:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2378CD-FC10-4799-9E08-A64D9C58683F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441024/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441296/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444223/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441024/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444223/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función loadChunk    en loaders/load_gt2.c en libmikmod de Mikmod Sound System 3.2.2 pemite a atacantes remotos provocar una denegación de servicio mediante un fichero de módulo GRAOUMF TRACKER (GT2) con un valor grande (0xffffffff) de longitud de comentario en un pedazo XCOM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85890D01-923A-48A3-A0ED-61C68EBC3B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6726186-70B0-497A-93FA-CED6A6BFEF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E045CD1-4342-4EC6-A9BC-81160F71F4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E29D51-7EC4-49AB-9663-1DE0791E4A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E6DA86-55B8-475F-93DC-B191BD2C0ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C46A1FE-DE05-4C29-AE38-52431D85DD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE1B84B-9D48-4AFA-B586-BAC4C54B5B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49F98BB-8909-404D-B8FC-5F9177958691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6D083B-7E2B-424D-A762-8461D265B2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miod_vallat:mikmod:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B60348-03A0-42E8-ABA5-8A4F38334FEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.org/poc/lmmgt2ho.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21196",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.org/poc/lmmgt2ho.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue does not affect versions of Mikmod 3.2.0-beta2 or prior.  Versions of Mikmod distributed with Red Hat Enterprise Linux 2.1, 3, and 4 are based on version 3.1.11 and are therefore not vulnerable to this issue.",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool.  NOTE: the researcher reports that the Microsoft Security Response Center has stated \"Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADO ** Microsoft Windows NT 4.0, Windows 2000, Windows XP, y Windows Small Business Server 2003 permite a atacantes remotos provocar denegación de servicio (manipular la pila IP) a través de un flujo continuo de paquetes sobre el puerto TCP 135 que tiene una cabecera de validación (checksum) TCP erronea y números aleatorios en ciertos campos de cabeceras TCP, como se demostró con Achilles Windows Attack Tool. NOTA: el investigador indicaque Microsoft Security Response Center ha indicado que \"Nuestra investigación que ha incluido la revisión de código, la revisión del TCPDump, e intentó reproducir el asunto en múltiples instalaciones frescas de varios sistemas operativos de Windows dieron como resultado la no confirmación\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D8321-EB2F-4626-A16B-F3C2B771EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3538DA2-B040-426D-9ADC-7C5BE9C2D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F633513-6E9A-4F2D-964A-6AFDE5307AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED8947F-2490-41CA-A7B3-2C93D69C3F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3EB90-92C9-4B69-B58C-087D382DC579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3AF27C8-C2FA-477D-8332-B96277530B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4E9E190B-A109-4177-A5B5-7BD32573762E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*",
            "matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*",
            "matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI.  NOTE: the id parameter in index.php, and the type and show parameters in a top action, are already covered by CVE-2006-1349; and the term parameter in a search action is already covered by CVE-2006-1806."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de secuencia de comandos en sitios cruzados (XSS) en Shalwan MusicBox 2.3.4  y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro id en una respuesta para el URI de mayor nivel. NOTA: el parámetro id en index.php, y los parámetros type y show en una acción top, están actualmente cubiertos por CVE-2006-1349;y el parámetro term en un acción de búsqueda está cubierto por CVE-2006-1806."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0C076E-9A00-440E-A757-795C82CF642B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function."
      }, {
        "lang" : "es",
        "value" : "Shalwan MusicBox 2.3.4 y anteriores permite a atacantes remotos obtener información de configuración mediante una petición directa de phpinfo.php, que llama a la función phpinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0C076E-9A00-440E-A757-795C82CF642B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the tablewidth parameter in (a) counter.php; (2) the newdays parameter in (b) links.php; and the (3) tableborder, (4) menucolor, (5) textcolor, and (6) bodycolor parameters in (c) menu.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Gonafish LinksCaffe 3.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) tablewidth en (a) counter.php; el parámetro (2) newdays en (b) links.php; y los parámetros (3) tableborder, (4) menucolor, (5) textcolor, y (6) bodycolor en (c) menu.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gonafish:linkscaffe:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A613FE7C-009E-460A-864F-FFA2EFEA262D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441087/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441087/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action, and the (4) link_id parameter in a deadlink action.  NOTE: this issue can also be used for path disclosure by a forced SQL error, or to modify PHP files using OUTFILE."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en links.php de Gonafish LinksCaffe 3.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) offset y (2)limit, el parámetro (3) newdays en una acción nueva, y el parámetro (4) link_id en una acción deadlink (enlace roto). NOTA: este problema puede ser utilizado también para desvelar rutas forzando un error SQL, o para modificar archivos PHP usando OUTFILE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gonafish:linkscaffe:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A613FE7C-009E-460A-864F-FFA2EFEA262D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441087/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19149",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441087/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot dot) in the URL on TCP port 18264."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Check Point Firewall-1 R55W anterior a HFA03 permite a atacantes remotos leer archivos de su elección mediante un .. (punto punto) codificado en el URL en el puerto TCP 18264."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:firewall-1:r55w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1975FDD7-C643-4B85-8238-723CADFCE227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:firewall-1:r55w:hfa1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A5C0EC-E233-477F-8F4E-6E65C9284DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:firewall-1:r55w:hfa2:*:*:*:*:*:*",
            "matchCriteriaId" : "A55D2D38-3D40-4163-B5A2-2186612C0AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sec-tec.co.uk/vulnerability/r55w_directory_traversal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440990/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441495/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19136",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sec-tec.co.uk/vulnerability/r55w_directory_traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440990/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441495/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by CVE-2006-1807, and the show parameter/top action is already covered by CVE-2006-1360."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Shalwan MusicBox 2.3.4 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro page en una acción viewgallery (ver galería) en una petición del URI de nivel superior. NOTA: el parámetro start y la acción search (búsqueda) están ya cubiertos por CVE-2006-1807, y el parámetro show y la acción top están cubiertos por CVE-2006-1360."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBDAA1E7-8318-4FBD-9EEA-04CA03F892FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D01FC6-CA97-49FB-BF56-8487BB47DA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0C076E-9A00-440E-A757-795C82CF642B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbox:musicbox:2.3_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05557F2-F712-4B01-98AC-C7A53A3A2FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19129",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T11:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad SMB Mailslot en PAM en múltiples productos ISS con XPU (24.39/1.78/epj/x.x.x.1780), incluyendo Proventia A, G, M, Server, y Desktop, BlackICE PC y Server Protection 3.6, y RealSecure 7.0,permiten a atacantes remotos provocar denegación de servicio (bucle infinito) a través de paquetes SMB manipulados que no son manejados adecuadamente por el decodificador SMB_Mailslot_Heap_Overflow."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:3.6cpk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643BC973-847D-43EB-A1BE-356C36F61123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_server_protection:3.6cpk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CCE20A-E955-4630-9D6A-FBEF9DE5595B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:proventia_desktop:8.0.675.1790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1538F0E9-E5B9-4D2D-B5FC-084DFB9A2899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:proventia_desktop:8.0.812.1790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D878CE-7CB9-4A24-B836-4E14447F53B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CEB52E-9D4F-456A-A0C9-38E9D5FB6770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:realsecure_network:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8282F03-33D2-4545-9E36-3FC0EB6B291F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:realsecure_server_sensor:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216E89B1-4096-487C-AB3A-79FF2FAE523B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:iss:proventia_a_series_xpu:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCF39B2-42A9-4B6E-B70B-0DA8D61E1ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:iss:proventia_g_series_xpu:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4C8341-4801-4751-88EB-1F5048C49778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:iss:proventia_m_series_xpu:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4318C6-AF27-4099-AAE9-3DDC6DA202FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:iss:proventia_server:1.0.914.1880:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDE7886-53E6-4E97-A6ED-F97CF31714C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21219",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0607.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441278/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2996",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/230",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0607.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441278/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T11:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Microsoft Internet Explorer 6 sobre Windows 2000 permite a atacantes remotos provocar denegación de servicio (caida de aplicación) a través de la creación de un objeto ActiveX NMSA.ASFSourceMediaDescription.1 con una propiedad dispValue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685F1981-EA61-4A00-89F8-A748A88962F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-23-nmsaasfsourcemediadescription.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27232",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19114",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2953",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27930",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-23-nmsaasfsourcemediadescription.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T11:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Click method of the Internet.HHCtrl.1 ActiveX object before initializing the URL, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6.0 sobre Windows XP SP2 permite a atacantes remotos provocar denegación de servicio (caida de aplicación) a través de la llamada al método click del objeto ActiveX Internet.HHCtrl.1 anterior a la inicialización de la URL, la cual dispara un referencia a un NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-22-internethhctrl-click.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27231",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2952",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27929",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-22-internethhctrl-click.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T11:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary function of the CEnroll.CEnroll.2 ActiveX object with a long second argument, which triggers an invalid memory access inside the SysAllocStringLen function."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6.0 en Windows XP SP2 permite a atacantes remotos provocar una denegación de servicio (cierre de aplicación) llamando a la función stringToBinary del objeto ActiveX CEnroll.CEnroll.2 con un segundo argumento largo, lo cual dispara un acceso a memoria inválido dentro de la función SysAllocStringLen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-21-cenroll-stringtobinary.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27230",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2916",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27884",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-21-cenroll-stringtobinary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T11:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en guestbook.php de TP-Book 1.00 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tobias_kloy:tp-book:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00",
            "matchCriteriaId" : "83BA3D4B-893E-4BE5-87B5-FC42CD93E485"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115385461709949&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21205",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=27515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441192/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115385461709949&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=27515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441192/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T11:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long LHA extended header, (3) an LHA archive in which the \"temporary pathname\" field for decompressed output is greater than 2 bytes, or (4) an LHA archive with a long filename."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en pila en Tumbleweed Email Firewall (EMF) permite a atacantes remotos ejecutar código de su elección mediante un adjunto de correo electrónico con un archivo LHA que contiene (1) un archivo o (2) un directorio con una cabecera LHA extendida muy larga, (3) un archivo LHA en el cual el campo \"nombre de ruta temporal\" para la salida de la descompresión es mayor de 2 bytes, o (3) un archivo LHA con un nombre de fichero largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tumbleweed:mailgate_email_firewall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392D250B-8CD8-4F42-8BA6-46BDF16A1987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115378437918939&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21194",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hustlelabs.com/advisories/04072006_tweed.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441497/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115378437918939&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hustlelabs.com/advisories/04072006_tweed.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441497/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 1.5 anterior a 1.5.0.5 y SeaMonkey anterior a 1.0.3 permite a atacantes remotos ejecutar código de su elección cambiando ciertas propiedades del objeto de la ventana de navegación (window.navigator) que es accedido cuando comienza Java, lo cual provoca un caida que desemboca en una ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/670060",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-45.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441332/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19192",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/670060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-45.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441332/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3803",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el colector de basura JavaSCript en Mozilla Firefox 1.5 anterior a 1.5.0.5, Thunderbird anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 podría permitir a atacantes remotos ejecutar código de su elección provocando que el colector de basura borra variables temporales mientras \t\r\ntodavía se está utilizando durante la creación de un nuevo objeto de la función."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/265964",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-48.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27984",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10635",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/265964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-48.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3804",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Mozilla Thunderbird anterior a 1.5.0.5 y SeaMonkey anterior a 1.0.3 permite a atacantes remotos provocar denegación de servicio (caida) a través de una adjunto Vcard con un campo base64 mal formado, lo cual copia más datos que los esperados llevando consigo a un desbordamiento inferior de entero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/897540",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-49.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27985",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11395",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/897540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-49.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3806",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified \"string function arguments.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer de enteros en el motor JavaScript en Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 podrían permitir a atacantes remotos ejecutar código de su elección a través de vectores que afectan a (1) cadena en el método toSource del objeto, objetos Array y String, y (2)\"argumentos de cadenas de función\" no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/655892",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-50.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27987",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/655892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-50.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3807",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling \"named JavaScript functions\" that use the constructor."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a 1.5.0.5, Thunderbird  anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 permite a atacantes remotos ejecutar código de su elección a través de la secuencia de comandos que cambian el constructor Object() estandar para retornar a la referencia a un objeto privilegiado y la llamada a las \"funciones JavaScript\" que usa el constructor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/687396",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-51.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27988",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10374",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/687396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-51.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3113",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-07-27T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 1.5 anterior a 1.5.0.5, Thunderbird anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 permite a atacantes remotos provocar denegación de servicio (caida) y posiblemente ejecutar código de su elección a través de eventos simultaneos XPCOM, lo cual provoca que un objeto de contador de tiempo sea suprimido de una manera que acciona la corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-53/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/239124",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-46.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441330/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19197",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27982",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10261",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-53/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/239124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-46.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441330/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3801",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 1.5 anterior a 1.5.0.5 y SeaMonkey anterior a 1.0.3 no limpia de forma adecuada una referencia JavaScript a un frame o window, lo caul deja un punterio a un objeto borrado que permite a atacantes remotos ejecutar código nativo de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/476724",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-44.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27980",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/476724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-44.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3802",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a1.5.0.5, y SeaMonkey anterior a 1.0.3 permite a atacantes remotos secuestrar metodos DOM nativos desde objetos en otros dominios y conducir ataques de secuencias de comandos en sitios cruzados (XSS) utilizando métodos DOM del objeto de mayor nivel."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-47.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27983",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9611",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-47.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3805",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used."
      }, {
        "lang" : "es",
        "value" : "El motor Javascript en Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 prodría permitir a atacantes remoto ejecutar código de su elección a través de vectores que afectan al colector de basura que provoca el borrado de un objeto temporal que está aun siendo utilizado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/876420",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-50.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27986",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10690",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/876420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-50.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3808",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a 1.5.0.5 y SeaMonkey anterior a 1.0.3 permite a servidores remotos Proxy AutoConfig (PAC) ejecutar código con privilegios elevados a través de secuencias de comandos PAC que asignan la función FindProxyForURL a un método eval sobre un objeto privilegiado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-52.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27989",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10845",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-52.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3809",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a 1.5.0.5, Thunderbird  anterior a 1.5.0.5, y SeaMonkey anterior a 1.0.3 permite secuencias de comandos con el privilegio UniversalBrowserRead obtener privilegios UniversalXPConnect y posiblemente ejecutar código u obtener datos sensibles a través de la lectura dentro de un contexto privilegiado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-53.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9753",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-53.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3810",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Mozilla Firefox 1.5 anterior a 1.5.0.5, Thunderbird anterior a  1.5.0.5, y SeaMonkey anterior a  1.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del constructor XPCNativeWrapper(window).Function."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/911004",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-54.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27991",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10113",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/911004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-54.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3811",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) \"anonymous box selectors outside of UA stylesheets,\" (5) stale references to \"removed nodes,\" and (6) running the crypto.generateCRMFRequest callback on deleted context."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a  1.5.0.5, y SeaMonkey anterior a  1.0.3 permite a atacantes remotos provocar denegación de servicio (caida) y posiblemente ejecutar código  a través de JavaScript que conducen a un corrupción de memoria, incluyendo (1) nsListControlFrame::FireMenuItemActiveEvent, (2) desbordamiento de búfer en la clase string en condiciones fuera de memoria, (3) fila de tabla y grupos de columnas, (4) \"selectores anónimos de caja fuera del estilo del UA,\" (5)referencias pasadas a \"nodos borrados\", y (6) ejecutando la segunda prueba crypto.generateCRMFRequest sobre un contexto borrado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25839",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/527676",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-55.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2350",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27992",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9934",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/527676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-55.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0611.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446657/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-208A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2933",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, which can prevent the screensaver from activating or prevent users from manually locking the desktop."
      }, {
        "lang" : "es",
        "value" : "kdesktop_lock en kdebase versiones anteriores a  3.1.3-5.11 para KDE en Red Hat Enterprise Linux (RHEL) 3 no termina apropiadamente, lo cual puede impedir que el salva-pantallas se active, o impedir que los usuarios bloqueen manualmente el escritorio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33AF934D-B51B-4A81-BC47-FFEAB9A62C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kde:kde:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3096F2-B0F1-45E1-806D-6434DE56619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
            "matchCriteriaId" : "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
            "matchCriteriaId" : "EC79FF22-2664-4C40-B0B3-6D23B5F45162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
            "matchCriteriaId" : "0EFE2E73-9536-41A9-B83B-0A06B54857F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177755",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21203",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016571",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0576.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10535",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0576.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbitrary web script or HTML via the i_cat parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el index.php del  phpFaber TopSites 2.0.9 permite a atacantes remotos la inyección de secuencias de comandos web o HTML de su elección a través del parámetro i_cat. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfaber:topsites:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE02C7A6-44CA-4B07-90DE-4F5A3A564334"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21141",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en (1) index.php y (2) admin.php en myWebland MyBloggie 2.1.3 permite a atacantes remotos secuestrar sesiones y llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) mediante una cookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E310D0A0-AB13-44D3-847B-505D4E7EB011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0FF8C-1AEA-46C0-A867-F2728AA5E069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046094.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114791192612460&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=26557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=26558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441356/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114791192612460&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=26557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=26558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441356/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en manager/index.php en Etomite CMS 0.6.1 y anteriores, con magic_quotes_gpc deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etomite:etomite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.1",
            "matchCriteriaId" : "D67E8001-0930-45E9-917A-D0EF76415E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etomite:etomite:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C5AD0F-8476-42EB-B78C-A4E01DC96E73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/etomite_061_sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21167",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.etomite.org/forums/index.php?showtopic=5706&st=0&p=35307&#entry35307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/etomite_061_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.etomite.org/forums/index.php?showtopic=5706&st=0&p=35307&#entry35307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post_id parameter in index.php and (2) search function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Webland MyBloggie 2.1.3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el (1) parámetro post_id en index.php y la (2) función search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E310D0A0-AB13-44D3-847B-505D4E7EB011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0FF8C-1AEA-46C0-A867-F2728AA5E069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046094.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114791192612460&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-008-mybloggie.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=26559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=26560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441356/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=114791192612460&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.h4cky0u.org/advisories/HYSA-2006-008-mybloggie.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=26559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=26560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441356/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected."
      }, {
        "lang" : "es",
        "value" : "Protocolo Internet Key Exchange (IKE) version 1, implementado para Cisco IOS, VPN 3000 Concentrators, y PIX firewalls, permite a atacantes remotos provocar denegación de servicio (agotamiento de recursos) a través de un flood de paquetes IKE Phase-1 que exceden el ratio de expiración de la sesión. NOTA: se ha indicado que esto es debido a un diseño debil del protocolo IKe version 1, en cuyo caso otros vendedores e implementaciones podrían verse afectados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5802E2D8-7069-474C-826F-AEE7B50BFE34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3001_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786346D5-13D8-45C9-B91D-C2AACF675377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A512328-2FD0-4B1D-9327-A13A0BCE9C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D50FE2-A4E6-4EF4-A91C-88FB0AF6CCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6548F964-B8EE-4B39-87CF-99743D41C42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08810E6-33B6-45FF-91C7-EED10DC023EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD1A1AC-980F-428E-8BAF-0FC821014868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85ED2D96-5CC9-4851-986A-C9ED5E2D96CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC150564-7413-401A-9DD8-8AD773F1D8F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0714F9E-75AD-4405-BBC3-E0D817C05EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA0DDDD-C987-4DA6-ADEE-77B387C26A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49696766-ECCE-4903-AA54-271EFEA58B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1557499-D1A1-4A26-80DA-A3D66AA53580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923949D1-06EC-462F-A3BC-FCAB448042A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901B1838-7169-41E5-80EF-29BB680BF937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDAEAA5F-0A98-48B7-8012-9B9909243135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB38834B-E4AB-43F4-888B-14B088C95594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F8059B-3968-4D63-B1B3-74E545C918D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701CDA0D-F932-4251-B484-8F20F0AE9003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E674AA43-905E-40E0-A70F-77D05C62C18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AB682-2965-4C8D-B323-AB510E424407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F7F019-A0A4-49CD-BB28-24BF7725AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175CD875-3402-4B06-A3FA-7DFFCBB44056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C544E523-15E5-4CE5-8113-53454F5D9973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09F6EBD-C3FC-4680-BE31-A766D863237D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B68705AB-A133-401F-9F41-64594E071816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9092680-E154-4EAB-A2D5-B692073F894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF5F3FA-5FA4-408E-BA62-3943C5DFD859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFC9764-5BF5-449F-9200-5569C13F8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F12F2AAC-DB5B-4C28-86C5-F59490362E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071F52AD-D59B-4673-BCBE-112B94D3EB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80709CB0-D386-4C4F-B3EE-7A0501FD7248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2AFAF42-B894-4D62-A9CF-3349A43191AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE5BB7F-D8B4-441B-9F45-56F622EEAA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B87A7EC-DC23-4075-8C4A-2317FF34BDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98AC18E3-D12B-489D-9D95-6C9210235FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB969E-8BE9-46E0-B8AA-5057E320F1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36291ADE-3D5A-4E49-8BA7-B71CAAA226B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D953DA9F-B54E-4941-85BE-48933C98DB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E298AD-26AC-4E1D-83D8-5C2016CC6559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "590283B1-4965-44D3-A0D4-CD90DD6B2D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DAF71-5763-44D8-AD1E-5ADE8BC15120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35B6FA9-E504-4CE3-B171-815291A812CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA54782-93A8-47BE-863D-89CA3678BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F66A10-246D-447B-941F-F1175684F0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82435757-D892-4298-9176-5EC1FEC93037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5BAFC4A-D8FB-4450-BC29-83B306000C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03F5D3F-6FB1-4A25-B544-D3C973F35DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A18AD-A495-4750-85A5-7D82FC321D7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A90348C-94E2-4F04-A887-E7EFFC1ACF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5E136E-9215-46A8-A40A-AE964C588A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9729CAA-8041-43D6-9299-07CCCBFD3907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A33500-B013-4863-BF12-27283ACD4AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13F7BC2-7491-4266-9B32-3E6D8978A6C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3005_concentrator_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17196F00-9D7A-4AF6-AE1E-EA2E450A8ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7\\(rel\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A459B6C2-EE91-43AE-A837-BCF4188BEB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32200DE2-71BA-417C-AF24-3BE549A68711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F3F37E-4BBD-4A0E-A1DF-64602D75207D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0722179-9602-42A1-81CA-062D4010B9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.2.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0E5615-4855-4A35-BE58-B9B27C7B2CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3030_concentator:4.7.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65D48968-68F5-49BD-88CF-6C8D73D7F967"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_asa_ids:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701810DC-0A46-4D01-90BD-03AAF277E4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.2.3_\\(110\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "900DC321-4CEF-4810-8247-B82FE93F48BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.3.3_\\(133\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "422F8E64-2376-4E82-A1A2-916BFB7172AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:pix_firewall:6.3.5_\\(112\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "54389797-86AA-4744-AA84-9B66FB6E01E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_501:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151D5A44-2D0D-478A-B011-A0892817B814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_506:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E346F334-9BA3-4BDC-8D0F-D749A7D76E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EE5C14-F556-48A5-BB3F-5465DC823B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_515e:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286199EA-71CF-46B4-9131-F1752C2EA82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E437F4-1B19-4B57-9EAD-3AC04717E389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_525:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2019F-DF6E-4924-B0D2-37094B5265F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_535:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600B7CF-4AEB-4319-8EF4-4FEA40EF6367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:secure_pix_firewall:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507B3A76-3F01-4BF0-8A3B-9E620DCB082D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026A2C0D-AD93-49DC-AF72-8C12AD565B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920FAF7C-2964-497B-B1F8-3B060AAB4C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D499F38-A34C-44D0-A061-C3AE08CF178B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E564B5-A39F-4837-93B8-1331CD975D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEDB9DD-C862-4783-9F96-88836424B298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD36C4A-4B90-4012-B4A5-6081C413E302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39A993C-5A36-4D3F-B8B6-9B3252713127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C4F7D5-DCD0-409C-86BF-A96A5253DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198D129-76D0-4983-BFC4-8EC724FE1B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEECFAA-9DD5-4950-B9F1-CF8582225314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49566EAC-05AF-4880-8000-351AF538E4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E9FBEE-3213-47FA-8CBA-C285533265FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "118CBF59-DAD8-468E-B279-F6359E4624F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(7.202\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "957E6F8F-6881-44DE-A687-9D1E0C13F6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:4.4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56328FE-F499-4325-AFEC-45BFEAB7662D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA2E425-904C-4070-8F5F-B81BCF3147F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604CF950-5D4B-4DC6-819E-0528B22CB05C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12887E5-A2BB-4B1E-9621-2961458BCE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4.206\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5BE2F7-687C-477B-818B-A102526DF36D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "999A0969-60EB-4B2E-A274-9F05D9F840E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "626E41D2-A5EF-493D-9486-3D9BC3793EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA31E4D-2215-4E4A-BCCC-B3D922CB752D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(3.210\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F16AD2C-1CC1-43D9-A944-F67071B62E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A42FFBF7-9ADB-4F14-BED8-F2E53BEE7B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D16481-CA9A-4B4D-AC9D-3A4F0387FF19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E4588E-6C1F-4720-8082-0EF299435CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.2\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24E0E92-59D7-4B16-8B0D-2FD0EE821D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED24C763-7558-4AC0-AE10-FDA3D3078D27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC85ED3-B598-4A87-A2B8-8D3B52ECC2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1.200\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84CE24E-4ED6-43D0-A234-FBD24D22A8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF84B9FE-7C6C-4578-A5A9-EF0D5EEEEC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:5.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C3E2B4-3A36-44B5-90D3-1BF9FAD98579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C558CED8-8342-46CB-9F52-580B626D320E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F85D19E-6C26-429D-B876-F34238B9DAAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09063867-0E64-4630-B35B-4CCA348E4DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F98CD7-A352-483C-9968-8FB2627A7CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97FE485-705F-4707-B6C6-0EF9E8A85D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B925E8-D2C2-4E8C-AC21-0C422245C482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9170562-872E-4C32-869C-B10FF35A925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0927A68-8BB2-4F03-8396-E9CACC158FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DDBA3-2AF4-4A0C-B219-6779BA931F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.1.5\\(104\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76AED68-8304-4BC6-9D98-64231B08A6A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5226C9CC-6933-4F10-B426-B47782C606FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "757DAE9A-B25D-4B8A-A41B-66C2897B537E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3DC170-E279-4725-B9EE-6840B5685CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8091EDA9-BD18-47F7-8CEC-E086238647C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F867890-74A4-4892-B99A-27DB4603B873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE05B514-F094-4632-B25B-973F976F6409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3392428D-1A85-4472-A276-C482A78E2CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D74D2C-662B-4D24-89EE-3DB73F96BBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40954985-16E6-4F37-B014-6A55166AE093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C097809-1FEF-4417-A201-42291CC29122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6D5FD3-CF95-4A3B-9ADB-CEC77F73CA78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0531.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441203/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0531.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441203/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet to the web administrative interface."
      }, {
        "lang" : "es",
        "value" : "Siemens SpeedStream 2624 permite a atacantes remotos provocar denegación de servicio (cuelgue de dispositivo) a través del envío de paquetes manipulados en el interface web del administrador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:siemens:speedstream_wireless_router:2624:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455F169D-EC99-42FA-BD5D-E30D4F9D0B4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21195",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalarmaments.com/2006310665340982.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440985/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalarmaments.com/2006310665340982.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440985/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en la función flush_output en ConsoleStreambuf.cpp en Game Network Engine (GNE) 0.70 y anteriores permiten a atacantes remotos provocar denegación de servicio (caida) y posiblemente ejecutar código a través de formato de cadenas específicos en vectores no especificados afectando a la salida de la consola gout."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gillius_programming:game_networking_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7",
            "matchCriteriaId" : "94F1B2E0-721A-4420-BD5B-64EBF541D235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gillius_programming:game_networking_engine:cvs_2006-07-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D12282-EA4D-4A6F-BAB2-4E57EF715964"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/gnefs-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://gnelib.cvs.sourceforge.net/gnelib/gnelib/src/ConsoleStreambuf.cpp?r1=1.8&r2=1.9&sortby=date",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19154",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/gnefs-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://gnelib.cvs.sourceforge.net/gnelib/gnelib/src/ConsoleStreambuf.cpp?r1=1.8&r2=1.9&sortby=date",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-27T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via the week parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en calendar.php en WWWthreads permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro week."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wired_community_software:wwwthreads:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14269C40-6DCA-4FA5-AAC0-F901F4493FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wired_community_software:wwwthreads:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773253B4-17E1-435E-9744-076AF5CCF031"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21221",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/wwwthreads.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441191/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19177",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.aria-security.net/advisory/wwwthreads.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441191/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3350",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) ARJ, (2) RAR, or (3) ZIP archive."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 permite atacantes con la intervención del usuario ejecutar código de su elección a través de nombres de fichero en archivos (1) ARJ, (2) RAR, o (3) ZIP.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cimmetry_systems:autovue_solidmodel_professional:desktop_edition_19.1_build_5993:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5303DC7B-C9C4-49D8-AEB0-8C40C2A8958F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20852",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-56/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27516",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441173/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19170",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2979",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27968",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-56/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441173/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling the NewDefaultItem function of an OVCtl (OVCtl.OVCtl.1) ActiveX object, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer 6 sobre Windows XP SP2, cuando Outlook está instalado, permite a atacantes remotos provocar denegación de servicio (caida) a través de llamadas a la función NewDefaultItem de un objeto OVCtl (OVCtl.OVCtl.1) ActiveXm lo cual dispara una dereferencia null."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-20-ovctl-newdefaultitem.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19079",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-20-ovctl-newdefaultitem.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the css_path parameter in (1) help.php and (2) setup/header.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en OSI Codes PHP Live! 3.2.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro css_path en (1) help.php y (2) setup/header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_live:php_live:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "701EF7DE-14F2-4680-A8FB-5020495784B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440955",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447947/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19116",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447947/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el módulo SFX en WinRAR anterior a 3.60 beta 8 tiene vectores no especificados e impacto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarlab:winrar:3.60_beta8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C71933B-40E9-459C-84D4-B6E90DD7C2C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/27031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rarlabs.com/rarnew.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rarlabs.com/rarnew.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/1992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negative chunk_length or a (2) large chunk->offset value in a PACKET_PLAYER_ATTRIBUTE_CHUNK packet in the generic_handle_player_attribute_chunk function in common/packets.c, and (3) a large packet->length value in the handle_unit_orders function in server/unithand.c."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Freeciv 2.1.0-beta1 y anteriores, y SVN 15 Jul 2006 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante (1) un valor chunk_length (longitud de pedazo) negativo o (2) un valor grande de chunk->offset (desplazamiento de pedazo) en un paquete PACKET_PLAYER_ATTRIBUTE_CHUNK para la función generic_handle_player_attribute_chunk de common/packets.c, y (3)  un valor grande de packet->length (longitud de paquete) en la función handle_unit_orders de server/unithand.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeciv:freeciv:2.1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80374056-9BE1-449E-A8BD-3D51EE2905D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/freecivx-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21171",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21254",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441042/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19117",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/freecivx-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441042/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before being viewed via \"View Attempt Details\" in the Gradebook."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Blackboard Academic Suite 6.2.3.23 permite a usuarios remotos validados inyectar secuencias de comandos web o HTML evitando la validación del lado del cliente a través de la inutilización JavaScript cuando se envian una respuesta de ensayo, lo cual no tiene validación del lado del servidor antes de ser visto a través de \"Detalles de tentativa de visión\" en el Gradebook."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_academic_suite:6.2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673B521A-DD83-4C00-B2D7-834B483CADB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as demonstrated with the window.alert function, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 sobre Windows XP SP2 permite a atacantes remotos provocar denegación de servicio (caida) a travès de la iteración sobre cualquier función nativa, como se demostro con la función window.alert, lo cual dispara un referencia null."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-25-native-function-iterator.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27373",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19140",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2955",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27932",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-25-native-function-iterator.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in snews.php in sNews (aka Solucija News) 1.4 allows remote attackers to inject arbitrary web script or HTML via the search_query parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en snews.php en sNews (también conocido como Solucija News) 1.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro search_query."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solucija:snews:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2302D1D2-591D-4D58-87FD-0CFBDFEBD291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security-net.biz/adv/D25706a.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security-net.biz/adv/D25706a.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfg_racine parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en inc/gabarits.php en R. Corson PHP Forge 3 beta 2 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro cfg_racine."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r._corson:php_forge:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3_beta_2",
            "matchCriteriaId" : "3C262803-B851-470F-A3D8-5FE16D66372A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file."
      }, {
        "lang" : "es",
        "value" : "http_protocol.c en (1) IBM HTTP Server 6.0 anterioa a 6.0.2.13 y 6.1 anterior 6.1.0.1, y (2) Apache HTTP Server 1.3 anterior a 1.3.35, 2.0 anterior a 2.0.58, y 2.2 anterior a 2.2.2, no desinfecta la cabecera Expect desde una respuesta HTTP cuando se refleja en un mensaje de error, lo cul podría permitir un ataque de tipo secuencia de comandos en sitios cruzados (XSS) utilizando los componentes web del cliente que puede enviar cabeceras de su elección en las respuesta, como se demostró con la utilización de un archivo Flash SWF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.3",
            "versionEndExcluding" : "1.3.35",
            "matchCriteriaId" : "5F918B6F-6F62-4DC5-A0A4-2B178A1FE2F0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E304C9-F780-4358-A58D-1E4C93977704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBDAFF8-DE44-4E80-B6BD-E341F767F501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9EF63F-DDA3-448B-92D7-27ED92C51FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A61204-33CE-422F-8285-20A5E98ADF3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125631037611762&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata.html#httpd2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0618.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0692.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21172",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21174",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21399",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21478",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21744",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21848",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21986",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22140",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22317",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/28749",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/29640",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/40256",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1294",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016569",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=394965",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013080",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1167",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_51_apache.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0619.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19661",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1024144",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-575-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2963",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2964",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3264",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/5089",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1572",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=125631037611762&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=129190899612998&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata.html#httpd2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0618.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0692.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/21986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/28749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/29640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/40256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=394965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_51_apache.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0619.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1024144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-575-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/5089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP Server 1.3.35:\nhttp://httpd.apache.org/security/vulnerabilities_13.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the (1) news_id, (2) tid, and (3) page_id parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en SD Studio CMS permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros 1) news_id, (2) tid, y (3) page_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sd_studio:sd_studio_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F01EAD8-95AE-4951-85AF-1CE5A54C7454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21207",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security-net.biz/adv/D24706a.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security-net.biz/adv/D24706a.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3747",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-28T18:02:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules."
      }, {
        "lang" : "es",
        "value" : "Error de superación de límite (off-by-one) en el esquema ldap manejado en el modulo Rewrite (mod_rewrite) en Apache 1.3 desde 1.3.28, 2.0.46 y otras versiones anteriores 2.0.59, y 2.2, cuando RewriteEngine está activo, permite a atacantes remotos provocar denegación de servicio (Caida de aplicación) y posiblemente ejecutar código a rtavés de URLs manipuladas que no se manejan de forma adecuada utilizando ciertas reglas de reescritura."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.28",
            "versionEndExcluding" : "1.3.37",
            "matchCriteriaId" : "2795E703-F4AE-491F-8DDD-A3DA32856E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.46",
            "versionEndExcluding" : "2.0.59",
            "matchCriteriaId" : "C5E51CD7-A796-4204-95BA-53ACB46993A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "028BE030-4059-4C7D-A6E7-47EE2150578B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=307562",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kbase.redhat.com/faq/FAQ_68_8653.shtm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//May/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048267.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048271.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21197",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21245",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21247",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21266",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21273",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21307",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21313",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21315",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21509",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22368",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22388",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23028",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/29420",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/29849",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/30430",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-01.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1312",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016601",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=426144",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK29154",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK29156",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013080",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/Announcement2.0.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1131",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1132",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/395412",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:133",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_43_apache.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.015-apache.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27588",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441485/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441487/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441526/100/200/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443870/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450321/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19204",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-328-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA08-150A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3264",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3282",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3884",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3995",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4015",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4300",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4868",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0924/references",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1246/references",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1697",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28063",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-538",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kbase.redhat.com/faq/FAQ_68_8653.shtm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008//May/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048267.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048271.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/29420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/29849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/30430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102663-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://svn.apache.org/viewvc?view=rev&revision=426144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK29154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1PK29156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.apache.org/dist/httpd/Announcement2.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/395412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_43_apache.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.015-apache.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441485/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441487/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441526/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445206/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450321/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-328-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA08-150A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0924/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1246/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/1697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "The ability to exploit this issue is dependent on the stack layout for a particular compiled version of mod_rewrite. If the compiler has added padding to the stack immediately after the buffer being overwritten, this issue can not be exploited, and Apache httpd will continue operating normally.\n\nThe Red Hat Security Response Team analyzed Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4 binaries for all architectures as shipped by Red Hat and determined that these versions cannot be exploited.  This issue does not affect the version of Apache httpd as supplied with Red Hat Enterprise Linux 2.1",
        "lastModified" : "2006-07-31T00:00:00"
      }, {
        "organization" : "Apache",
        "comment" : "Fixed in Apache HTTP Server 2.2.3, 2.0.59, and 1.3.37:\nhttp://httpd.apache.org/security/vulnerabilities_22.html\nhttp://httpd.apache.org/security/vulnerabilities_20.html\nhttp://httpd.apache.org/security/vulnerabilities_13.html",
        "lastModified" : "2008-07-02T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3746",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-28T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer de enteros en parse_comment en GnuPG (gpg) 1.4.4 permite a atacantes remotos provocar denegación de servicio (fallo de segmentación) a través de un mensaje manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:gnupg:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D63B0B4A-3998-4A4F-AD7A-BB8CEBE897B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/gnupg.CVE-2006-3746.diff?bug=381204%3Bmsg=15%3Batt=1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-560",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-July/003354.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21297",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21300",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21306",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21326",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21333",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21378",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21524",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-08.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-164.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gossamer-threads.com/lists/gnupg/devel/37623",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27664",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0615.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442012/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442621/100/100/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19110",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-332-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3123",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200502",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11347",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi/gnupg.CVE-2006-3746.diff?bug=381204%3Bmsg=15%3Batt=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.immunitysec.com/pipermail/dailydave/2006-July/003354.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-164.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gossamer-threads.com/lists/gnupg/devel/37623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0615.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442621/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-332-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the configuration settings for locking the password database when certain dialogue windows are open, which might allow attackers with physical access to obtain the database contents."
      }, {
        "lang" : "es",
        "value" : "Password Safe 2.11, 2.16 y 3.0BETA1 no respeta la configuración de los ajustes para cerrar la base de datos de contraseñas cuando ciertos diálogos de windows son abiertos, lo cual permitiría a atacantes con acceso físico obtener contenido de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316B0240-3E68-4BC6-9E4F-3115A8A73B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF681B18-AF36-49CF-9A31-1EA3613A0C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterpane:passwordsafe:3.0beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D516C6B5-7824-466B-A5B8-5260ABBA5351"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441040/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19078",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-008.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441040/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-008.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect sequence number, which triggers an ACK storm."
      }, {
        "lang" : "es",
        "value" : "La implementación TCP en Sun Solaris 8, 9, y 10 anterior a 20060726 permite a atacantes remotos provocar denegación de servicio (agotamiento de recursos) a través de una paquete TCP con secuencias de números incorrectos, lo cual dispara una tormenta de ACK."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21226",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016589",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102206-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102206-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3768",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-07-28T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow in filecpnt.exe in FileCOPA FTP Server 1.01 before 2006-07-21 allow remote authenticated users to execute arbitrary code via a long argument to the (1) CWD, (2) DELE, (3) MDTM, and (4) MKD commands, which triggers a stack-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de Entero inferior de búfer en filecpnt.exe en FileCOPA FTP Server 1.01 anterior a 2006-07-21 permite a usuarios remotos a ejecutar código de su elección a través de un argumento en los comandos (1) CWD, (2) DELE, (3) MDTM, y (4) MKD, lo cual dispara un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intervations:filecopa:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6210FC1-91FA-448D-80EF-24350AB97CDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21097",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-55/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1300",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/713092",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/RGII-6TYN6M",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27486",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441207/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19153",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2960",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27941",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-55/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/713092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/RGII-6TYN6M",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441207/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the \"document root directory\" via a direct request using a UTF-8 encoded URI."
      }, {
        "lang" : "es",
        "value" : "Sun Java System Application Server (SJSAS) 7 hasta la 8.1 y Web Server (SJSWS) 6.0 y 6.1 permite a usuarios remotos validados leer archivos fuera del \"directorio de documentos del root\" a través de respuesta directas utilizando una codificación URI UTF-8."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB26B3D-4DF0-45C2-9ECA-202C829392D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "EE5A4BC2-ED34-4968-881E-ED6AD300AC42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*",
            "matchCriteriaId" : "D00790CE-CD77-4C39-80AC-5FBD298DD63A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "BC5F2280-EC46-4D2F-8402-FE91ECEE6A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "2F40832C-EA2D-4AEF-9C98-36795D36BA06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:standard:*:*:*:*:*",
            "matchCriteriaId" : "9F076EB9-CE31-456E-B7E9-B9F4C26CB0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur2:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "7805CF93-C1EC-4698-95A6-CAB9C26EEAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur2:platform:*:*:*:*:*",
            "matchCriteriaId" : "FAF567AF-95D6-4634-90BB-E34801F44459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur2:standard:*:*:*:*:*",
            "matchCriteriaId" : "951B75FF-9190-4AF7-BE9D-23C2114F71DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*",
            "matchCriteriaId" : "60EBC552-FAC2-4833-B1A6-696DC06301A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:platform:*:*:*:*:*",
            "matchCriteriaId" : "A6F3E897-8253-4D9B-9FA7-83727F508789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:standard:*:*:*:*:*",
            "matchCriteriaId" : "18ECFDD3-6D45-44F1-BA98-426D86084BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur6:platform:*:*:*:*:*",
            "matchCriteriaId" : "4C28CDD2-F08A-438D-B4E2-093994BE50C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.0:ur6:standard:*:*:*:*:*",
            "matchCriteriaId" : "3A84AFF0-8598-48C7-90BE-DB2700F55430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E583F338-CF10-4FD5-8A86-A3CE46E863DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D9F68042-8C22-447E-8C6B-F44DEE5BF389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:*:platform:*:*:*:*:*",
            "matchCriteriaId" : "7659FD2B-6F83-44F1-B4A1-94D106B4C686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_application_server:8.1:ur1:platform:*:*:*:*:*",
            "matchCriteriaId" : "E2A9B4B2-B844-411F-B4C7-9AC60C37A5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E592549-5C28-4F0A-B407-06A33B3CFFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044D96F6-7A18-4295-A665-16F1A6630963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85A181D1-C261-4C29-BC8C-A7A815A63E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A10F68F-4A2F-44A0-A039-1A34C6E2D083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "021DC080-18ED-41F4-9FBD-1DD0C332F871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "C878B2FD-88A1-44E2-9234-C40CA1DDC5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.1:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "BABE9BB1-E968-4EC9-A13A-6ECBCDC0D9AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016596",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016597",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102521-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19200",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102521-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en mod_membre/inscription.php en PortailPHP 1.7 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro chemin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portailphp:portailphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "960B0580-9D48-4271-98D9-22D66DDC2D58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21224",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the Seitenname parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en add.php en Fire-Mouse Toplist 1.1 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro Seitenname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fire-mouse:fire-mouse_toplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "6A849A0C-67C3-416B-9315-91227C05A7B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21173",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls24.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440859/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/advisory/major_rls24.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440859/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en Dokeos anterior a 1.6.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:dokeos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.4",
            "matchCriteriaId" : "31D93697-C401-4793-9664-99637877BD24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21239",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/news.php#145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19210",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.dokeos.com/news.php#145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-28T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackers to execute arbitrary code via a long argument to the Files method.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el control ITIRecorder.MicRecorder ActiveX en iarecord.dll en InterActual Player anterior a 2.6 permite a atacantes remotos ejecutar código de su elección a través un argumento en el método Files. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interactual_technologies:interactual_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.60.12.0201",
            "matchCriteriaId" : "F103F612-BE62-48EA-B3BD-48A53030312A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20845",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3812",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-07-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a 1.5.0.5, Thunderbird anterior a1.5.0.5, y SeaMonkey anterior a 1.0.3 permite a atacantes remotos referenciar archivos remotos y posiblemente cargar chrome:  URLs engañando al usuario en acoplamientos de copiado o arrastrando enlaces."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E18FC0-0C8C-4FA1-85B9-B868D00F002F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "D62F740C-706B-4290-AD92-3ECBC3D30768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "55344F76-1C42-4DD8-A28B-1C33626C6FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6521C877-63C9-4B6E-9FC9-1263FFBB7950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB87608-0DF8-4729-95C5-CFA386AB3AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A406214-29E5-4E13-B2E1-1CF72F1E60BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C169DA-26BC-42EE-817B-2F0685069495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C99BAF7-B48E-4402-B2BF-EB07235E402E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F0C73F-291F-4A92-87B8-2269B5C1516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D291234-D64A-4E8A-A7CD-08BB980E1CD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/398492",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-56.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27993",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11013",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/398492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-56.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0594.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0608.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0610.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441333/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446658/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/327-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://usn.ubuntu.com/329-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1178",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-07-29T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tamarack MMSd before 7.992 allows remote attackers to cause a denial of service (crash) via malformed RFC1006 (OSI over TCP/IP) packets."
      }, {
        "lang" : "es",
        "value" : "Tamarack MMSd anterior 7.992 permite a atacantes remotos provocar denegación de servicio (caida) a través de paquetes mal formados (OSI sobre TCP/IP)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tamarack_consulting:tamarack_mmsd:7.991:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA99D65-1304-4A83-8611-32F18A4B1991"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016734",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/372878",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6RZPUT",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19202",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3080",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28053",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1016734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/372878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/JGEI-6RZPUT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619)."
      }, {
        "lang" : "es",
        "value" : "VMware ESX Server 2.0.x versiones anteriores a 2.0.2 y 2.x versiones anteriores a 2.5.2 patch 4 almacena credenciales de autenticación en formato de codificación base 64 en las cookies vmware.mui.kid y vmware.mui.sid, lo cual permite a atacantes remotos obtener privilegios obteniendo las cookies usando ataques como las secuencias de comandos en sitios cruzados (CVE-2005-3619)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A348CABB-CD52-4C55-9653-154C75605CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA74505A-3550-4646-B2D6-6E6D0924023D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7632C2AE-4B59-4B17-8A6B-C1D05C2824FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC77D81A-12AA-4948-9970-9461289DC648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A10ABE-E778-4133-B1AA-05FE6829A34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CB97F9-9DF6-4493-A245-F4901F4DD22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C862131A-64D8-4C2D-815F-19971D63AF00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.vmware.com/kb/2118366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21230",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c060512-001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441728/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441825/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3075",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://kb.vmware.com/kb/2118366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.corsaire.com/advisories/c060512-001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441728/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441825/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3120",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-07-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified attack vectors related to the logging functions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en Brian Wotring Osiris anterior 4.2.1 permite a atacantes remotos provocar denegación de servicio (caida de aplicación) y posiblemente ejecutar código de su elección a tavés de vectores de ataque no especificados relacionados con las funciones de validación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B287BBF7-E93B-4C14-9AC9-A79F3F9D6A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C9EA7A-4313-43AC-949C-ACADDD744B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B1939-A321-4941-B20E-DB5E8ECCD7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBDDB1B-7CF8-4BEB-9190-5E3E5161E132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E13B7-8B37-4213-8CBD-0F79377A6765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F770F21-FEE8-4C1D-93B6-9993284019D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72103DB-D6AC-4917-8E88-35767FEB8852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CDA64E-E6D0-4CB1-9F02-6F4E58398CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CCC86A-59BD-468A-998B-7DC74044EB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E215D69E-D9FB-4E2E-8B52-5C75E4269FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B8A920-67EB-4676-9F68-874DC8A59370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "262D115C-6BA7-49F2-860B-E5801EFA8CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305EBECA-157E-455A-B64E-3B472D426022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAABF00-5A83-48E4-B13C-70804D3E13F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4213973A-A2C2-4268-BCC8-760EE0848ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5460D189-1A4D-4BF5-8408-5ED2F75000F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brian_wotring:osiris:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A89BBB7B-B10E-4E48-A872-55D8570BAA5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osiris.shmoo.com/ChangeLog",
        "source" : "security@debian.org"
      }, {
        "url" : "http://osiris.shmoo.com/download.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21257",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21265",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1129",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27645",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19213",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3072",
        "source" : "security@debian.org"
      }, {
        "url" : "http://osiris.shmoo.com/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osiris.shmoo.com/download.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PhpProBid 5.24 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) view o (2) start de (a) viewfeedback.php o el parámetro (3) orderType de (b) categories.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_pro_bid:php_pro_bid:5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0312A85-3D9B-4C5A-9491-099F85175766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21201",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016595",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19158",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en auctionsearch.php en PhpProBid 5.24 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro advsrc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_pro_bid:php_pro_bid:5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0312A85-3D9B-4C5A-9491-099F85175766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21201",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19158",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_datapath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo PHP en index.php en WMNews 0.2a y versiones anteriores permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro base_datapath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mikael_software:wmnews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2a",
            "matchCriteriaId" : "AFC96431-0082-4D44-B637-996CC9061F2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21234",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19187",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40(PT.0)b32 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the a parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la secuencia Forms/rpSysAdmin del router ADSL Zyxel Prestige 660H-61 ejecutando el software empotrado (firmware) 3.40(PT.0)b32 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante valores codificados en hexadecimal en el parámetro a."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:zyxel:prestige_660h-61:firmware_3.40_pt.0_b32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1FBBC1E-ADC4-4155-96F5-731F39944432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eazel.es/media/advisory004-Zyxel-Prestige-660H-61-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441193/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19180",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eazel.es/media/advisory004-Zyxel-Prestige-660H-61-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441193/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin.a6mambohelpdesk.php de a6mambohelpdesk Mambo Component 18RC1 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_live_site."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:a6mambohelpdesk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "A460C507-B537-4890-854F-0351E24617CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:a6mambohelpdesk:18_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D35FF831-9C48-42ED-B04E-61FE6E3FE4E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19198",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execute arbitrary code via a long command line argument (filename).  NOTE: This may not be a vulnerability if Midirecord is not installed setuid."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función daemon del midirecord.cc en el Tuomas Airaksinen Midirecord 2.0  permite a usuarios locales ejecutar código de su elección mediante un comando largo en la línea de argumentos (filename). NOTA: Esto puede no ser una vulnerabilidad si el Midirecord no tiene instalado el setuid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuomas_airaksinen:midirecord:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C9B1FF-B432-4646-B84D-D5B619E83569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv41-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441204/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19190",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv41-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441204/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en links.php en Gonafish LinksCaffe 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gonafish:linkscaffe:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A613FE7C-009E-460A-864F-FFA2EFEA262D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation via the \"cat\" parameter requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Alkacon OpenCms before 6.2.2 permite a atacantes remotos autenticados inyectar secuencias de comandos web o HTML de su elección mediante el cuerpo del mensaje."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "7E346469-F1FE-40C0-AC3E-E61121770398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8369451E-7C00-4CC3-9B80-871559E3F59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4F9A11-BF2F-4C12-AE12-480EE547DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A4931F-1EA7-48E5-B369-FA013FB87D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D23BDD-8C14-44B4-83C3-26F4F35526A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F73D28-272C-4271-BDA1-ACCFA3F8EEDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21193",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opencms.org/opencms/en/shownews.html?id=1002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441182/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opencms.org/opencms/en/shownews.html?id=1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441182/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nAlkacon, OpenCms, 6.2.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de ruta absoluta en downloadTrigger.jsp en Alkacon OpenCms anterior a 6.2.2 permite a usuarios remotos autenticados bajarse ficheros de su elección mediante un nombre de ruta absoluto en el parámetro filePath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.1",
            "matchCriteriaId" : "7E346469-F1FE-40C0-AC3E-E61121770398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8369451E-7C00-4CC3-9B80-871559E3F59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4F9A11-BF2F-4C12-AE12-480EE547DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A4931F-1EA7-48E5-B369-FA013FB87D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D23BDD-8C14-44B4-83C3-26F4F35526A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F73D28-272C-4271-BDA1-ACCFA3F8EEDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21193",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opencms.org/opencms/en/shownews.html?id=1002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441182/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opencms.org/opencms/en/shownews.html?id=1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441182/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nAlkacon, OpenCms, 6.2.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages to all users (/workplace/broadcast), (2) list all users (/accounts/users), (3) add webusers (/accounts/webusers/new), (4) upload database import and export files (/database/importhttp), (5) upload arbitrary program modules (/modules/modules_import), and (6) read the log file (/workplace/logfileview) by setting the appropriate value for the path parameter in a direct request to admin-main.jsp."
      }, {
        "lang" : "es",
        "value" : "system/workplace/views/admin/admin-main.jsp en Alkacon OpenCms before 6.2.2 no restringe el acceso a funciones de administración, lo cual permite a usuarios remotos autenticados (1) enviar mensajes de difusión a todos los usuarios (/workplace/broadcast), (2) listar todos los usuarios (/accounts/users), (3) añadir usuarios de la web (/accounts/webusers/new), (4) subir ficheros de importación y exportación de la base de datos (/database/importhttp), (5) subir módulos de programa de su elección (/modules/modules_import), y (6) leer el fichero de log (/workplace/logfileview) estableciendo el valor apropiado en parámetro path en una petición directa a admin-main.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8369451E-7C00-4CC3-9B80-871559E3F59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4F9A11-BF2F-4C12-AE12-480EE547DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A4931F-1EA7-48E5-B369-FA013FB87D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D23BDD-8C14-44B4-83C3-26F4F35526A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F73D28-272C-4271-BDA1-ACCFA3F8EEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26A8441-4BB4-423A-99D7-79D2537A91DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21193",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opencms.org/opencms/en/shownews.html?id=1002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441182/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opencms.org/opencms/en/shownews.html?id=1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441182/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp."
      }, {
        "lang" : "es",
        "value" : "system/workplace/editors/editor.jsp en Alkacon OpenCms anterior a 6.2.2 permite a usuarios remotos autenticados leer el código fuente de ficheros JSP de su elección especificando el fichero en el parámetro resource, como ha sido demostrado usando index.jsp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8369451E-7C00-4CC3-9B80-871559E3F59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4F9A11-BF2F-4C12-AE12-480EE547DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35A4931F-1EA7-48E5-B369-FA013FB87D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72D23BDD-8C14-44B4-83C3-26F4F35526A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F73D28-272C-4271-BDA1-ACCFA3F8EEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26A8441-4BB4-423A-99D7-79D2537A91DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21193",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opencms.org/opencms/en/shownews.html?id=1002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441182/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.opencms.org/opencms/en/shownews.html?id=1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441182/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (1) user, (2) mail, (3) p, or (4) url parameter, which reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "post.php en x_atrix xGuestBook 1.02 permite a atacantes remotos obtener información sensible mediante una petición sin los parámetros (1) user, (2) mail, (3) p, o (4) url, lo cual revela la ruta de instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xguestbook:xguestbook:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD28597E-1E4F-4DCD-8C3D-3BEB894D1515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441170/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441170/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit_cat.php, (2) index.php, (3) edit_link.php in ecrire/tools/blogroll/; (4) syslog/index.php, (5) thememng/index.php, (6) toolsmng/index.php, (7) utf8convert/index.php in /ecrire/tools/; (8) /ecrire/inc/connexion.php and (9) /inc/session.php; (10) class.blog.php, (11) class.blogcomment.php, (12) and class.blogpost.php in /inc/classes/; (13) append.php, (14) class.xblog.php, (15) class.xblogcomment.php, and (16) class.xblogpost.php in /layout/; (17) form.php, (18) list.php, (19) post.php, or (20) template.php in /themes/default/, which reveal the installation path in error messages."
      }, {
        "lang" : "es",
        "value" : "DotClear permite a atacantes remotos obtener información confidencial mediante una petición directa de (1) edit_cat.php, (2) index.php, (3) edit_link.php en ecrire/tools/blogroll/; (4) syslog/index.php, (5) thememng/index.php, (6) toolsmng/index.php, (7) utf8convert/index.php en /ecrire/tools/; (8) /ecrire/inc/connexion.php y (9) /inc/session.php; (10) class.blog.php, (11) class.blogcomment.php, (12) y class.blogpost.php en /inc/classes/; (13) append.php, (14) class.xblog.php, (15) class.xblogcomment.php, y (16) class.xblogpost.php en /layout/; (17) form.php, (18) list.php, (19) post.php, or (20) template.php in /themes/default/, que revela la ruta de instalación en mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94896556-5D43-4C54-A49C-301511B69EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7B92DB-62E4-4F4F-BC57-2C5F646C13CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49EEF727-A23D-47AE-BE4E-238290246BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotclear:dotclear:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F6A6A-717B-4B94-B4D0-26C2BAC1E66D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440874/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459820/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone14.free.fr/advisories/8/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440874/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459820/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone14.free.fr/advisories/8/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in (1) filter.php, which permits changing the Extensions Mode file type; (2) access.php, which permits changing the Protection Method; (3) edituser.php, which permits adding upload capabilities to user accounts; (4) settings.php, which permits changing the admin information; and (5) index.php, which permits uploading of arbitrary files."
      }, {
        "lang" : "es",
        "value" : "ScriptsCenter ezUpload Pro 2.2.0 permite a atacantes remotos realizar actividades administrativas sin autenticación en (1) filter.php, que permite el cambio del tipo de modo de extensiones de fichero; (2) access.php,  que permite el cambio de método de protección; (3) edituser.php, que permite añadir a cuentas de usuario, capacidad de promoción de ficheros; (4) settings.php, que permite cambiar información de administrador; y (5) index.php, que permite la promoción de ficheros de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scriptscenter:ezupload_pro:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6675F5-A39C-4B34-9852-13EA0E6CB525"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441172/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441172/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the ar parameter in auction_room.php and (2) the u parameter in auction_store.php. NOTE: the auction_rating.php vector is already covered by CVE-2005-1234.  NOTE: the original disclosure states that the product name is \"PHP-Auction\", but this is probably an error."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en phpbb-Auction permiten a atacantes remotos ejecutar comandos SQL de su elección  a través del parámetro (1) \"ar\" en auction_room.php y (2) \"u\" en auction_store.php. \r\nNOTA: El vector auction_rating.php está ya descrito en CVE-2005-1234.\r\nNOTA: La descripción original apunta que el nombre de producto es \"PHP-Auction\", pero es un error probablemente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.0m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F5D33F-0B64-4723-A4E8-36B2C0414C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.2m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C0E5A1-0E90-42BB-92F4-6DECACC18BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb-auction:1.3m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F92D73E-5F07-4BDA-B7EB-312080DF4DB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/advisory/phpauction.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441190/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/advisory/phpauction.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441190/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause a denial of service (grid service shutdown) and possibly execute arbitrary code using buffer overflows via unknown vectors that cause (1) qmaster or (2) execd to terminate."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en los demonios para Sun N1 Grid Engine 5.3 y N1 Grid Engine 6.0 permiten a usuarios locales provocar denegación de servicio (caida del servicio de grid) y posiblemente ejecutar código de su elección utilizando el desbordamiento de búfer a través de vectores desconocidos que provocan la finalización de (1) qmaster o (2) execd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:n1_grid_engine:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAFAA2F7-E9F5-490A-8EC7-9AA6A4044E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:n1_grid_engine:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CB1FFB-0D29-4214-BA95-CFDC3B3515AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21185",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22425",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016607",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102322-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19218",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3066",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102322-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an \"SMB PIPE,\" aka the \"Mailslot DOS\" vulnerability.  NOTE: the name \"Mailslot DOS\" was derived from incomplete initial research; the vulnerability is not associated with a mailslot."
      }, {
        "lang" : "es",
        "value" : "El controlador de servidor (srv.sys) en Microsoft Windows NT 4.0, 2000, XP, y Server 2003 permite a atacantes remotos provocar una denegación de servicio (caída del sistema) mediante un mensaje SMB_COM_TRANSACTION que contiene una cadena sin terminación de carácter nulo, lo cual lleva a una referencia a NULL en la función ExecuteTransaction, posiblemente relacionado con una \"tubería SMB\" (SMB PIPE), también conocida como vulnerabilidad \"Mailslot DOS\". NOTA: el nombre \"Mailslot DOS\" es derivado de una investigación inicial imcompleta; la vulnerabilidad no está asociada con un mailslot (ranura de correo)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/07/28/443837.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21276",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/common/showdoc.php?idx=562&idxseccion=10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443287/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/07/28/443837.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/common/showdoc.php?idx=562&idxseccion=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443287/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via long (1) RGBExtraColor, (2) RGBForeColor, and (3) RGBBackColor properties."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en NDFXArtEffects de Microsoft Internet Explorer 6 en Windows XP SP2 permite a atacantes remotos provocar una denegación de servicio (caída) mediante propiedades largas (1) RGBExtraColor, (2) RGBForeColor, y (3) RGBBackColor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-27-ndfxarteffects-rgbextracolor.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19184",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-27-ndfxarteffects-rgbextracolor.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1 object with the ListWidth property set to (a) 0x7fffffff, which triggers an integer overflow exception, or to (b) 0x7ffffffe, which triggers a null dereference."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 en Windows XP SP2 permite a atacantes remotos provocar una denegación de servicio (caída) mediante un objeto (1) Forms.ListBox.1 o (2) Forms.ListBox.1 con la propiedad ListWidth establecida a (a) 0x7fffffff, lo cual provoca una excepción de desbordamiento de entero, o a (b) 0x7ffffffe, lo cual provoca una referencia nula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81C4C1ED-AC7D-4970-8B34-62D304A83FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-24-formslistbox1-listwidth.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-24-formslistbox1-listwidth.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad CSS en Opera 9 en Windows XP SP2 permite a atacantes remotos provocar una denegación de servicio (caída) estableciendo la propiedad background de un elemento DHTML con una URL http o https larga, lo cual provoca una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-26-opera-css-background.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27374",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2987",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27977",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-26-opera-css-background.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ],
      "evaluatorSolution" : "This vulnerability may be addressed in the following product update:\r\nOpera Software, Opera Web Browser , 9.01"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-07-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a \"memory management error\" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag."
      }, {
        "lang" : "es",
        "value" : "WebCore en Apple Mac OS X 10.3.9 y 10.4 hasta 10.4.7 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante HTML artesanal que provoca un \"error de gestión de memoria\" en WebKit, posiblemente debido a un desbordamiento de buffer, como fue originalmente reportado para la función KHTMLParser::popOneBlock en Apple Safari 2.0.4 usando Javascript que cambia document.body.innerHTML dentro de una etiqueta DIV."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDCF83E-620C-40FA-9901-5D939E315143"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21271",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19250",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3069",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en components/com_mambatstaff/mambatstaff.php en el componente Mambatstaff 3.1b y anteriores para Mambo permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambatstaff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1b",
            "matchCriteriaId" : "BB52D8D1-E8ED-46FA-9B57-F9900D711EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441538/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19222",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441538/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en modules.php en PHP-Nuke INP permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro query."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-nuke:inp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B889A443-E2B1-46B9-AB1D-1A015A25D2F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aria-security.net/advisory/inp.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441490/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19208",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aria-security.net/advisory/inp.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441490/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en artlinks.dispnew.php en el componente Artlinks (com_artlinks) para Mambo permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:artlinks_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2F6F91-E3F8-4062-8995-2EF4A9B6A18D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441541/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19223",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441541/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en x-statistics.php en X-Scripts X-Statistics 1.20 permite a atacantes remotos ejecutar comandos SQL a través de la cabecera HTTP User-Agent."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x-scripts:x-statistics:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA76CAE7-2CEF-413C-BD5A-67692C5A046C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0722.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21281",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19237",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0722.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en moodle.php en el componente Mam-moodle alpha (com_moodle) para Mambo permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mam-moodle_alpha_component:mam-moodle_alpha_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EBD8A0-858E-4015-91E1-755A172246BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long argument to the PASS command.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en EFS Software Easy File Sharing FTP Server 2.0 permite a atacantes remotos ejecutar código de su elección a través de un argumento en el comando PASS. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efs_software:efs_ftp_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A43D5D-510B-479E-AB5A-5269922D91C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21289",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en usercp.php en MyBB (aka MyBulletinBoard) 1.x permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro gallery."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2F2E0F-94E6-4D63-903F-0090E9D90BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC63F97-643C-43B9-83E5-E43928CB1CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43876FE9-F002-4524-B6C2-5DE4992E0A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE10B8B4-167D-430D-9C7D-6CF934F17D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4_security_patch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488811F6-7CC9-4F56-AD7C-81247B351851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD20FC3-BAE3-4623-B64D-3AA7073C404A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4409B6-9F4D-4136-BA74-43736215A122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EC0E67-111A-4989-A311-6B051D37CEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525AD7D5-C94C-4BCD-8C03-B48E8BC91BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42490451-EA60-4C61-99FB-526EFA3CBA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956399FC-9377-478D-98E9-0024C61CA7E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441534/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19193",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441534/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to read arbitrary files via a .. (dot dot) in the gallery parameter in a (1) avatar or (2) do_avatar action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en usercp.php en MyBB (también conocido como MyBulletinBoard) 1.x permite a atacantes remotos leer archivos de su elección a través de la secuencia ..(punto punto) en el parámetro gallery en un acción  (1) avatar o (2) do_avatar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB91E8F-52F1-4514-88DC-F2749973CB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F2F2E0F-94E6-4D63-903F-0090E9D90BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC63F97-643C-43B9-83E5-E43928CB1CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43876FE9-F002-4524-B6C2-5DE4992E0A3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97857E46-5AB0-4C34-9BE8-9462784537C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE10B8B4-167D-430D-9C7D-6CF934F17D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4_security_patch:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488811F6-7CC9-4F56-AD7C-81247B351851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD20FC3-BAE3-4623-B64D-3AA7073C404A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4409B6-9F4D-4136-BA74-43736215A122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EC0E67-111A-4989-A311-6B051D37CEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525AD7D5-C94C-4BCD-8C03-B48E8BC91BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42490451-EA60-4C61-99FB-526EFA3CBA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956399FC-9377-478D-98E9-0024C61CA7E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441534/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19195",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441534/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) news.php, (2) search.php, or (3) whosOnline.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en MiniBB Forum 1.5a permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro absolute_path en (1) news.php, (2) search.php, o (3) whosOnline.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minibb:minibb:1.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45C3917-F235-440C-BA25-09D55323D40E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016557",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016558",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440839/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440875/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19095",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440839/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440875/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) AccountUsername and (3) Message parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en  contact.php en Advanced Webhost Billing System (AWBS) 2.2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) Name, (2) AccountUsername y (3) Message."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:total_online_solutions:advanced_webhost_billing_system:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EFF6355-308F-4608-B742-1182E1BD1716"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21296",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441532/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441532/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en payment.php en BosDev BosDates permiet a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro insPath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bosdev:bosdates:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D797B5A-D235-4CDD-8E90-51BCA4B62173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bosdev:bosdates:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBF0B76-1C90-4B98-A92E-628AEE74A7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bosdev:bosdates:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77A19F9-4400-4AE1-B163-6F49A040570F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bosdev:bosdates:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610BF53A-AF03-4E22-957B-D37032EA8A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016585",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.jaascois.com/exploits/18602020",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19191",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.jaascois.com/exploits/18602020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified cross-site scripting (XSS) vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the Search Tasks system, or authenticated users via (2) the Edit Task system, (3) the back-end Category Editor system, and (4) \"Pages that display task status, email addresses, URL, customer, and project information.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Taskjitsu 2.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del sistema (1) Search Tasks, o usuarios validados a través del sistema (2)Edit Task, (3) el sistema back-end Category Editor, y (4) Páginas que muestran el estado de la tarea, dirección email, URL, cliente, y información deol proyecto\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EABEE0-5CAD-40BA-9E6F-D98A609FFBC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21242",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pkrinternet.com/download/RELEASE-NOTES.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3058",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.pkrinternet.com/taskjitsu/task/3477",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/21242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pkrinternet.com/download/RELEASE-NOTES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.pkrinternet.com/taskjitsu/task/3477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en protect.php en X-Scripts X-Protection 1.10, con magic_quotes_gpc desactivado, permite a atacanets remotos ejecutar comandos SQL de su elecciòn a través de los parámetros (1) username y (2) password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x-scripts:x-statistics:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EBD5E06-A54F-4106-B8B0-48CC3758CB0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/x-protection_poc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21282",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19235",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/x-protection_poc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en top.phpn en X-Scripts X-Poll, posiblemente 2.30, permite a atacantes remotos ejecutar comandos SQL de su elección a tracés del parámetro poll. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x-scripts:x-poll:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FB8376-A097-4CAE-9A91-F9D55B43408D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0720.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/x-poll_poc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19236",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0720.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/x-poll_poc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en control ActiveX McSubMgr (mcsubmgr.dll) en McAfee Security Center 6.0.23 para Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, y QuickClean permite a atacantes con la intervención del usuario ejecutar comandos de su elección a través de paráametros string, los cuales son posteriormente usados en vsprintf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:antispyware:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B862ADF2-A544-4729-9EE4-D140C58D6AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:antispyware:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5350EE37-53D7-4DFB-84FC-0FA6A7C1C123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A7659-25FF-4E18-B2BA-34F6FD6410F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C22BB62-9790-4D89-B1B4-D5E0F4FFB3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E69BB96-F48B-43DA-BA7B-530E5148CCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:personal_firewall_plus:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E0836-557F-46C8-BBDE-955D3AEBB6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:personal_firewall_plus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F62AF06-16DD-4C6C-BD48-BFA08629739C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:personal_firewall_plus:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134C4C4F-92A0-4B89-B06A-4FB8D9513AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:privacy_service:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F945365-B065-44A6-8CEC-2CBCE4DD23C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:privacy_service:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1AC389-8BBF-4784-ABCD-99E379AC6B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:privacy_service:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E03296D-5FC1-450D-BC05-6F6E9A90CF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:quickclean:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "931427A2-B69B-4418-8374-854A5F9420DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:quickclean:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19A9E38-E637-487A-BC06-F0CA6481E7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:quickclean:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3B1863-DBB3-4458-899B-CEEAD9275B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:security_center:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD547C9C-9D50-49ED-8EFE-1DD7484DDED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:security_center:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "210F5447-4FC7-4278-9F2A-C64BBB5A86DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:security_center:6.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BECBD40D-ACBD-4E88-B230-ECFE98FD9F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:security_center:6.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82098C7-30FE-464E-891F-868A0209D9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:spamkiller:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0652B16C-7D9A-4743-AB54-6F205CA1E76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:spamkiller:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBC8F91-2534-4DAC-BDE3-AE49E19A6A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:spamkiller:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B33F2AC-4BBE-4DE0-A61E-378972011BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9B7B07-E3EF-4185-927C-CE308829B9A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58D6A2F-AC08-4C1D-9ABF-4D675A1E87AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E96246D-3184-4BBB-8675-9B1CBE0B977C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:wireless_home_network_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3DC47F-853B-44B0-BD8B-C2EE4530B333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ts.mcafeehelp.com/faq3.asp?docid=407052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD2006807.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20060719.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/481212",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442495/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19265",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3096",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://ts.mcafeehelp.com/faq3.asp?docid=407052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD2006807.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/upcoming/20060719.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/481212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442495/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in administrator/components/com_bayesiannaivefilter/lang.php in the bayesiannaivefilter component (com_bayesiannaivefilter) 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en administrator/components/com_bayesiannaivefilter/lang.php en el componente bayesiannaivefilter (com_bayesiannaivefilter) 1.1 para Mambo permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:bayesiannaivefilter:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AAAD24-EC18-4DD0-836D-671FDE31998C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the (1) site_name parameter to (a) signup.php, and the (2) id, (3) deleteuserbanner, (4) viewmem, (5) viewmemunb, (6) viewunmem,or (7) deleteuser parameters to (b) admin.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de inyección SQL en Banex PHP MySQL Banner Exchange 2.21 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) site_name en (a) signup.php, y los parámetros (2) id, (3) deleteuserbanner, (4) viewmem, (5) viewmemunb, (6) viewunmem,o (7) deleteuser en (b) admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banex:banex:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14267D1-7C86-437A-BD1B-31D745D8F637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115423462216111&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19240",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115423462216111&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_root parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en members.php en Banex PHP MySQL Banner Exchange 2.21 permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro cfg_root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banex:banex:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14267D1-7C86-437A-BD1B-31D745D8F637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115423462216111&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19240",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115423462216111&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as database usernames and passwords."
      }, {
        "lang" : "es",
        "value" : "Banex PHP MySQL Banner Exchange 2.21 almacena lib.inc bajo el root de documentación web con insuficientes controles de acceso, lo cual permite a atacantes remotos obtener información sensible como la base de datos de nombres de usuario y contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:banex:banex:2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14267D1-7C86-437A-BD1B-31D745D8F637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115423462216111&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115423462216111&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myng_root parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en /lib/tree/layersmenu.inc.php en el paquete PHP Layers Menu 2.3.5 para MyNewsGroups 0.6b y anteriores permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro myng_root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carlos_sanchez_valle:mynewsgroups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6b",
            "matchCriteriaId" : "A76E13F5-E575-4A7D-A07F-D6A6D98532AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_layers_menu:php_layers_menu:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319F10A0-7AAA-43C4-850E-E77629ADF03B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21263",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_266.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441734/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19258",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3073",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_266.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441734/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en component/option,com_moskool/Itemid,34/admin.moskool.php en MamboXChange Moskool 1.5 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moskool:moskool:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D4D2B5-B896-47DD-A460-4E6D26186DFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441710/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19245",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441710/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified."
      }, {
        "lang" : "es",
        "value" : "El proveedor crypto en Sun Solaris 10 3/05 HW2 sin el parche 121236-01, cuando funciona bajo plataformas Sun Fire T2000, verifica incorrectamente una firma DSA, lo cual \t\r\npuede evitar que las aplicaciones detecten que los datos se han modificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:hw2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEB91FE-FB39-4AB2-8172-2A47EC59861B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102543-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102543-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in administrator/components/com_colophon/admin.colophon.php in Colophon 1.2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en administrator/components/com_colophon/admin.colophon.php en Colophon 1.2 y anteriores para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:colophon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "6BCBD381-E917-4AFA-AAC4-3F975AA06AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21288",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19252",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-01T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com_lmo) 1.0b2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en lmo.php en el componente LMO (com_lmo) 1.0b2 y anteriores para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:lmo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0b2",
            "matchCriteriaId" : "65BD3D94-8FE3-442E-BF27-1F1785254E0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.joomla.org/sf/sfmain/do/viewProject/projects.lmo",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C100164.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C81590.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.joomla.org/sf/sfmain/do/viewProject/projects.lmo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C100164.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C81590.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-02T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en AFP Server en Apple Mac OS X 10.3.9 permite a atacantes remotos determinar nombres de ficheros y carpetas no autorizados a través de vectores desconocidos  relacionados con los resultados de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-02T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en AFP Server for Apple Mac OS X 10.3.9 y 10.4.7 permite a atacantes remotos provocar denegación de servicio (caida) y ejecutar código de su elección a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/575372",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/575372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-02T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users."
      }, {
        "lang" : "es",
        "value" : "AFP Server en Apple Mac OS X 10.3.9 y 10.4.7 almacena llaves de reconexión en un fichero world-readable, lo cual permite a usuarios locales obtener las llaves y el acceso a ficheros y carpetas de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/168020",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/168020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-02T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service (crash) via an invalid AFP request that triggers an unchecked error condition."
      }, {
        "lang" : "es",
        "value" : "AFP Server en Apple Mac OS X 10.3.9 y 10.4.7 permite a atacantes remotos provocar denegación de servicio (caida) a través de respuestas no válidas AFP que disparan una condición de error no válida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/180692",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/180692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-02T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the \"compression state handling\" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Zip archive."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la \"dirección  del estado de la compresió\" en Bom for Apple Mac OS X 10.3.9 y 10.4.7 permite a atacantes con la intervención del usuario provocar denegación de servicio (caida de aplicación) y posiblemente ejecutar código de su elección a través de archivos zip manipulados.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/514740",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/514740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-02T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in bootpd in the DHCP component for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to execute arbitrary code via a crafted BOOTP request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en bootpd en el componente DHCP para Apple Mac OS X 10.3.9 y 10.4.7 permite a atacantes remotos ejecutar código de su elección a través de respuestas BOOTP manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/776628",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/776628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-02T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en visitor/livesupport/chat.php en Scott Weedon Ajax Chat, posiblemente 0.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro userid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_weedon:ajax_chat:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431CD4A1-F22C-4400-A067-9586F612C045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0716.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19238",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0716.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-02T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. (dot dot) in the chatid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en includes/operator_chattranscript.php en Scott Weedon Ajax Chat, posiblemente 0.1, permite a atacantes remotos leer archivos de su elección a través de la secuencia ..(punto punto) en el parámetro chatid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_weedon:ajax_chat:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431CD4A1-F22C-4400-A067-9586F612C045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0716.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19238",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0716.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Canon RAW image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búger en Apple Mac OS X 10.4.7 permite a atacantes con la intervención del usuario provocar denegación de servicio (caida de aplicación) y posiblemente ejecutar código de su elección a través de una imagen \r\nCanon RAW manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/527236",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/527236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang."
      }, {
        "lang" : "es",
        "value" : "OpenSSH en Apple Mac OS X 10.4.7 permite a atacantes remotos provocar denegación de servicio o determinar la existencia de cuetas intentando entrar utilizando un usuario no válido, lo cual hace que el servidor se cuelgue."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3459",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en la librería TIFF (libtiff)anterior a 3.8.2 permiten a atacantes locales o remotos (dependiendo del contexto) provocar una denegación de servicio y posiblemente ejecutar código de su elección a través de vectores desconocidos, incluyendo un valor grande de tdir_count en la función TIFFFetchShortPair de tif_dirread.c"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "A7E67F34-7951-4223-98CF-1651EEBD4A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta18:*:*:*:*:*:*",
            "matchCriteriaId" : "A0FB4929-8937-458C-88F0-E0484F84F921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta24:*:*:*:*:*:*",
            "matchCriteriaId" : "10457960-162A-443D-91D0-2857DCEB5B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta28:*:*:*:*:*:*",
            "matchCriteriaId" : "157D32AA-0783-4316-A8AA-1F4063B31C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta29:*:*:*:*:*:*",
            "matchCriteriaId" : "1C3379CF-499D-46CA-90DF-11F4CB7F4FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta31:*:*:*:*:*:*",
            "matchCriteriaId" : "52D44C48-E6DE-4E37-920F-7591771C7A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta32:*:*:*:*:*:*",
            "matchCriteriaId" : "08C0C0E9-6338-4320-BACF-B10939E53FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta34:*:*:*:*:*:*",
            "matchCriteriaId" : "C19CD7D3-036D-41E1-9E61-B274D079ACAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta35:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8470B2-2D9F-4507-85CB-2702555F7146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta36:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF2649-4998-479D-9FC5-9C749BA12E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.4:beta37:*:*:*:*:*:*",
            "matchCriteriaId" : "F304C7D0-7CA3-42D4-AB9F-382AA418E781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261FAE51-5207-4136-9FFE-2330A281266C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B32C83B9-F7DA-450A-A687-9A73734CD712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9485283A-B73E-4567-914A-42A86F5FFCB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95892168-0FB6-4E3F-9303-2F9B3CF60D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5021564-5E0A-4DDC-BC68-200B6050043E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11C50750-FE1D-42BA-9125-7D8E872AA2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C92B050F-30C7-421B-8556-9CC1A6D457B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "38D31C28-1DB2-454F-AF44-9898106FF5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCCA926-3993-4CE2-A3CB-B9FE2A1991F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "E68FD79C-D26E-4B86-A22C-96FC60438EFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC9867E-0FC3-4D93-8166-DA17ED88D199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.5.7:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1397747F-8A50-47B3-8164-221650080F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "65173C5E-B3D8-4428-8600-C3B34E3BB789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E99997F-033C-42FE-BCE8-CAC329DAFFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEEBA7B-81D5-4148-912B-9AD448BBE741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1663754A-2AF4-46BC-9196-E29D8C019892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "566C6E9C-318C-4C1E-86A8-429615215EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "22987AEF-ADA2-4D60-8C02-AFE6CD9A930B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448555FE-8E91-4EA7-BA05-6915F5508319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA0A79A-0591-4AC0-A2D1-40C34FA75B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8C1070-4A65-41A3-AD01-F12626042CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CD3B7F-24C5-49F4-93D2-CA43FF284907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BC5E2C-B6A6-4999-A1EA-B91DA5C350C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCA5699-BBF7-4112-B1E9-612A1CB260F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/blog/76",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27723",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19283",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11497",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/blog/76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3460",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en el decodificador JPEG de la librería TIFF (libtiff) anterior a 3.8.2 permite a atacantes locales o remotos (dependiendo del contexto) provocar una denegación de servicio y posiblemente ejecutar código de su elección mediante un flujo JPEG codificado que es más largo que el tamaño de la línea de escaneo (TiffScanLineSize)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "A7E67F34-7951-4223-98CF-1651EEBD4A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19288",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11265",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3461",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en el decodificador PixarLog en la biblioteca TIFF (libtiff) versiones anteriores a 3.8.2 podría permitir a atacantes locales o remotos dependientes del contexto ejecutar código de su elección mediante vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "A7E67F34-7951-4223-98CF-1651EEBD4A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27725",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19290",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9910",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3462",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el descodificador NeXT RLE en la librería TIFF (libtiff) anterior a 3.8.2 podría permitir a atacantes dependientes de contexto ejecutar código de su elección mediante vectores no especificados que implican la descodificación de imágenes RLE grandes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "A7E67F34-7951-4223-98CF-1651EEBD4A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304063",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27726",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19282",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11301",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3463",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop."
      }, {
        "lang" : "es",
        "value" : "La función EstimateStripByteCounts en TIFF library (libtiff) versiones anteriores a 3.8.2 utiliza un valor corto sin signo de 16-bit cuando itera sobre un valor sin signo de 32-bit, que permite a atacantes locales o remotos dependientes del contexto provocar una denegación de servicio mediante un valor largo td_nstrips, que dispara un bucle infinito."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "A7E67F34-7951-4223-98CF-1651EEBD4A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10639",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3464",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving \"unchecked arithmetic operations\"."
      }, {
        "lang" : "es",
        "value" : "La libreria TIFF (libtiff) anterior a 3.8.2 permite a atacantes dependientes del contexto pasar la validación de rango de números y posiblemente ejecutar código, y disparar avisos de error, a través de valores de offset en un directorio TIFF que conduce a un desbordamiento de entero y otros vectores no especificados afectando a \"operaciones aritméticas no validadas\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "A7E67F34-7951-4223-98CF-1651EEBD4A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19286",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10916",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3465",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el soporte de etiquetas personalizadas para la librería TIFF (libTIFF) anterior a 3.8.2 permite a atacantes remotos provocar una denegación de servicio (inestabilidad o caída) y ejecutar código de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.1",
            "matchCriteriaId" : "A7E67F34-7951-4223-98CF-1651EEBD4A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304063",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/27729",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19287",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9067",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lwn.net/Alerts/194228/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0603.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0648.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-330-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dynamic linker (dyld) in Apple Mac OS X 10.3.9 allows local users to obtain sensitive information via unspecified dynamic linker options that affect the use of standard error (stderr) by privileged applications."
      }, {
        "lang" : "es",
        "value" : "El enlazador dinámico (dyld) en Apple Mac OS X 10.3.9 permite a usuarios locales obtener información sensible a través de opciones de enlazadores dinámicos no especificados que afectan al uso del error estandar (stderr) a aplicaciones privilegiadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an \"improperly handled condition\" that leads to use of \"dangerous paths,\" probably related to an untrusted search path vulnerability."
      }, {
        "lang" : "es",
        "value" : "El enlazador dinámico (dyld) en Apple Mac OS X 10.4.7 permite a usuarios locales ejecutar código de su elección a través de una \"condición de manejo incorrecta\" que conduce al uso de \"parches peligrosos\", posiblemente relacionados con una vulnerabilidad del camino de búsqueda no confiable en un fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Radiance image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en ImageIO for Apple Mac OS X 10.4.7 permite a atacantes con la interacción de un usuario provocar denegación de servicio (caida de aplicación) y posiblemente ejecutar código de su eleccción a través de imágenes Raidance manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/172244",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/172244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en ImageIO en Apple Mac OS X 10.4.7 permite a atacantes con la intervención del usuario provocar denegación de servicio (caida) y problemente ejecutar código de su elección a través imágenes GIF manipuladas que disparan fallos de localización de memoria que es no es manejada adecuadamente.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/651844",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/651844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed GIF image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en ImageIO en Apple Mac OS X 10.4.7 permite atacantes con la intervención del usuario provocar denegación de servicio (caida) y posiblemente ejecutar código de su elección a través de imágenes GIF manipuladas. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/605908",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/605908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as \"safe\", which could allow attackers to execute Javascript code in local context when the \"Open 'safe' files after downloading\" option is enabled in Safari."
      }, {
        "lang" : "es",
        "value" : "El validador de descargas en LaunchServices para Apple Mac OS X 10.4.7 puede identificar cierto HTML como \"seguro\",lo cual podría permitir a atacantes ejecutar código Javascript en un contexto local cuan la opción \"Abrir archivos seguros después de la descarga\" está habilitada en Safari."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-03T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated."
      }, {
        "lang" : "es",
        "value" : "WebKit en Apple Mac OS X 10.3.9 y 10.4.7 permite a atacantes remotos provocar denegación de servicio (caida) y posiblemente ejecutar código de su elección a través de documentos HTML manipulados que provocan que WebKit acceda a un objeto que se ha desasignado ya."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/566132",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/566132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-214A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3634",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-04T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) __futex_atomic_op and (2) futex_atomic_cmpxchg_inatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial of service (crash)."
      }, {
        "lang" : "es",
        "value" : "Las funciones (1) __futex_atomic_op y (2) futex_atomic_cmpxchg_inatomic en Linux kernel 2.6.17-rc4 hasta 2.6.18-rc2 reakuza ka ioeracuñib atómica futex con direcciones del espacio del usuario en vez de direcciones del espacio del núcleo, que permite que los usuarios locales provoquen una denegación de servicio (caida)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://security-tracker.debian.org/tracker/CVE-2006-3634",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bafe00cc9297ca77b66e5c83e5e65e17c0c997c8",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security-tracker.debian.org/tracker/CVE-2006-3634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bafe00cc9297ca77b66e5c83e5e65e17c0c997c8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-04T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CA eTrust Antivirus WebScan allows remote attackers to execute arbitrary code due to \"improper bounds checking when processing certain user input.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en CA eTrust Antivirus WebScan permite a atacantes remotos ejecutar código de su elección a través debido a \"compruebam límites incorrectos al procesar cierta entrada de usuario\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus_webscan:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5348B10B-A66B-4AD2-B4F2-D80DFE7A3B01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21320",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442244/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3166",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442244/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-04T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en CA eTrust Antivirus WebScan anterior a 1.1.0.1048 permite a atacantes remotos intalar archivos de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus_webscan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0.1047",
            "matchCriteriaId" : "72BC261E-629B-4C66-804D-8611FE8D8880"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21320",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442244/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442244/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-04T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 has unknown impact and remote attackers related to \"improper processing of outdated WebScan components.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabildiad no especificada en CA eTrust Antivirus WebScan anterio a 1.1.0.1048 tiene un impacto desconocido y ataques remotos relacionados con \"procedimientos impropios de componentes fuera WebScan fuera de fecha\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus_webscan:1.1.0.1045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B33272-7628-4520-8A85-B62C35FCDA3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_antivirus_webscan:1.1.0.1047:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007D4E05-96F6-4E7C-A130-62F10E5A1767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21320",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442244/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34509",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442244/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an unspecified decryption method."
      }, {
        "lang" : "es",
        "value" : "Symantec On-Demand Agent (SODA) anterior a 2.5 MR2 Build 2157, y el módulo Virtual Desktop en Symantec On-Demand Protection (SODP) anterior 2.6 Build 2233, no encripta de forma adecuada archivos que estén sujetos a la política de encriptación automática, lo cual permitiría a un usuario local leer datos sensible a través de un metodo de desencriptación no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:on-demand_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5_mr2_build_2156",
            "matchCriteriaId" : "5A7E6EA1-C9A9-4342-8E10-6D90F504C6BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:on-demand_protection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6_build_2232",
            "matchCriteriaId" : "BBAED8BE-C5B7-4E5A-AB4D-7E525D342E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441850/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.08.01a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441850/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.08.01a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en administrator/components/com_mgm/help.mgm.php en Mambo Gallery Manager (MGM) 0.95r2 y anteriores para Mambo 4.5 permite a atacantes remotos ejecutar código PHP de su eleccción a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_gallery_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95r2",
            "matchCriteriaId" : "D71CAC0A-40FC-44EF-8A67-7FB7BE2065E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21268",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441533/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19224",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441533/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en about.mgm.php en Mambo Gallery Manager (MGM) 0.95r2 y anteriores para Mambo 4.5 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo_gallery_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95r2",
            "matchCriteriaId" : "D71CAC0A-40FC-44EF-8A67-7FB7BE2065E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/3054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code via a URL in the QUICK_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en quickie.php en Knusperleicht Quickie, probablemente 0.2, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro QUICK_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:quickie:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6379377E-6247-404C-8113-FFCAF2E6B2DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441814/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19271",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441814/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en editprofile.php en php(Reactor) 1.27pl1 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro pathtohomedir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekilat_llc:php\\(reactor\\):1.27pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5246C71A-5590-416E-98F2-4DF6C5164037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19259",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en phpAdsNew/view.inc.php en Albasoftware Phpauction 2.1 y posiblemente versiones posteriores con phpAdsNew 2.0.5, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro phpAds_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gianluca_baldo:phpauction:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834E6244-8A54-4D49-833E-C49D047D93E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CE9A50-87BA-4BEC-9076-9E0C24B2E972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_264.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19254",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_264.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en ZIPS32.DLL 6.0.0.4 en ConeXware PowerArchiver 9.62.03 permite a atacantes con la intervención del usuario ejecutar código de su elección añadiendo un nuevo archivo a un archivo ZIP manipulado que contiene un archivo con un largo nombre.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conexware:powerarchiver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.62.03",
            "matchCriteriaId" : "000EEA11-311D-41F6-868C-B3C4F7CDD49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conexware:powerarchiver:8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86DFD9C-5149-4251-BF39-679459E4304B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conexware:powerarchiver:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC5B97E-ADB2-4160-9E7A-85708FB34F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conexware:powerarchiver:9.5_beta_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFEF804-FC89-4991-922A-B3F681628BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conexware:powerarchiver:9.5_beta_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3284CFB0-7124-4832-8A46-9C338CC45D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conexware:powerarchiver:9.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "971CEC5F-FF6A-4BF2-8C48-E1F1A9D48C7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21199",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://vuln.sg/powarc962-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.powerarchiver.com/blog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441205/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19143",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2971",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://vuln.sg/powarc962-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.powerarchiver.com/blog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441205/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nConeXware, PowerArchiver, 9.63"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NL_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en Knusperleicht Newsletter 3.5 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro NL_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:newsletter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "4890D8D2-26D7-4C89-A318-FFDFF1C358D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21314",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441807/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19267",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441807/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) dwl_download_path or (2) dwl_include_path parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en index.php en Knusperleicht FileManager 1.2 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros (1) dwl_download_path o (2) dwl_include_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:knusperleicht_filemanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "17C8DFCC-22C5-4469-9D03-8FAE9FC57FA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441813/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19270",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441813/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Knusperleicht newsReporter 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the news_include_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en Knusperleicht newsReporter 1.1 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro news_include_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:newsreporter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "3268678C-D59C-4CA7-9256-1DC34EE25EAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:newsreporter:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623ED548-2540-4F3B-8488-594350FC42AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21312",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441808/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19275",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441808/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sb_include_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en Knusperleicht Shoutbox 4.4 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro sb_include_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:shoutbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4",
            "matchCriteriaId" : "91CCF2B4-9E98-428D-B6C6-E316E6E05F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:shoutbox:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAE8B3A-4906-45AE-B002-94C5E9CCB904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21302",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441815/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441815/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the com_mtree component for Mambo and Joomla!, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) Savant2_Plugin_stylesheet.php, (2) Savant2_Compiler_basic.php, (3) Savant2_Error_pear.php, (4) Savant2_Error_stack.php, (5) Savant2_Filter_colorizeCode.php, (6) Savant2_Filter_trimwhitespace.php, (7) Savant2_Plugin_ahref.php, (8) Savant2_Plugin_ahrefcontact.php, (9) Savant2_Plugin_ahreflisting.php, (10) Savant2_Plugin_ahreflistingimage.php, (11) Savant2_Plugin_ahrefmap.php, (12) Savant2_Plugin_ahrefownerlisting.php, (13) Savant2_Plugin_ahrefprint.php, (14) Savant2_Plugin_ahrefrating.php, (15) Savant2_Plugin_ahrefrecommend.php, (16) Savant2_Plugin_ahrefreport.php, (17) Savant2_Plugin_ahrefreview.php, (18) Savant2_Plugin_ahrefvisit.php, (19) Savant2_Plugin_checkbox.php, (20) Savant2_Plugin_cycle.php, (21) Savant2_Plugin_dateformat.php, (22) Savant2_Plugin_editor.php, (23) Savant2_Plugin_form.php, (24) Savant2_Plugin_image.php, (25) Savant2_Plugin_input.php, (26) Savant2_Plugin_javascript.php, (27) Savant2_Plugin_listalpha.php, (28) Savant2_Plugin_listingname.php, (29) Savant2_Plugin_modify.php, (30) Savant2_Plugin_mtpath.php, (31) Savant2_Plugin_options.php, (32) Savant2_Plugin_radios.php, (33) Savant2_Plugin_rating.php, or (34) Savant2_Plugin_textarea.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Paul M. Jones Savant2, posiblemente cuando es usado el componente com_mtree para Mambo y Joomla!, permitea a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path en (1) Savant2_Plugin_stylesheet.php, (2) Savant2_Compiler_basic.php, (3) Savant2_Error_pear.php, (4) Savant2_Error_stack.php, (5) Savant2_Filter_colorizeCode.php, (6) Savant2_Filter_trimwhitespace.php, (7) Savant2_Plugin_ahref.php, (8) Savant2_Plugin_ahrefcontact.php, (9) Savant2_Plugin_ahreflisting.php, (10) Savant2_Plugin_ahreflistingimage.php, (11) Savant2_Plugin_ahrefmap.php, (12) Savant2_Plugin_ahrefownerlisting.php, (13) Savant2_Plugin_ahrefprint.php, (14) Savant2_Plugin_ahrefrating.php, (15) Savant2_Plugin_ahrefrecommend.php, (16) Savant2_Plugin_ahrefreport.php, (17) Savant2_Plugin_ahrefreview.php, (18) Savant2_Plugin_ahrefvisit.php, (19) Savant2_Plugin_checkbox.php, (20) Savant2_Plugin_cycle.php, (21) Savant2_Plugin_dateformat.php, (22) Savant2_Plugin_editor.php, (23) Savant2_Plugin_form.php, (24) Savant2_Plugin_image.php, (25) Savant2_Plugin_input.php, (26) Savant2_Plugin_javascript.php, (27) Savant2_Plugin_listalpha.php, (28) Savant2_Plugin_listingname.php, (29) Savant2_Plugin_modify.php, (30) Savant2_Plugin_mtpath.php, (31) Savant2_Plugin_options.php, (32) Savant2_Plugin_radios.php, (33) Savant2_Plugin_rating.php, o (34) Savant2_Plugin_textarea.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpsavant:savant2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC38A402-358D-4D23-8C84-B36AEECE4B1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016560",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440835/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19151",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/440835/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en Vostrykh Voodoo chat 1.0RC1b  y anteriores permite a atacantes remotos ejecutar código PHP de su elección a tavés de una URL en el parámetro file_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voc-project:voodoo_chat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0_rc1b",
            "matchCriteriaId" : "A83A49AE-FE2E-4D61-B892-2A8A8A07002A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19277",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for Intel 2200BG and 2915ABG PRO/Wireless Network Connection before 10.5 with driver 9.0.4.16 allows remote attackers to execute arbitrary code via certain frames that trigger memory corruption."
      }, {
        "lang" : "es",
        "value" : "Vulnerabildad no especifica en los controladores Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, y (4) w29n51.sys Microsoft Windows para Intel 2200BG y 2915ABG PRO/Wireless Network Connection anterior a 10.5 con controlador 9.0.4.16 permite a atacantes remotos ejecutar código de su elección a través de de ciertas ventanas que disparan una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:2200bg_proset_wireless:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E404DE79-BF3C-44EF-8571-C469C7059A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:2200bg_proset_wireless:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3608BD54-923D-4791-9FA1-481FC8D81B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:2200bg_proset_wireless:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2E4E03-2BC1-4336-B490-7B6CC2E03EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:2915abg_proset_wireless:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F645B8-83D9-4B78-806D-55086CDA8F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:2915abg_proset_wireless:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D110B8-586E-4599-8101-3479E424D3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:2915abg_proset_wireless:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B358D661-D544-442A-B497-59CD4A6D0DF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.intel.com/support/wireless/wlan/sb/CS-023065.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/230208",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.intel.com/support/wireless/wlan/sb/CS-023065.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/230208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Affected versions are only vulnerable with driver version 9.0.4.16\r\nThis vulnerability is addressed in the following product releases:\r\nIntel, 2200BG PROSet/Wireless, 10.5\r\nIntel, 2915ABG PROSet/Wireless, 10.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en copyright.php en Olaf Noehring The Search Engine Project (TSEP) 0.942 permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro tsep_config[absPath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tsep:tsep:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.942",
            "matchCriteriaId" : "0F66C834-FFE5-40D5-8D2F-A8033027FF4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_269.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441828/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19268",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://svn.sourceforge.net/svnroot/tsep/tsep-svn/trunk/delivery/include/copyright.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_269.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441828/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://svn.sourceforge.net/svnroot/tsep/tsep-svn/trunk/delivery/include/copyright.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (aka extreme message board) 1.9.6 Alpha and earlier allows remote attackers to execute arbitrary SQL commands via the u2uid parameter to u2u.php, which is directly accessed from $_POST and bypasses the protection scheme."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función u2u_send_recp en u2u.inc.php en XMB (también conocido como extreme message board) 1.9.6 Alpha y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro u2uid en u2u.php, lo cual es directamente accedido desde $_POST y evitar la protección del esquema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_software:xmb_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.6_alpha",
            "matchCriteriaId" : "5BB0E220-A616-451F-AC83-696CF403CD42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21293",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19280",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:29:18.727"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 component (aka com_uhp) for Mambo or Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, y (7) uninstall.uhp.php, en el componente UHP (User Home Pages) 0.5 (también conocido como com_uhp) para Mambo o Joomla, permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:user_home_pages:user_home_pages:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E5BB4F-1C68-41B2-BB47-1D46D01A32F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2007-March/001457.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2007-March/001458.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21305",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27651",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=76&Itemid=13",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19233",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/23113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2007-March/001457.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2007-March/001458.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=76&Itemid=13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/23113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en links/index.php en ATutor 1.5.3.1 y anteriores permiten a usuarios validados remotos ejecutar comandos SQL a través de los parámetros (1) desc o (2) asc ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.3.1",
            "matchCriteriaId" : "ABC86738-711D-44D0-BC43-6C9DAD6E584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://atutor.ca/news.php#010806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/atutor_1531_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21308",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://atutor.ca/news.php#010806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/atutor_1531_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to 1.5.3.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types."
      }, {
        "lang" : "es",
        "value" : "La validación de bajadas en Mail de Mac OS X 10.4 no reconoce adecuadamente los tipos de los ficheros adjuntos para advertir al usuario de tipos no seguros, lo cual permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante tipos de ficheros artesanales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/client-management/2006/Mar/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/23645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=303382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/client-management/2006/Mar/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/19064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/23645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/16907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-062A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/0791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/25027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en hsList.php de WoWRoster (también conocido como World of Warcraft Roster) 1.5.x y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro subdir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowroster:wowroster:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1D378-F412-457F-AB0D-141501F1C5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowroster:wowroster:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C351A5A-6E48-4D4A-843B-000648B37858"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441820/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19269",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wowroster.net/Forums/viewtopic/t=333.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441820/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.wowroster.net/Forums/viewtopic/t=333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en conf.php de WoWRoster (también conocido como World of Warcraft Roster) 1.5.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro subdir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowroster:wowroster:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D1D378-F412-457F-AB0D-141501F1C5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowroster:wowroster:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C351A5A-6E48-4D4A-843B-000648B37858"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19269",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wowroster.net/Forums/viewtopic/t=333.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wowroster.net/Forums/viewtopic/t=333.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll.  NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions."
      }, {
        "lang" : "es",
        "value" : "ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, y posiblemente anteriores versiones no monitorizan adecuadamente la integridad de la libreria pamversion.dll BlackICE, lo caul permite a un usuario local \"trastornar\" BlackICE a través del remplazo de pamversion.dll. NOTA: \t\r\nen la mayoría de los casos, el ataque no cruzaría límites del privilegio porque substituir pamversion.dll requiere privilegios administrativos. Sin embargo, esta asunto es una vulnerabilidad porque BlackICE intenta proteger en contra de ciertas acciones \"ganujas\" privilegiadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:3.6cpie:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57807099-784E-4CA8-BA6C-BC4BF15DEDC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA7FE32-A0F1-47DD-A306-E0369093083C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441829/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441829/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en cgi-bin/preview_email.cgi en Barracuda Spam Firewall (BSF) 3.3.01.001 hasta la 3.3.03.053 permite a usuarios remotos validados leer archivos de su elección a través de la secuencia ..(punto punto) en el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.01.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4499AB68-D449-4A36-A243-F13F02C0EF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E13260-BC29-45D9-98F3-0C2D7CF72A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB02038-4858-4D43-9FB6-492E131227CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441861/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441861/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-05T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password."
      }, {
        "lang" : "es",
        "value" : "Login.pm en  Barracuda Spam Firewall (BSF) 3.3.01.001 hasta la 3.3.03.053 contiene un cosntraseña fuertemente codificada para la cuenta de invitado, lo cual permite que atacantes remotos puedan leer información sensible como el log del e-mail, y posiblemente los contenidos del e-mail y la contraseña de admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.01.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4499AB68-D449-4A36-A243-F13F02C0EF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E13260-BC29-45D9-98F3-0C2D7CF72A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.055:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB02038-4858-4D43-9FB6-492E131227CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441857/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19276",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441857/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3123",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en las funciones (1) dodecrypt y (2) doencrypt en cfs_fh.c en cfsd de Matt Blaze Cryptographic File System (CFS) 1.4.1 anterior a Debian GNU/Linux package 1.4.1-17 permite a usuarios locales provocar una denegación de servicio (caída del demonio) añadiendo información a un fichero mayor de 2 Gb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matt_blaze:cryptographic_file_system:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C65D43-287B-43FB-A58B-00AA647939AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21310",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21341",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1138",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19320",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3157",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28288",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in user.module in Drupal 4.6 before 4.6.9, and 4.7 before 4.7.3, allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: portions of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en user.module en Drupal 4.6 anterior a 4.6.9, y 4.7 anterior a 4.7.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro msg. NOTA: parte de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC016B5-A4C2-4A78-B830-C041C8BAAD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B99C22-9A8C-43F3-9AD8-D901D07D5FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D0FD99-066F-4161-9524-01DD01F31527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F8FEEF-6857-4DC8-9D0D-76D801D0E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EC4ECE-6719-4C54-B150-017ACB32E644"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/76748",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21332",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/76748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nDrupal, Drupal, 4.6.9\r\nDrupal, Drupal, 4.7.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The config method in Henrik Storner Hobbit monitor before 4.1.2p2 permits access to files outside of the intended configuration directory, which allows remote attackers to obtain sensitive information via requests to the hobbitd daemon on port 1984/tcp."
      }, {
        "lang" : "es",
        "value" : "El método de configuración en Henrik Storner Hobbit monitor anterior a 4.1.2p2 permite el acceso a ficheros fuera de la configuración de directorios pretendida, lo cual permite a atacantes remotos obtener información sensible mediante peticiones al demonio hobbitd en el puerto 1984/tcp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hobbit_monitor:hobbit_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.2_p1",
            "matchCriteriaId" : "C64D47F0-E8C9-4168-AD77-6A04309C198E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hobbit_monitor:hobbit_monitor:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFBF31E-CAD6-4B22-BCBB-AB89F1667210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hobbit_monitor:hobbit_monitor:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A486537-FDB3-45D9-98AD-8410E3BA196D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21317",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=436594&group_id=128058",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442036/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19317",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=436594&group_id=128058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442036/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nHobbit Monitor, Hobbit Monitor, 4.1.2p2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bbvbplang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en index.php de vbPortal 3.0.2 hasta 3.6.0 Beta 1, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar ficheros locales mediante secuencias de salto de directorio el la cookie bbvbplang, como ha sido demostrado inyectando secuencias PHP en el fichero de log del Apache HTTP Server, el cual es incluido en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbportal:vbportal:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E790B9DB-9FDF-4453-9B82-EF26CDF502E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbportal:vbportal:3.5.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F108CB4-03BE-48EF-9750-9BCA8466EB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbportal:vbportal:3.5.0_beta_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85AE2322-477D-4F7F-BA85-CD2241C4E1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbportal:vbportal:3.5.0_gold:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A22D54A-E0FC-4B84-AF40-DD5E8D1DFD0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbportal:vbportal:3.6.0_beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE8102A-4746-4220-92F5-E4688A96B189"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpportals.com/forums/showthread.php?t=17308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19257",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpportals.com/forums/showthread.php?t=17308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain malformed PKGF_ackreq packet, which triggers a crash in the rscache_add() function in pkgcache.c; and (2) an error packet, which is intended to be received by clients and force client shutdown, but also triggers server shutdown."
      }, {
        "lang" : "es",
        "value" : "BomberClone 0.11.6 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante (1) un cierto paquete PKGF_ackreq mal formado, lo cual provoca una caída en la función rscache_add() en pkgcache.c; y (2) un paquete de error, el cual está destinado a ser recibido por clientes y fuerza el apagado del cliente, pero también provoca el apagado del servidor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3DA93D-AC12-4E63-9E34-7543D9BDEAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327901F7-A47F-4D12-9FC3-83480751E353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AA0BE2-13EC-4186-8D7F-DFEF2697086E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC129DF-B419-4DA5-A5E4-0C1C1DDAF2AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/bcloneboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.org/poc/bcloneboom.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21303",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/bcloneboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.org/poc/bcloneboom.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the send_pkg function (packets.c) to use this data size when sending a reply, and allows remote attackers to read portions of server memory."
      }, {
        "lang" : "es",
        "value" : "La función do_gameinfo en BomberClone 0.11.6 y anteriores, y posiblemente otras funciones, no restablece el tamaño de información de paquete, lo cual provoca que la función send_pkg (packets.c) utilice este tamaño de información al enviar una respuesta, y permite a atacantes remotos leer porciones de la memoria del servidor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.6",
            "matchCriteriaId" : "A6A2E984-618E-4A78-98D1-B56819F77DB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3DA93D-AC12-4E63-9E34-7543D9BDEAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327901F7-A47F-4D12-9FC3-83480751E353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bomberclone:bomberclone:0.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AA0BE2-13EC-4186-8D7F-DFEF2697086E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/bcloneboom-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.org/poc/bcloneboom.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21303",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21985",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3067",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/bcloneboom-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://aluigi.org/poc/bcloneboom.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GB_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index.php de Knusperleicht Guestbook 3.5 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro GB_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:knusperleicht_guestbook:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D95495-803E-4446-B418-244C09431A45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441810/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19274",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441810/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the faq_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index.php de Knusperleicht Faq 1.0 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro faq_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knusperleicht:faq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8563701A-EA1A-4EAB-B33C-D1E249D2D7EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441812/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19272",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441812/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en war.php de Virtual War (Vwar) 1.5.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EB68E8-9E4D-4571-8A2F-B5FDE38F66C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442101/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443171/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19327",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442101/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443171/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: other vectors are covered by CVE-2006-3139."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en war.php en Virtual War (Vwar) 1.5.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro page. NOTA: otros vectores están cubiertos por CVE-2006-3139."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EB68E8-9E4D-4571-8A2F-B5FDE38F66C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2008-02/0186.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442101/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443171/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/488118/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19327",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/27772",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2008-02/0186.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442101/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443171/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/488118/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/27772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/40481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en esupport/admin/autoclose.php de Kayako eSupport 2.3.1 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro subd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B098914-D522-426C-B54F-4844A2EEDC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kayako:esupport:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207C5C3A-27FF-4EDA-B435-2316492CE84A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21330",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19315",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITE_Path parameter to (1) poll/poll.php or (2) poll/view_polls.php.  NOTE: the menu_dx.php vector is already covered by CVE-2005-2687."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en circeOS SaveWeb Portal 3.4 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro SITE_Path a (1) poll/poll.php o (2) poll/view_polls.php. NOTA: el vector menu_dx.php ya está cubierto por CVE-2005-2687."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:savewebportal:savewebportal:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC3F35F-30F3-4178-AADA-6D2DBF653756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442004/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442004/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en Symantec Brightmail AntiSpam (SBAS) anterior a 6.0.4, cuando está permitido conectarse al Centro de Control desde cualquier ordenador, permite a atacantes remotos leer y sobrescribir ciertos ficheros mediante secuencias de salto de directorio en peticiones DATABLOB-GET y (2) DATABLOB-SAVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95436CD6-8E9C-4F89-9683-0650F6167027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC910CFD-9F20-473E-BC2D-64A7A3C14404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849782E0-9F26-411F-82B9-88B5FC4F4C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD87DB3-45C2-4091-A83B-25E427563C70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016600",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service (application freeze) \"by sending invalid posts\"."
      }, {
        "lang" : "es",
        "value" : "Symantec Brightmail AntiSpam (SBAS) anterior a 6.0.4, cuando está permitido conectarse al Centro de Control desde cualquier ordenador, permite a atacantes remotos provocar una denegación de servicio (congelación de la aplicación) enviando peticiones inválidas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95436CD6-8E9C-4F89-9683-0650F6167027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC910CFD-9F20-473E-BC2D-64A7A3C14404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849782E0-9F26-411F-82B9-88B5FC4F4C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:brightmail_antispam:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD87DB3-45C2-4091-A83B-25E427563C70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21223",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016600",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hewlett-Packard (HP) ProCurve 3500yl, 6200yl, and 5400zl switches with software before K.11.33 allow remote attackers to cause a denial of service (possibly memory leak or system crash) via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Hewlett-Packard (HP) ProCurve 3500yl, 6200yl, y 5400zl combinado con software anterior a K.11.33 permite a atacantes remotos provocar una denegación de servicio (posible fuga de memoria o caída del sistema) mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_3500yl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "k.11.32",
            "matchCriteriaId" : "976DBEC6-963E-44A8-80D9-24BF3057B788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_5400zl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "k.11.32",
            "matchCriteriaId" : "B6177DDE-E22C-46F7-A687-DE46A29050A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:procurve_switch_6200yl:k.11.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8106C0D-F135-4F79-B65C-8DCBD2213CEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016623",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442033/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19310",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442033/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en /toendaCMS de toendaCMS stable 1.0.3 y anteriores, y unstable 1.1 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección  mediante el parámetro s."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "stable_1.0.3",
            "matchCriteriaId" : "4932F7E6-F70F-4B75-AE51-1E72D25B5959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "unstable_1.1",
            "matchCriteriaId" : "6C64C9FC-680F-430A-A26D-67C3C9852838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/index_en2.php?major_rls=major_rls27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/index_en2.php?major_rls=major_rls27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the search module in Inter Network Marketing (INM) CMS G3 allows remote attackers to inject arbitrary web script or HTML via the search_string parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo de búsqueda de Inter Network Marketing (INM) CMS G3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro search_string."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inter_network_marketing_ag:g3_content_management_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E05ECF-4477-4F78-BCC6-9998E1956DD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0031.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442007/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442007/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en la función pefromupx en libclamav/upx.c en Clam AntiVirus (ClamAV) 0.81 hasta 0.88.3 permite a atacantes remotos ejecutar código de su elección mediante un archivo empaquetado UPX manipulado que contiene secciones con valores grandes de rsize."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA719FE4-04E0-4664-8EEC-70CD613408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.81:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7364D6-36F6-4615-95F0-E0B56722DAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C859F864-B68F-4805-B804-E50F2C3FFE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CAFEA5-C062-43EA-A302-38887DA6768C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525DC218-308C-4A0E-96A7-DC74B8973B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A4969C16-F67D-4C30-A537-FE64F4CFC3D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.84:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D72B20-1F61-4499-9ADE-88AF98C3C19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C71B82-8F84-4855-A138-7E7436788D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "039341D8-8E2B-4901-BFA6-9CCC46A18C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C048A75E-6587-485C-9F2B-E12BED34FF2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "97DAD83E-F14F-4B87-B5D8-7BCAD8F446BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B003639-3228-4AC1-AB46-73481BB5DDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6A495D-F9BB-41B9-A912-670D837EA278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F5E6B4-88DD-4426-9FB6-D9009F6B8740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1EB857-D417-49EB-89FD-04733C872EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4551D5ED-6C72-4C9B-A556-491042A6113A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01859947-09D4-417E-92A4-FA4F1625C60D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kolab.org/security/kolab-vendor-notice-10.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21368",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21433",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21443",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21457",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21497",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21562",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-13.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.clamav.net/security/0.88.4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_46_clamav.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.overflow.pl/adv/clamav_upx_heap.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442681/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0046/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3175",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3275",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.clamav.net/security/0.88.4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_46_clamav.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.overflow.pl/adv/clamav_upx_heap.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442681/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0046/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nClam Anti-Virus, ClamAV, 0.88.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4020",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read."
      }, {
        "lang" : "es",
        "value" : "scanf.c en PHP 5.1.4 y anteriores, y 4.4.3 y anteriores, permite a atacantes (locales o remotos dependiendo del contexto) ejecutar código de su elección mediante una llamada a la función sscanf de PHP que realiza un intercambio de argumentos que incrementa un índice más allá del final de un array y dispara una lectura de búfer fuera de límite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B3138-3DCC-4682-B9A8-920E1110700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2937B3-D034-400E-84F5-33833CE3764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=38322",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0736.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21403",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21608",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21683",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21768",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22004",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-28.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/1341",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.plain-text.info/sscanf_bug.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0669.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0682.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442438/30/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19415",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-342-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11062",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=38322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0736.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-28.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_19_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.plain-text.info/sscanf_bug.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0669.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0682.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442438/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-342-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "A Patch(es) addressing this vulnerability can be found here:\r\nhttp://snaps.php.net/\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3114",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-08-08T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the \"PC Tools AntiVirus\" directory, which allows local users to gain privileges and execute commands."
      }, {
        "lang" : "es",
        "value" : "PC Tools AntiVirus 2.1.0.51 utiliza permisos inseguros por defecto en el directorio \"PC Tools AntiVirus\", lo cual permite a usuarios locales obtener privilegios y ejecutar comandos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pc_tools:pc_tools_antivirus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0.51",
            "matchCriteriaId" : "B36F342D-93A4-4357-951C-2B909CDC5FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pc_tools:pc_tools_antivirus:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E3146F-6AFD-422E-9DA4-8F6F1C6D7F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21075",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-51/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1340",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securitytracker.com/id?1016634",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442102/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19322",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3134",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28212",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/secunia_research/2006-51/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442102/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-08T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en IBMInformix Dynamic Server (IDS) anterior a 9.40.TC7 y 10.00 anterior a 10.00.TC3, cuando se ejecuta en Windows, permite a atacantes remotos ejecutar código de su elección mediante un nombre de usuario largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A9F81C-C618-435D-9912-0E61EAB02560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9B0C17-2D85-4729-85EF-2F5C750BF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CD7B84-2861-4542-8A08-C668065C8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64D85E2-AA7E-4704-A2FA-BD69744423CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD626D2D-D1ED-4B44-A236-CF20F1708D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1716E256-B186-442F-8C4C-9305E0953081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7931542-8DB8-4BC3-A319-9352EBC62158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443149/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443149/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is only present in a Windows environment.\r\nThis vulnerability is addressed in the following product releases:\r\nIBM, Informix IDS, 9.40.TC7 \r\nIBM, Informix IDS, 10.00.TC3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-08T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka \"C code UDR.\""
      }, {
        "lang" : "es",
        "value" : "La función ifx_load_internal en IBM Informix Dynamic Server (IDS) permite a usuarios remotos autenticados ejecutar código C arbitrario a través de la función DllMain o _init en una librería, también conocido como \"C code UDR\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A9F81C-C618-435D-9912-0E61EAB02560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9B0C17-2D85-4729-85EF-2F5C750BF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CD7B84-2861-4542-8A08-C668065C8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64D85E2-AA7E-4704-A2FA-BD69744423CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1716E256-B186-442F-8C4C-9305E0953081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7931542-8DB8-4BC3-A319-9352EBC62158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27689",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443184/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.osvdb.org/27689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443184/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nIBM, Informix IDS, 9.40 xC7 \r\nIBM, Informix IDS, 10.00 xC4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-08T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server (IDS) anterior a 9.40.xC7 y 10.00 anterior a 10.00.xC3 permite a usuarios locales provocar una denegación de servicio (caída) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A9F81C-C618-435D-9912-0E61EAB02560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9B0C17-2D85-4729-85EF-2F5C750BF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CD7B84-2861-4542-8A08-C668065C8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64D85E2-AA7E-4704-A2FA-BD69744423CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FF7CE7-A061-425B-A29B-1EC6DEDA2C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1716E256-B186-442F-8C4C-9305E0953081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5634CF97-CBD3-4CA3-8144-2F875FDD3FA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443210/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443210/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nIBM, Informix IDS, 9.40 xC7 \r\nIBM, Informix IDS, 10.00 xC3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-08T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179)."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en IBMInformix Dynamic Server (IDS) anterior a 9.40.TC6 y 10.00 anterior a 10.00.TC3 permite a usuarios autenticados remotamente ejecutar código de su elección mediante la función (1) getname, tal y como se usa en (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, y (e) _sq_dcatalog; y las funciones (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, y (6) DBINFO (identificadores de defectos de producto 171649, 171367, 171387, 171391, 171906, 172179)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3FE6E0-7446-45C2-84DA-72C558F2F899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C19CA4E-F02B-44C8-B3D4-0BD7D001D3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DAFECCB-59C2-41FF-A805-728740EF6D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55A9D1E-289C-457E-9C6D-2EE29992A2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B170FE07-569D-4BFC-9E37-4516B8B2454A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EAC87C-567F-4115-8F2F-AC4FD4C89E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A9BF3A-5DB9-4CB4-B7F7-848FFDF73D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC93597-82DD-486C-B277-DCBB45406A8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED4E07-1195-4831-89A1-8E3F836B76E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E067FD9-5234-4DA0-81AE-E159C7D72B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549AB7DC-C83B-4300-84CE-4E61583B5571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443210/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443210/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-08T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772)."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server (IDS) anterior a 9.40.xC8 y 10.00 anterior a 10.00.xC4 almacena contraseñas en texto plano en memoria compartida, lo cual permite a usuarios locales obtener contraseñas leyendo la memoria (defectos de producto 171893, 171894, 173772)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A9F81C-C618-435D-9912-0E61EAB02560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9B0C17-2D85-4729-85EF-2F5C750BF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CD7B84-2861-4542-8A08-C668065C8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64D85E2-AA7E-4704-A2FA-BD69744423CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FF7CE7-A061-425B-A29B-1EC6DEDA2C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD626D2D-D1ED-4B44-A236-CF20F1708D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1716E256-B186-442F-8C4C-9305E0953081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5634CF97-CBD3-4CA3-8144-2F875FDD3FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7931542-8DB8-4BC3-A319-9352EBC62158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443195/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443195/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nIBM, Informix IDS, 9.40 xC8\r\nIBM, Informix IDS, 10.00 xC4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-08T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server (IDS) anterior a 9.40.xC7 y 10.00 anterior a 10.00.xC3 no utiliza permisos de creación de bases de datos, lo cual permite a usuarios autenticados remotamente crear bases de datos de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A93A4B-8AB8-4BC7-9253-8DDA9D091C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A9F81C-C618-435D-9912-0E61EAB02560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9B0C17-2D85-4729-85EF-2F5C750BF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CD7B84-2861-4542-8A08-C668065C8DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64D85E2-AA7E-4704-A2FA-BD69744423CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FF7CE7-A061-425B-A29B-1EC6DEDA2C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1716E256-B186-442F-8C4C-9305E0953081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5634CF97-CBD3-4CA3-8144-2F875FDD3FA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443192/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443192/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nIBM, Informix IDS, 9.40 xC7 \r\nIBM, Informix IDS, 10.00 xC3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-08T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en IBM Informix Dynamic Server (IDS) 9.40.TC5 hasta 9.40.xC7 y 10.00.TC1 hasta 10.00.xC3 permite a atacantes remotos ejecutar código de su elección a través de la variable de entorno (envariable) SQLIDEBUG."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9B0C17-2D85-4729-85EF-2F5C750BF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64D85E2-AA7E-4704-A2FA-BD69744423CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FF7CE7-A061-425B-A29B-1EC6DEDA2C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0.tc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEBB378-F57A-4420-973F-8B641700740A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5634CF97-CBD3-4CA3-8144-2F875FDD3FA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443165/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443165/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nIBM, Informix IDS, 9.40 xC7 \r\nIBM, Informix IDS, 10.00 xC3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3450",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-08T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 permite a atacantes remotos ejecutar código de su elección usando la función Javascript document.getElementByID para acceder a elementos de Hojas de Estilo en Cascada (CSS) manipulados, y posiblemente otros vectores no especificados relacionados con determinadas combinaciones de posicionamiento en el diseño de un archivo HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/119180",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27855",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442579/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19312",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-027.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A433",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/119180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442579/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3451",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-08T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when \"multiple imports are used on a styleSheets collection\" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 5 SP4 y 6 no recogen adecuadamente la basura cuando \"se utilizan múltiples importaciones en una colección de hojas de estilo\" para construir una cadena de Hojas de Estilo en Cascada (CSS), lo cual permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "FED6949F-54D0-4D36-B6A8-59EBFA2611E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1343",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/262004",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27854",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442578/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19316",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-026.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/262004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442578/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3583",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-08-08T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link and the administrator section."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de fijación de sesión en Jetbox CMS 2.1 SR1 permite a atacantes remotos secuestrar sesiones web mediante un enlace manipulado y la sección de administración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEE445-FE0A-4186-9AD1-3893BCC75EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20889",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-57/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://securityreason.com/securityalert/1339",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27710",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441980/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-57/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3584",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-08-08T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de evaluación de variable dinámica en index.php en Jetbox CMS2.1 SR1 permite a atacantes remotos sobrescribir variables de configuración mediante parámetros URL, los cuales son evaluados como variables PHP dinámicas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0916DF3D-71ED-423F-A2F4-842EE706ADDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEE445-FE0A-4186-9AD1-3893BCC75EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20889",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-57/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1339",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441980/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-57/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3585",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-08-08T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the (1) login parameter in admin/cms/index.php, (2) unspecified parameters in the \"Supply news\" page in formmail.php, (3) the URL in the \"Site statistics\" page, and the (5) query_string parameter when performing a search."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Jetbox CMS2.1 SR1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) login en admin/cms/index.php, (2) parámetros no especificados en la página de \"Suministrar noticias\" en formmail.php, (3) la URL en la página de \"Estadísticas del sitio\", y el parámetro cadena de búsqueda (query_string) cuando se realiza una búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEE445-FE0A-4186-9AD1-3893BCC75EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20889",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-57/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1339",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27712",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27713",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/27714",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441980/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28164",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-57/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3586",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-08-08T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE parameter and (2) view parameter in index.php, and the (3) login parameter in admin/cms/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Jetbox CMS 2.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) frontsession de la COOKIE y (2) view en index.php, y el parámetro (3) login en admin/cms/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEE445-FE0A-4186-9AD1-3893BCC75EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20889",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-57/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1339",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441980/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28168",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-57/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3637",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-08T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to execute arbitrary code via a crafted HTML file that leads to memory corruption, aka \"HTML Rendering Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 5.01 SP4 y 6 no maneja adecuadamente diversas combinaciones de componentes en diseños HTML, lo cual permite a atacantes remotos con la intervención del usuario ejecutar código de su elección mediante un archivo HTML manipulado que lleva a una corrupción de memoria, también conocido como \"Vulnerabilidad de Corrupción de Memoria en Renderizado HTML\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/340060",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27853",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A502",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/340060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3638",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-08T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka \"COM Object Instantiation Memory Corruption Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 5.01 y 6 no maneja adecuadamente objetos COM no inicializados, lo cual permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) y posiblemente ejecutar código de su elección, como ha sido demostrado por la función Nth en el control ActiveX DirectAnimation.DATuple, también conocido como \"Vulnerabilidad de Corrupción de Memoria en la Instanciación de Objetos COM\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27852",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442728/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19340",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-09.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A719",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/959049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442728/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3438",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll \"uses a file containing a malformed function,\" aka \"Hyperlink Object Function Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Hyperlink Object Library (hlink.dll), posiblemente un desbordamiento de búfer, permite a atacantes con la intervención del usuario ejecutar código de su elección mediante hiperenlaces manipulados que no son manejados adecuadamente cuando hlink.dll \"utiliza un archivo que contiene una función mal formada\" también conocida como \"Vulnerabilidad de Función de Objeto Hiperenlace\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:hyperlink_object_library:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8470B2-118A-4A5E-94CA-636BFA8A75F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016659",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/683612",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19405",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A115",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/683612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3444",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an \"unchecked buffer.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el núcleo de Microsoft Windows 2000 SP4, probablemente un desbordamiento de búfer, permite a usuarios locales obtener privilegios mediante vectores no especificados relacionados con un \"búfer no comprobado\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21415",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016658",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19388",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3215",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-049",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A673",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3449",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka \"Microsoft PowerPoint Malformed Record Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft PowerPoint 2000 hasta 2003, posiblemenet un desbordamiento de búfer, permite a atacantes remotos con intervención del usuario ejecutar comandos de su elección mediante un registro mal formado en el formato de archivo BIFF utilizado en un archivo PPT, un problema distinto de CVE-2006-1540, también conocido como \"Vulnerabilidad de Registro Mal Formado de Microsoft PowerPoint\" (\"Microsoft PowerPoint Malformed Record Vulnerability\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E392539-ABF6-4B5C-AEC3-C54B51E0DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "FF8DA1F4-51F5-4701-BA23-6A77057DD420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "FB88D5F8-4D7A-4D77-9F05-4910405E0A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "C8CCDE97-AE42-4BB8-9947-5BBD81DA6CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D64E16F-0E13-4679-A68D-66866A77149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "16844C40-F012-4C19-9028-D05014EBF7D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "5843C1AA-953B-4CC1-9B1B-AF9969BB1A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2001:*:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "88499AA7-D0AD-4914-8B24-153EEED8DF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711D9CC0-31B8-4511-A9F3-CA328A02ED84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "054BA29C-3320-475D-95AE-996BAA04D464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DC15E7-F1C3-42D0-AE3E-DDF6300FCD7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "34C63AE5-4584-4A51-B20D-36FA6DE01C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016657",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secway.org/advisory/AD20060808.txt",
        "source" : "secure@microsoft.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/884252",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442592/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19341",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A348",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secway.org/advisory/AD20060808.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/884252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442592/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3639",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages and possibly execute code via unspecified vectors involving a crafted web page, aka \"Source Element Cross-Domain Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 5.01 y 6 no identifica adecuadamente la zona de dominio que origina cuando maneja la redirección, lo cual permite a un atacante remoto leer páginas web de dominios cruzados y posiblemente ejecutar código a través de vectores no especificados que afectan a páginas web manipuladas, también conocido como \"Vulnerabilidad de Elemento Fuente de Cruce de Dominios\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/252764",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27851",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19400",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A577",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/252764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3640",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to obtain the window location of visited web pages in other domains or zones, aka \"Window Location Information Disclosure Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 5.01 y 6 permite a ciertas secuencias de comandos persistir a través de navegaciones entre páginas, lo cual permite a un atacante remoto obtener la localización de ventana de páginas web visitadas en otros dominios o zonas, tambien conocido como \"Vulnerabilidad de acceso de la información de localización de ventana\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/27850",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19339",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A171",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3643",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local \"HTML-embedded resource files\" in the Microsoft Management Console (MMC) library, which allows remote authenticated users to execute arbitrary commands, aka \"MMC Redirect Cross-Site Scripting Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Internet Explorer 5.01 y 6 en Microsoft Windows 2000 SP4 permite acceso a \"ficheros de recursos HTML-embedded\" locales en la biblioteca de Consola de Administración de Microsoft (MMC), que permite a atacantes remotos autenticados ejecutar comandos de su elección, también conocido como     \"Vulnerabilidad de redirección de secuencias de comandos en sitios cruzados de MMC\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21401",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016655",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/927548",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19417",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3213",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-044",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28005",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A638",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/927548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3649",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Microsoft Visual Basic para Aplicaciones (VBA) SDK 6.0 hasta 6.4, como se usa en Microsoft Office 2000 SP3, Office XPSP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, y Works Suite 2004 hasta 2006, permite a atacantes remotos con intervención del usuario ejecutar código de su elección mediante propiedades de documento no especificadas que no son verificadas cuando VBA es invocado para abrir documentos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_basic:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCB1E40-3D5C-484C-AA62-94190ED2361E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_basic:6.2:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "BAB746EB-4682-4667-8600-BB2EC53EB3F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_basic:6.3:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "29FB6C91-0F7F-46BE-B1ED-58B9A1471C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_basic:6.4:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "521C03FE-D0CD-42F9-9210-F8A50B722110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21408",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016656",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/159484",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19414",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3214",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-047",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A694",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/159484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intel 2100 PRO/Wireless Network Connection driver PROSet before 7.1.4.6 allows local users to corrupt memory and execute code via \"requests for capabilities from higher-level protocol drivers or user-level applications\" involving crafted frames, a different issue than CVE-2006-3992."
      }, {
        "lang" : "es",
        "value" : "Intel 2100 PRO/Wireless Network Connection driver PROSet anterior a 7.1.4.6 permite a usuarios locales corromper la memoria y ejecutar código mediante \"peticiones de capacidades de protocolos de nivel superior o aplicaciones a nivel de usuario\" incluyendo tramas manipuladas, un problema distinto de CVE-2006-3992."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:2100_proset_wireless:7.1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136AB607-7D47-47A7-B6E5-5EF5A8403D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016621",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.intel.com/support/wireless/wlan/pro2100/sb/CS-023067.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/824500",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.intel.com/support/wireless/wlan/pro2100/sb/CS-023067.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/824500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allows remote attackers to obtain network information and facilitate other attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR Header in index.php in MiniBB 2.0.  NOTE: it could be argued that the ip2long behavior represents a risk for security-relevant issues in a way that is similar to strcpy's role in buffer overflows, in which case this would be a class of implementation bugs that would require separate CVE items for each PHP application that uses ip2long in a security-relevant manner."
      }, {
        "lang" : "es",
        "value" : "La función ip2long en PHP 5.1.4 y anteriores puede validar incorrectamente una cadena de su elección y devolver una dirección IP, la cual permite a atacantes remotos obtener información y facilitar otros ataques, como se demostró usando inyección SQL en la cabecera X-FORWARDED-FOR en index.php en MiniBB 2.0. NOTA: podría discutirse que el funcionamiento ip2long representa un riesgo para los asuntos de seguridad relevantes en la medida que es similar al papel de los strcpy en el desbordamiento de búfer, en cuyo caso esto podría ser un tipo de bug de implementación que requeriría separar los asuntos CVE para cada aplicación PHP que utiliza ip2long en una manera se seguridad relevante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/php_ip2long.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016609",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441529/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441708/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/php_ip2long.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441529/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441708/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflow."
      }, {
        "lang" : "es",
        "value" : "La función FESTAHES_Load en pce/hes.c en Festalon 0.5.0 hasta la 0.5.5 permite a un atacantes con la intervención de un usuario provocar denegación de servicio (caida) y posiblemente ejecutar código de su elección a través de un valor LoadAddr negativo en un archivo HES, lo cual es usado como un offset en una operación memcpy y conduce a un desbordamiento inferior de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:festalon:festalon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.5",
            "matchCriteriaId" : "39BB7C27-B97F-4CCB-AE25-D4A4A1387CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:festalon:festalon:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93FB374-7DF9-450A-959A-243552D605B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/festahc-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21367",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/festahc-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) bday_day, (2) bday_month, and (3) bday_year parameters in the personal section."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en profile.php en XennoBB 2.1.0 y anteriores permiten a un usuario validado ejecutar comandos SQL de su elección a través de los parámetros (1) bday_day, (2) bday_month, y (3) bday_year en la sección personal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "686E2ABF-5305-45BB-B68E-6FD94221976E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442423/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19374",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442423/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php and the (2) GLOBALS[\"root_path\"] parameter in usr/extensions/get_tree.inc.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en SAPID CMS 123 rc3 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro (1) root_path en usr/extensions/get_infochannel.inc.php y el parámetro (2) GLOBALS[\"roog_path\"] en usr/extension/get_tree.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77CFB60-2E9E-4644-9696-B412EA3CE9DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21410",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442425/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19383",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442425/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3439",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Server Service en Microsoft Windows 2000 SP4, XP SP1 y SP2, y Server 2003 SP1 permite a un atacante remoto, incluidos usuario anónimos, ejecutar código de su elección a través de mensajes RPC manipulados, una vulnerabilidad diferente que CVE-2006-1314."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21388",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016667",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/ps6120/tsd_products_security_response09186a008070c75a.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.dhs.gov/dhspublic/display?content=5789",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/650769",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19409",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3210",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-040",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28002",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A492",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/ps6120/tsd_products_security_response09186a008070c75a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dhs.gov/dhspublic/display?content=5789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/650769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3440",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka \"Winsock Hostname Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Winsock API en Microsoft Windows 2000 SP4, XP SP1 y SP2, y Server 2003 SP1 permite a atacantes remotos ejecutar código de su elección a tavés de vectores desconocidos, tambien conocido cómo \"Vulnerabilidad Winsock Hostname\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21394",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016653",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/908276",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19319",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3211",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A747",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/908276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3441",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response.  NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búger en el servicio Client DNS en Microsoft Windows 2000 SP4, XP SP1 y SP2, y Server 2003 SP1 permite a un atacante remoto ejecutar código de su elección a través de respuestas de registro manipulada. NOTA: Mientras MS06-041 implica que hay un solo asunto, hay múltiples vulnerabilidades, relacionados con (1) desbordamiento de búfer basado en pila en un respuesta de servidor DNS al cliente, (2) un respuesta de servidor DNS con registros ATMA mal formados, y (3)un gran pérdida de cálculo en los registros TXT, HINFO, X25, e ISDN."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21394",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016653",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/794580",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27844",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19404",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3211",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/233",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/234",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/235",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24586",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28013",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28240",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A723",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/794580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/24586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3443",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka \"User Profile Elevation of Privilege Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en Winlogon in Microsoft Windows 2000 SP4, cuando SafeDllSearchMode está deshabilitado, permite a atacantes locales obtener privilegios mediante DLL maliciosa en el directorio UserProfile, también conocido como \"Vulnerabilidad de Elevación de Privilegios de Perfil de Usuario\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21417",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016662",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337244",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19375",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3216",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-051",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A155",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/337244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3648",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-09T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly \"unloading chained exception.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Windows 2000 SP4, XP SP1 y SP2, Server 2003 y 2003 SP1, permite a atacantes remotos ejecutar código de su elección a través de vectores que afectan a excepciones no controladas, aplicaciones de memoria residente, y incorrectamente \"excepción de descarga encadenada\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016661",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/411516",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19384",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3216",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-051",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A841",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/411516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-220A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones (1) krshd y (2) v4rcp en MIT Kerberos 5 (krb5) hasta 1.5, y 1.4.x anteriores a 1.4.4, cuando se ejecutan en Linux y AIX, no comprueban los códigos de retorno de llamadas 'setuid', lo que permite a usuarios locales fallar en soltar privilegios usando ataques como consumición de recursos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heimdal:heimdal:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE0CCA-5935-472D-8A73-301A89412E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0EECF-7787-442B-9888-D22F7D36C3DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF344AED-BE00-4A9B-A9DE-C6FB0BEE4617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567406CA-58D8-453E-B36E-6D1D2EFC8EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7830E03F-A813-4E35-893E-BF27395CEFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD315AE-868B-4061-BF01-CDBF59B02499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21402",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21423",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21436",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21439",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21441",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21456",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21461",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21613",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/580124",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pdc.kth.se/heimdal/advisory/2006-08-08/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0612.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442599/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443498/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-334-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-211.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/580124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pdc.kth.se/heimdal/advisory/2006-08-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0612.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442599/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443498/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-334-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges.  NOTE: as of 20060808, it is not known whether an exploitable attack scenario exists for these issues."
      }, {
        "lang" : "es",
        "value" : "Los programas (1) ftpd y (2) ksu en MIT Kerberos 5 (krb5) actualizado a 1.5, y 1.4.X anterior a 1.4.4, no valida el código de retorno para las llamadas setuid, lo cual permite a un usuario local ganar privilegios provocando fallos del setuid para subir privilegios. NOTA: con en 20060808, \t\r\nno se conoce si existe un panorama explotable para estas ediciones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heimdal:heimdal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.2",
            "matchCriteriaId" : "BF01089D-8C6F-4AAD-B68F-0EB623604403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0EECF-7787-442B-9888-D22F7D36C3DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF344AED-BE00-4A9B-A9DE-C6FB0BEE4617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567406CA-58D8-453E-B36E-6D1D2EFC8EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7830E03F-A813-4E35-893E-BF27395CEFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DD315AE-868B-4061-BF01-CDBF59B02499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fedoranews.org/cms/node/2376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21402",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21436",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21439",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21461",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21613",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23707",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-21.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/401660",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pdc.kth.se/heimdal/advisory/2006-08-08/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442599/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443498/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-334-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.7.2-setuid-patch.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://fedoranews.org/cms/node/2376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2006-001-setuid.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/401660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pdc.kth.se/heimdal/advisory/2006-08-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442599/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443498/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-334-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using \"programmatic access\" to the adminAPI instead of the ColdFusion Administrator."
      }, {
        "lang" : "es",
        "value" : "La AdminAPI de ColdFusion MX 7 permite a atacantes remotos evitar autenticación usando \"acceso programático\" a la adminAPI en vez del Administrador ColdFusion."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921E5A6D-8476-401B-9A18-BDBC07CA1CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macromedia:coldfusion:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A00698-4449-4D11-801F-BCB3AA14BFBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-10.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors.  NOTE: due to lack of details, it is not clear how these issues are different from CVE-2006-3389 and CVE-2006-3390, although it is likely that 2.0.4 addresses an unspecified issue related to \"Anyone can register\" functionality (user registration for guests)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en WordPress anteriores a 2.0.4 tienen impacto y vectores de ataque desconocidos. NOTA: debido a la falta de detalles, no está claro por qué estos problemas son diferentes de CVE-2006-3389 y CVE-2006-3390, aunque es probable que la versión 2.04 solucione un problema no especificado relacionado con la funcionalidad \"cualquiera puede registrarse\" (registro de usuario para invitados)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4671A-8449-438E-922B-94E5542137BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F05A1F-2227-4166-807B-1BDE2EA8F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=142142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21309",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21447",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-19.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://unknowngenius.com/blog/archives/2006/07/26/critical-announcement-to-all-wordpress-users/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://unknowngenius.com/blog/archives/2006/07/27/followup-on-wordpress/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wordpress.org/development/2006/07/wordpress-204/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3071",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=142142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://unknowngenius.com/blog/archives/2006/07/26/critical-announcement-to-all-wordpress-users/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://unknowngenius.com/blog/archives/2006/07/27/followup-on-wordpress/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wordpress.org/development/2006/07/wordpress-204/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en la pila en sipd.dll en AGEphone 1.24 y 1.32.1 permite a atacantes remotos ejecutar código de su elección mediante un paquete UDP SIP artesanal.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ageet:agephone:1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DC2889-0363-463D-9324-E64E88E2E428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ageet:agephone:1.38.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC465551-0FF3-45EA-A407-8684FF3CA83D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115383213602413&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21175",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016577",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://vuln.sg/agephone1381-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441086/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19148",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115383213602413&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://vuln.sg/agephone1381-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441086/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nAGEphone 1.40"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3122",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with \"corrupt lease uid.\""
      }, {
        "lang" : "es",
        "value" : "La función supersede_lease en memory.c de ISC DHCP (dhcpd) server 2.0p15 permite a atacantes remotos provocar una denegación de servicio (cierre de aplicación) mediante un paquete DHCPDISCOVER con un identificador de cliente de 32 bytes, lo que provoca que el paquete sea interpretado como un uid corrupto y provoca que el server se cierre con un mensaje \"corrupt lease uid\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:dhcpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0pl5",
            "matchCriteriaId" : "9ED82578-CA62-4CA8-8633-B9E8DD133050"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380273",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21345",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21363",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21655",
        "source" : "security@debian.org"
      }, {
        "url" : "http://securitytracker.com/id?1016755",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1143",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#dhcpd",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19348",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3158",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#dhcpd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy."
      }, {
        "lang" : "es",
        "value" : "MySQL 4.1 anterior a 4.1.21 y 5.0 anterior a 5.0.24 permite a usuarios locales acceder a una tabla a través de una tabla MERGE previamente creada, incluso después de que los privilegios del usuario han sido revocados para la tabla original, lo cual podría violar la política de seguridad pretendida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6AAD13-3CA1-4543-834B-39FB53D4462D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBEDF5A-5205-4012-B9B8-0FA304E7119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC969A5-52CC-44F2-A929-DE559A5D7624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E063D-355D-4A5A-A05F-36BF582DE36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214E3CF9-6362-4F5A-91B7-5E69564F7144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AD5549-07DC-43DA-B277-D7BF16ABE4E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787CB28C-74C6-4356-8AB3-4183CD941EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30459B9-0FAC-48DF-9601-AAD1A028846F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DC48D3-09F1-48BD-A783-0549D4D5E8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209E0C63-FC71-4E19-B3D5-BCB71A758252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DBBAC9-AA05-409F-82B2-A552A3417E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "EA087258-8A5B-472E-B120-9B56415F8869"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204CF85D-DFAD-4052-B24A-DCE09B32426E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268CDE97-C837-482A-BB16-77662C45074C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E04B7CC-9E17-47AB-8923-A4DBD24119FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BE4B79-BF2A-4323-B337-62B388FCF9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B78C9D8-E6BC-4D80-8C29-219C1F151570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A7DE48-60E6-42FE-8986-0DB1647C1BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E35942-7E70-468E-BA15-97CA5086C1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB886BB-EA7C-4618-9029-BB16A45A4301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EC4832-82D1-4E57-86DA-8918CA006723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D5DFB7-1AA6-468D-A077-5BB4B32C92B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C786D54-7DEC-41B8-A778-BED9DA66C3C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0F32D6-B2A9-4AC3-A4F9-E4A291AEC91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BD316B-5855-462D-B378-6AAF9817F23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D864BB-32A6-44FC-870F-3663E53F2277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5BA337-5845-4E3E-8DB5-AAB81A460376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC06D07-8C16-48D4-A95E-8F40CFAE6514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1B9CEC-580F-4143-B111-032195BCC760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F41E62F-A606-4842-985C-2B349C405E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.20:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF1E839-E1C9-4A13-A6BA-6F8C56FDF148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692E4E06-D559-4735-AED5-CE9E572CF608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92A42D3C-2539-469A-81BD-8306CD7E1A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BCEB43-67D4-4711-8C30-4D2D93159EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362893B4-9BC1-4584-ACD5-08878A19E3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD940715-318E-44C1-8613-FEBFB8F1741A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167130D3-2AD2-4B82-B805-6A0BA45C4DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17187451-7715-464D-9C7B-3F949345CF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFFBBE-E604-4BCB-A143-E26CD91C0B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3658E1-B451-4B8B-A21A-3D66359D21DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041AD718-39A7-4B13-90C5-680743B1C982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2F4EA8-64A3-4E11-A6A3-5179738157D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067774E4-0704-4F5D-9B46-4DE19FE51163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD26FA75-C3C5-434C-9A82-E5F798A8E47C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B463E6-DAD6-4013-8095-F0153F8B335F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0C0EE5-B2AA-4862-B144-24733CC86A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536F109A-7932-4424-889E-02922D8B783D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036AE068-C061-49B1-95D1-98A09A79EE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A83184-F554-42C0-8162-B484CBAD09D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9244622-781A-46AE-866D-0EDDE5323048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA85DD18-19D9-4BF8-8420-DEA24AE44046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670C3F10-A811-43D0-B762-5791D41C8B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F379312-B95D-4C9B-918F-6A57B12EB5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36F606D-59B6-4FA0-8785-3B14592FE9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2681F9FF-5899-4EFA-85A3-CEAB4402C786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FC2146-5BC0-4CA6-8700-5877C01B777D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79AFBCE-FFF7-4348-BE17-42A7978E17E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3C056E-EEB9-4B95-A155-F71B80B9695D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1AB3865-4ABC-4B5A-8C4F-65C6E5B2E956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.54a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFB2D10-E255-4DD3-BF03-217803CDED24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436D90B0-C839-4B9F-853D-51C34459A11F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3535453-E7DC-4561-BB35-32DFF78E451C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A46F3F-7A97-4AE5-885B-15E25BC575C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37512B4B-C428-4D30-AAF3-9557C7257967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:3.23.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75B1527A-5039-470B-87DC-B02F557364A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54D7B3-DC9B-43AC-BE10-565BDF292A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7AC36-4E5D-483B-939E-257FDEDE48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2CEF98-8561-42D2-BCE5-3AAE4DC81ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6132F5E-ADE6-44C2-85BD-17408594789F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6779AC-EF41-46B5-8B26-07FA2537E5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F038AF5-C96C-43EE-9D46-1DD8CAF567EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24BD3CF-0047-47F8-8B13-E2A6348E3924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C06765-D153-4D4D-B8CD-DB2E386E082B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E942FA-A458-4607-B48D-FCA112AFF1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E241159-FAA4-4DCF-AB68-BE36DF95D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6995B6-B594-454B-BD26-EACFB8241DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC14E107-7C11-4D5B-994B-CCACFD62097E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F610D56-6BB6-48FB-B43A-670CE9168500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4F891-2A03-45A8-A49C-7F8B8F7D8407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E62AC4-954E-476C-98BE-C138E328AE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B88385C-F5FB-401F-80D5-5BF11CE3C19D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mysql.com/bug.php?id=15195",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21259",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/30351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/31226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016617",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0364.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0768.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19279",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-338-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=15195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0768.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-338-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nMySQL, MySQL, 4.1.21 \r\nMySQL, MySQL, 5.0.24",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue was corrected in all affected mysql packages versions as shipped in Red Hat Enterprise Linux or Red Hat Application Stack via:\n\nhttps://rhn.redhat.com/errata/CVE-2006-4031.html\n\nThis issue did not affect mysql packages as shipped with Red Hat Enterprise Linux 2.1 or 3",
        "lastModified" : "2008-07-25T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Cisco IOS CallManager Express (CME) permite a atacantes remotos obtener información sensible (nombres de usuario) desde el directorio de usuarios SIP(Session Initiation Protocol) mediante ciertos mensajes SIP, también conocido como bug CSCse92417."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:callmanager_express:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB98052-29EA-444E-B1C5-86588CAAEDDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21335",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Cisco's recommended best practice of implementing the VoIP infrastructure and data devices on separate VLANs would prevent malicious users from launching such attacks against the VoIP network."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en Lhaplus.exe de Lhaplus 1.52, y posiblemente versiones anteriores, permite a atacantes remotos ejecutar código de su elección mediante un archivo LZH con una cabecera larga, como es especificado por extendedHeaderSize."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lhaplus:lhaplus:1.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F1647D1-2FEF-46B9-9768-B975FFC26F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21256",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016615",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/lhaplus152-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441822/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19263",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www7a.biglobe.ne.jp/~schezo/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/lhaplus152-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441822/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www7a.biglobe.ne.jp/~schezo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en include/html/config.php de ModernGigabyte ModernBill 1.6 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro DIR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moderngigabyte:modernbill:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F756799-B98F-4149-959F-F8D21C7FD2C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/442126/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19335",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.solpotcrew.org/adv/solpot-adv-04.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442126/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.solpotcrew.org/adv/solpot-adv-04.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en counterchaos.php de counterChaos 0.48c y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cabecera HTTP Referer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:counterchaos:counterchaos:0.48c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB31B318-6C3D-460B-9F52-34270B974836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0080.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.frsirt.com/english/reference/17541",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19344",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0080.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.frsirt.com/english/reference/17541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/usercp_register.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/usercp_register.php de ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zonemetrics:zonex_publishers_gold_edition:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "269F5369-C3EF-418C-A490-5C4713A32505"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21353",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001017.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442152/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444901/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19338",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442152/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444901/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Fenestrae Faxination Server allows remote attackers to execute arbitrary code via a crafted packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Fenestrae Faxination Server permite a un atacante remoto ejecutar código de su elección a través de paquetes manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fenestrae:faxination_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0FAA01-453E-4314-B7C3-CB13B4035D8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fenestrae:faxination_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C0CABCB-C8AE-49DC-B563-82F4F0314D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fenestrae:faxination_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E1BF31-7228-4298-91E7-68062DD7F312"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21322",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irmplc.com/Vendor_alerts.htm#alert8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.irmplc.com/Vendor_alerts.htm#alert8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gastname or (2) gastwohnort parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en eintragen.php en GaesteChaos 0.2 y anteriores permiten a atacantes remotos inyectar secuencias de código web o HTML a través de los parámetros (1) gastname o (2) gastwohnort."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaossoft:gaestechaos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2",
            "matchCriteriaId" : "2FEC2F48-6B26-4749-B95A-B76CB0FC4976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115464286427745&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/21357",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442205/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19343",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3155",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115464286427745&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/21357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442205/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en eintragen.php en GaesteChaos 0.2 y anteriores permite a un atacante remoto ejecutar comandos SQL de su elección a través de los parámetros (1) gastname, (2) gastwohnort, o (3) gasteintrag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaossoft:gaestechaos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2",
            "matchCriteriaId" : "2FEC2F48-6B26-4749-B95A-B76CB0FC4976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115464286427745&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/21357",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442205/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19343",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3155",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115464286427745&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/21357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442205/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en myevent.php en myWebland MyEvent 1.3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro myevent_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:myevent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "7A4DEC99-97AF-473E-A194-88BAF0F21AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/24725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Upgrade to version 1.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Pike anterior a 7.6.86, cuando utiliza un servidor de base de datos Postgres, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores de ataque no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.66",
            "matchCriteriaId" : "AB3DD914-20F1-4375-B09E-1DBF74323CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:0.4_pl8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DBDAA1-74C8-4D77-9D4E-E56F6057DCD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EF291C-29AD-4B84-9773-C5946280E5FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCDB040-1EF6-48E5-A22A-D4E1CA435411"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD53D66A-2B00-45EC-9621-432FA8FBB805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47EAF606-D94C-4DB1-A19F-AF41C7E5FAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313D7A4D-988A-42B5-9322-16D773767C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:7.4.327:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D9F3CF-EA0E-41BF-B1A7-D7F6F80F2C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:7.4.328:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0E29DA-3B6C-40A6-A0BD-565504A3423D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "986E9D28-4454-42B9-8D6D-421F7F705167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pike:pike:7.6.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7481BF61-ABED-4CCA-8781-40E9A2288567"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pike.ida.liu.se/download/notes/7.6.86.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20494",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21362",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-10.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19367",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-367-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pike.ida.liu.se/download/notes/7.6.86.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/20494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-367-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nPike, Pike, 7.6.86"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) title, (2) url, (3) excerpt, or (4) blog_name parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en trackback.php en el yWebland myBloggie 2.1.4 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección    a través de los parámetros (1) title, (2) url, (3) excerpt o (4) blog_name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "75798A07-13C1-4BEE-9575-0E5EDEFC94F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/mybloggie_214_sql.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442323/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3179",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/mybloggie_214_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442323/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message."
      }, {
        "lang" : "es",
        "value" : "index.php en myWebland myBloggie 2.1.4 y versiones anteriores permite a atacantes remotos obtener información confidencial mediante una consulta que solo especifica el modo viewsate, la cual revela el prefijo de la tabla en un mensaje de error SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "75798A07-13C1-4BEE-9575-0E5EDEFC94F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6763A-BD4B-4A6B-8AF3-04B4BCEC4FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3897412E-B35E-44CE-91C6-6BBA9EB5B047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E310D0A0-AB13-44D3-847B-505D4E7EB011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E0FF8C-1AEA-46C0-A867-F2728AA5E069"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/mybloggie_214_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21376",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442323/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/mybloggie_214_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442323/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the BEAUT_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en Beautifier/Core.php de Brad Fears phpCodeCabinet 0.5 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro    BEAUT_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brad_fears:phpcodecabinet:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06439566-EB5A-403D-AEE9-A9114A59FD97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brad_fears:phpcodecabinet:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3517BE-DED1-4795-9639-46818F29D3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brad_fears:phpcodecabinet:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D814368-ED3B-47EE-BFA2-2A547B10BD05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brad_fears:phpcodecabinet:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4B04A1-AD63-42C7-8AFC-B7AB6C323FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brad_fears:phpcodecabinet:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B6FA086-CAE7-4993-8316-9A0343FE567B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0146.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PHPCabinetRFIAugust052006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0146.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/PHPCabinetRFIAugust052006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en news.php en Torbstoff News 4 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pfad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torbstoff:torbstoff_news:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBFCC32-41C2-4379-BAE9-BFB0C93D17E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21375",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD, allow remote attackers to execute arbitrary code via (1) a large .S3M file handled by the mpLoadS3M function, (2) a crafted .IT file handled by the itplayerclass::module::load function, (3) a crafted .ULT file handled by the mpLoadULT function, or (4) a crafted .AMS file handled by the mpLoadAMS function."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en pila en Open Cubic Player 2.6.0pre6 y versiones anteriores para Windows y 0.1.10_rc5 y versiones anteriores para Linux/BSD, permite a atacantes remotos ejecutar código de su elección mediante (1) un fichero grande .S3M manejado por la función mpLoadS3M, (2) un fichero manipulado .IT manejado por la función itplayerclass::module::load, (3) un fichero manipulado .ULT manejado por la función mpLoadULT, ó (4) un fichero manipulado .AMS manejado por la función mpLoadAMS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_cubic_player:open_cubic_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.10_rc5",
            "matchCriteriaId" : "10D6EDA7-2CD4-489D-9978-0FD631625AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_cubic_player:open_cubic_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.60_pre6",
            "matchCriteriaId" : "2D87721E-D113-45CD-B36D-B871C1982637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/ocpbof-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21267",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441730/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/ocpbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441730/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Netious CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en  Netious CMS 0.4 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username.\r\nNOTA: El origen de esta información es desconocido; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netious_cms:netious_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "1F122496-274E-4270-B45C-B709812D2B8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21347",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netious CMS 0.4 initializes session IDs based on the client IP address, which allows remote attackers to gain access to the administration section when originating from the same IP address as the administrator.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Netious CMS 0.4 inicializa la sesión IDs basado sobre clientes con direcciones IP, lo cual permite a un atacante remoto obtener acceso a la sección de administrador originando desde la misma dirección IP como el administrador. NOTA:la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netious_cms:netious_cms:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECD3C9C-0A74-491B-B904-B2FBE4857E3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21347",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-09T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la utilidad utxconfig de Sun Ray Server Software 3.x permite a usuarios locales crear o sobrescribir ficheros locales de su elección mediante vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:ray_server_software:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C953069B-2CAD-4EDB-807C-A6DCBC031FD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101924-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101924-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in auto_check_renewals.php in phpAutoMembersArea (phpAMA) 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installed_config_file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en auto_check_renewals.php en phpAutoMembersArea (phpAMA) 3.2.4 y anteriores permite a atacantes remotos ejecutar código PHP  mediante una URL en el parámetro 'installed_config_file'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_walker:phpautomembersarea:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.4",
            "matchCriteriaId" : "06DEC54B-2B2C-469F-9061-309565EFF6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_walker:phpautomembersarea:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BBC549-FE42-49E8-91A9-A2BBB0A99DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_walker:phpautomembersarea:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E50093-A91F-48B9-83FF-D1D9FED20432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_walker:phpautomembersarea:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5944719-3D90-4414-B7D6-8F96475F73AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_walker:phpautomembersarea:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A40A7B7-80EA-4662-AD14-28F34733695D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dwalker.co.uk/forum/viewtopic.php?t=517",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442242/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19354",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dwalker.co.uk/forum/viewtopic.php?t=517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442242/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nDavid Walker, phpAutoMembersArea, 3.2.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4051",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de fichero PHP remoto en global.php en Turnkey Web Tools PHP Live Helper 2.0 y anteriores permite a atacantes remotos ejecutar código PHP arbitrario mediante una URL en el parámetro abs_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_web_tools:php_live_helper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "064B6498-F319-4BEB-AA77-4183CD0C6398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_web_tools:php_live_helper:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C93ED5E-E1D4-4956-8D16-1FF270F1F7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_web_tools:php_live_helper:2.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2043D6D6-2B41-443F-A419-DC83BD88C33B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv43-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016639",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442219/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19349",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv43-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442219/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) admin/index.php, (2) admin/adminindex.php, (3) admin/adminglobal.php, (4) admin/login.php, (5) admin/menu.php or (6) admin/header.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Turnkey Web Tools PHP Simple Shop 2.0 y anteriores permiten a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro abs_path a (1) admin/index.php, (2) admin/adminindex.php, (3) admin/adminglobal.php, (4) admin/login.php, (5) admin/menu.php o (6) admin/header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:turnkey_web_tools:php_simple_shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "D197139E-344F-41BD-9C04-DC7E86DF7C5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv44-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21371",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442422/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv44-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442422/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the Vb8878b936c2bd8ae0cab parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en templates/header.php en ME Download System 1.3 permiten a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro Vb8878b936c2bd8ae0cab."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ehmig:me_download_system:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781CBD39-82D8-4C3C-A3B3-F26E159EA4B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_282.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442140/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19336",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_282.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in ME Download System 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) Vb8878b936c2bd8ae0cab parameter to (a) inc/sett_style.php or (b) inc/sett_smilies.php; or the (2) Vb6c4d0e18a204a63b38f, (3) V18a78b93c3adaaae84e2, or (4) V9ae5d2ca9e9e787969ff parameters to (c) inc/datei.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en ME Download System 1.3 permiten a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro (1) Vb8878b936c2bd8ae0cab en ) inc/sett_style.php o (b) inc/sett_smilies.php; o los parámetros (2) Vb6c4d0e18a204a63b38f, (3) V18a78b93c3adaaae84e2, o (4) V9ae5d2ca9e9e787969ff en c) inc/datei.php. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ehmig:me_download_system:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781CBD39-82D8-4C3C-A3B3-F26E159EA4B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21359",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to (1) include/colorswitch.php, (2) contentimages.class.php, (3) ipfunctions.php, (4) configfunctions.php, (5) printpagedetails.php, or (6) log.class.php.  NOTE: the copyright.php vector is already covered by CVE-2006-3993."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Olaf Noehring The Search Engine Project (TSEP) 0.942 y anteriores permiten a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro tsep_config[absPath] en (1) include/colorswitch.php, (2) contentimages.class.php, (3) ipfunctions.php, (4) configfunctions.php, (5) printpagedetails.php, o (6) log.class.php. NOTA: el vector copyright.php está cubierto por  CVE-2006-3993."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tsep:tsep:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.942",
            "matchCriteriaId" : "0F66C834-FFE5-40D5-8D2F-A8033027FF4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=597790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?thread_id=1546639&forum_id=369628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442098/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19326",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=597790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?thread_id=1546639&forum_id=369628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442098/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and earlier and (b) The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.  NOTE: portions of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en el el proceso de validación en katzlbt (a) The Address Book 1.04e y anteriores y (b) The Address Book Reloaded before 2.0-rc4 permiten a un atacante remoto ejecutar comandos SQL de su elección a través de los parámetros (1)username  o (2) password. NOTA: porciones de los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_address_book:the_address_book:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04e",
            "matchCriteriaId" : "E9712628-3C1B-49F1-A6F2-4270DAA9082C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_address_book_reloaded:the_address_book_reloaded:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "1202A797-EDF6-4435-BE3C-ADDD4B1FA822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21379",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=437760&group_id=172286",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=437760&group_id=172286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the preview_create function in gui.cpp in Mitch Murray Eremove 1.4 allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a large email attachment."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función preview_create en in gui.cpp en Mitch Murray Eremove 1.4 permite a un atacante remoto provocar denegación de servicio (caida de aplicación), y posiblemente ajecutar código de su elección, a través de un adjunto al correo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitch_murray:eremove:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580841EB-FD53-4D2A-B17E-444F33FE9564"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv42-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442220/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv42-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442220/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search.  NOTE: some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en archive.php en Simplog 0.9.3 y anteriores permiten a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro keyw cuando se realiza una búsqueda. NOTA: algunos de estos detalles se obtuvieron de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.3",
            "matchCriteriaId" : "64C117A4-B998-4278-8F89-8F69F895F853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21390",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442456/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442456/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) newsscript_lyt.php, (2) newsticker/newsscript_get.php, (3) inc/output/news_theme1.php, (4) inc/output/news_theme2.php, or (5) inc/output/news_theme3.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en UNSOLVED NEWSolved Lite 1.9.2, y posiblemente anteriores, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro abs_path de (1) newsscript_lyt.php, (2) newsticker/newsscript_get.php, (3) inc/output/news_theme1.php, (4) inc/output/news_theme2.php, o (5) inc/output/news_theme3.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usolved:newsolved_lite:1.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EC47CA0-1E07-4508-97A8-686FEE8FC2A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_286.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442434/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19379",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.usolved.net/site/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bb-pcsecurity.de/sicherheit_286.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442434/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.usolved.net/site/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en calendar.php de Visual Events Calendar 1.1 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cfg_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-scripts:visual_events_calendar:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5FD326-192A-4559-BD64-7811E895CE65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21391",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442468/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442468/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep_par_rapport_racine parameter.  NOTE: this issue has been disputed by third party researchers, stating that the rep_par_rapport_racine variable is initialized before use"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en en index.php en Thomas Pequet phpPrintAnalyzer 1.1, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro rep_par_rapport_racine. NOTA: este problema ha sido impugnado por investigadores de terceras partes, afirmando que la variable rep_par_rapport_racine se inicializa antes de su uso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thomas_pequet:phpprintanalyzer:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3DC1CF-CF4F-440D-AA9C-58ABAE02615C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0305.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442492/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19397",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0305.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442492/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en usr/extensions/get_tree.inc.php en Dmitry Sheiko SAPID Shop 1.2 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro GLOBALS[root_path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmitry_sheiko:sapid_shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "B1BE56F0-7A3E-43EF-8041-2754445DDBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21414",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_blog_infochannel.inc.php, (b) usr/extensions/get_blog_meta_info.inc.php, or (c) usr/extensions/get_infochannel.inc.php; or the (2) GLOBALS[root_path] parameter to (d) usr/extensions/get_tree.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Csaba Godor SAPID Blog Beta 2 y versiones anteriores permite a atacantes remotos  ejecutar código PHP de su elección mediante una URL en el parámetro (1) root_path en (a) usr/extensions/get_blog_infochannel.inc.php, (b) usr/extensions/get_blog_meta_info.inc.php, ó (c) usr/extensions/get_infochannel.inc.php; ó  el prámetro (2) GLOBALS[root_path] en (d) usr/extensions/get_tree.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csaba_godor:sapid_blog_beta_2:initial:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1301BB11-072C-4574-BBCE-B03308595B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/3196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: it was later reported reported that 2.0 is also affected."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en default.asp en YenerTurk Haber Script 1.0 y anteriores permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro id. NOTA: fue divulgado más adelante que la 2.0 por lo que también está afectado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yenerturk:yenerturk_haber_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70A073DF-CED9-48CD-A258-5A9C65E41109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yenerturk:yenerturk_haber_script:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265F5593-8527-4263-9E53-BF4B1F615973"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21397",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447653/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19393",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447653/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_calendar.inc.php or the (2) GLOBALS[root_path] parameter to (b) usr/extensions/get_tree.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Dmitry Sheiko SAPID Gallery 1.0 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el (1) parámetro root_path a (a) usr/extensions/get_calendar.inc.php o el (2) parámetro GLOBALS[root_path] a usr/extensions/get_tree.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmitry_sheiko:sapid_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "84C7FDA9-77EA-40DD-92B4-05628665C4EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21413",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphical Device Interface Plus library (gdiplus.dll) in Microsoft Windows XP SP2 allows context-dependent attackers to cause a denial of service (application crash) via certain images that trigger a divide-by-zero error, as demonstrated by a (1) .ico file, (2) .png file that crashes MSN Messenger, and (3) .jpg file that crashes Internet Explorer.  NOTE: another researcher has not been able to reproduce this issue."
      }, {
        "lang" : "es",
        "value" : "EL Graphical Device Interface Plus library (gdiplus.dll) en Microsoft Windows XP SP2 permite a un atacante dependiente del contexto provocar denegación de servicio (caida de aplicación) a tavés de ciertas imágenes que disparan un error de división por cero, como se demostró por un (1) fichero .ico, (2) fichero .png que tira al MSN Messenger, y (3) fichero .jpg que tira el Internet Explorer. NOTA: otro investigador no ha podido reproducir este asunto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/441548/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441723/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441875/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441548/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441723/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/441875/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 (\"Not Found\") error page.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en cake/libs/error.php en CakePHP anterior a 1.1.7.3363 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la URL, lo cual se refleja en una página de error 404 (\"no encontrado\"). NOTA: algunos de estos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.6.3264",
            "matchCriteriaId" : "30454E01-9D6C-4967-8BA5-7158697811EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:1.0.1.2708:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81096BF-7B70-4453-8A50-9DDC28996E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:1.1.3.2967:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA3A5E7-413C-4900-9C8D-AA5625BAA3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:1.1.4.3104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6CB5D7-C53F-40AD-BDB5-A890ED6305F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:1.1.5.3148:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A86480-42D7-42D6-B320-61CC37069B67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cakeforge.org/frs/shownotes.php?release_id=124",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21383",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cakeforge.org/frs/shownotes.php?release_id=124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks.  NOTE: this script might also allow attackers to generate the server-side \"secret\" URL without determining the original password, but this possibility was not discussed by the original researcher."
      }, {
        "lang" : "es",
        "value" : "La secuencia de comandos pswd.js deja al cliente calcular si un nombre de usuario y contraseña con valores \"hased\" para un servidor y usa un esquema de hashing que crea un grán número de colisiones, facilita a los atacantes remotos llevar a cabo ataques de fuerza bruta sin conexión. NOTA: esta secuencia de comandos también puede permitir a los atacantes generar la URL con el \"secreto\" del lado del servidor sin determinar la contraseña original, aunque esta posibilidad no se ha discutido en la investigación original."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pswd.js:pswd.js:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E605E305-D4DB-4AAD-80B0-C6F9E79CD624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442120",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19333",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) m and (2) c parameters in index.php, (3) a search action, and (4) a \"submit comment\" action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Elaine Aquino Online Zone Journals (OZJournals) 1.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) m y (2) c en index.php, (3) una acción de búsqueda, y (4) una acción de \"enviar comentario\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ozjournals:ozjournals:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7847C929-15BA-4525-9292-A4D29C664032"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21311",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442035/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.youfucktard.com/blog/2006/08/02/ozjournal-v15-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442035/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.youfucktard.com/blog/2006/08/02/ozjournal-v15-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en Imendio Planner 0.13 permite a atacantes con la intervención del usuario ejecutar código de su elección a través de especificadores de cadena de formato en un nombre de archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imendio_planner:imendio_planner:0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7AC8BE-9BD7-4F19-846F-BA6CA7371692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442439/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442439/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-10T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de extensión de signo en la función createBrushIndirect en la librería GDI (gdi32.dll) en Microsoft Windows XP, Server 2003, y posiblemente otras versiones, permite a atacantes con asistencia del usuario causar una denegación de servicio (caída de aplicación) mediante un fichero WMF artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://determina.blogspot.com/2007/01/whats-wrong-with-wmf.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048530.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048547.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21377",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442420/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442426/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456585/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://determina.blogspot.com/2007/01/whats-wrong-with-wmf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048530.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048547.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442420/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456585/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the (1) haber_id parameter to haber_detay.asp, and allow remote authenticated users to execute arbitrary SQL commands via the (2) menu_id parameter to menu.asp."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Club-Nuke [XP] 2.0 LCID 2048 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) haber_id a haber_detay.asp, y permite a usuarios remotos autenticados ejecutar comandos SQL de su elección mediante el parámetro menu_id a menu.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:club-nuke:club-nuke:2.0_lcid_2048:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5BB23E-8D71-4434-840A-19A83D105BB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "User Logins must be enabled by Admin to exploit this vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) login.php, (2) reactivate.php, or (3) register.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Fabian Hainz phpCC Beta 4.2 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro base_dir a (1) login.php, (2) reactivate.php, o (3) register.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcc:phpcc:beta_4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973B60E8-FC41-41E0-97B4-0E945BE3A994"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/442428/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19376",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.solpotcrew.org/adv/solpot-adv-05.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442428/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.solpotcrew.org/adv/solpot-adv-05.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com_jd-wiki) 1.0.2 and earlier for Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en lib/tpl/default/main.php en el JD-Wiki Component (com_jd-wiki) 1.0.2 y versiones anteriores para Joomla! cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:jd-wiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "2F33E4CB-C458-4ED0-B4C1-7B19F2E9FB8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21389",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomladeveloping.org/component/option%2Ccom_jd-wp/Itemid%2C29/p%2C33/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19373",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomladeveloping.org/component/option%2Ccom_jd-wp/Itemid%2C29/p%2C33/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled.\r\nThis vulnerability is addressed in the following product release:\r\nJoomla!, JD-Wiki, 1.0.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the INIT_PATH parameter to (1) lib/folder.class.php, (2) lib/email.inc.php, (3) lib/document.class.php or (4) lib/auth.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro INIT_PATH en (1) lib/folder.class.php, (2) lib/email.inc.php, (3) lib/document.class.php ó (4) lib/auth.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wim_fleischhauer:docpile_we:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.2",
            "matchCriteriaId" : "B0EE417C-50B0-4F6F-8B14-93F6A60C2AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442584/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442584/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the INIT_PATH parameter to (1) lib/access.inc.php, (2) lib/folders.inc.php, (3) lib/init.inc.php or (4) lib/templates.inc.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro INIT_PATH de (1) lib/access.inc.php, (2) lib/folders.inc.php, (3) lib/init.inc.php ó (4) lib/templates.inc.php. \r\nNOTA: el origen de esta información es incierto, los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wim_fleischhauer:docpile_we:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDAD1EA-C125-473A-9B19-93E3F08229EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21412",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en CheckUpload.php en Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, y posiblemente anteriores, permite a un atacante remoto ejecutar código PHP a través de una URL en el parámetro Language."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comet:comet_webfile_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1",
            "matchCriteriaId" : "AFB887EA-451F-4F3C-B958-A79726C08D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21432",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1_%28Language%29_Remote_File_Inclusion.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442714/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1_%28Language%29_Remote_File_Inclusion.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442714/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter."
      }, {
        "lang" : "es",
        "value" : "pm-php (también conocido como el sistema PM) en DeluxeBB 1.08, y posiblemente anteriores, permite a un atacante remoto evitar la validación dando un nombre de usuario de su elección en el parámetro cookie membercookie."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB0CB89-67EF-46F3-8370-ABFBDD54E959"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21387",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442464/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the subject parameter (aka the topic title field)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en newpost.php en DeluxeBB 1.08, y posiblemente anteriores, permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro subject (también conocido como el campo de título de topic)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.08",
            "matchCriteriaId" : "DFD476A9-7303-4020-BEC5-3714E0AB9E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3543354-4CC9-4C62-ACCE-6B646F797245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442464/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges by sniffing or cross-site scripting (XSS) and conduct password guessing attacks."
      }, {
        "lang" : "es",
        "value" : "DeluxeBB 1.08, y posiblemente anteriores, usa cookies que incluyen el hash MD5 de una contraseña, lo cual permite a un atacante remoto escalar privilegios a través de sniffing o secuencias de comandos en sitios cruzados (XSS) y conducen la conrtaseña a ataques de conjetura."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.08",
            "matchCriteriaId" : "DFD476A9-7303-4020-BEC5-3714E0AB9E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3543354-4CC9-4C62-ACCE-6B646F797245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442464/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442464/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set, as demonstrated by the \"+ADw-SCRIPT+AD4-\" sequence."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Niovell GroupWise WebAccess 6.5 y 7 anterior al 27/07/2006 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un elemento SCRIPT codificado en un mensaje de correo electrónico con el juego de caracteres UTF-7, como se ha demostrado con la secuencia \"+ADw-SCRIPT+AD4-\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EFCA37-C863-4E22-B231-B0A10E65594E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5298016B-B6E3-4236-B99F-57353A495B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "27060485-FD94-4E73-87B6-2AE940F02283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A5347B-3A18-40D0-BD9F-F7966819CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "DF391879-EA38-4F0E-B0A4-C409E8A7386E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8AD732-79BB-4841-A55B-AD439783D6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048593.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21411",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&externalId=3701584&sliceId=SAL_Public",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442719/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048593.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.infobyte.com.ar/adv/ISR-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&externalId=3701584&sliceId=SAL_Public",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442719/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nNovell, GroupWise WebAccess, 6.5 20060727\r\nNovell, GroupWise WebAccess, 7 20060727"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the login page in Novell GroupWise WebAccess 6.5 before 20060721 and WebAccess 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via the GWAP.version parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la página de autenticación de acceso de Novell GroupWise WebAccess 6.5 anterior al 21/07//2006 y WebAccess 7 anterior al 27/07/2006 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro GWAP.version."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EFCA37-C863-4E22-B231-B0A10E65594E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_webaccess:7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF8AD732-79BB-4841-A55B-AD439783D6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21411",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016648",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19297",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3098",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28210",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/228/3574517_f.SAL_Public.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/228/3574517_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "This has been fixed in any build of GroupWise 7 WebAccess dated after July 27, 2006.\r\nThis has been fixed in any build of GroupWise 6.5 WebAccess dated after July 21, 2006."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters (\"|\" pipe symbol) in the file parameter.  NOTE: the attack can be extended to arbitrary commands by the presence of CVE-2006-4000."
      }, {
        "lang" : "es",
        "value" : "preview_email.cgi en Barracuda Spam Firewall (BSF) 3.3.01.001 hasta 3.3.03.053 permite a atacantes remotos ejecutar comandos mediante metacaracteres de línea de comandos (\"|\" símbolo de tubería) en el parámetro file. NOTA: el ataque puede extenderse a comandos de su elección por la presencia de CVE-2006-4000."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.01.001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4499AB68-D449-4A36-A243-F13F02C0EF95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E13260-BC29-45D9-98F3-0C2D7CF72A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442132/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442249/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442132/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442249/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges."
      }, {
        "lang" : "es",
        "value" : "Barracuda Spam Firewall (BSF), posiblemente 3.3.03.053, contiene una contraseña fija para la cuenta de administración para accesos desde 127.0.0.1 (localhost), lo cual permite a usuarios locales obtener privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.053:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E13260-BC29-45D9-98F3-0C2D7CF72A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/199348",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442249/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/199348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442249/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter, a different vector than CVE-2006-4040.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en viewevent.php en myWebland myEvent 1.x permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro myevent_path, un vector distinto de CVE-2006-4040. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:myevent:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25D884C-9F21-4E64-B567-E4C1C9B56D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:myevent:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96A4BA7-BA70-4286-BD59-4D46E44A05AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in phpAutoMembersArea (phpAMA) before 3.2.4 has unknown impact and attack vectors, related to \"a potential security exploit which is critical.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en phpAutoMembersArea (phpAMA) anterior a 3.2.4 tiene impacto y vectores de ataque desconocidos, relacionados con \"un código de explotación de seguridad que es crítico\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_walker:phpautomembersarea:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "219A1DDC-7E99-410C-9B95-CA32EFB9D7D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dwalker.co.uk/forum/viewtopic.php?t=516",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://dwalker.co.uk/forum/viewtopic.php?t=516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "Upgrade to 3.2.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to pagenavigation.php, a different vector than CVE-2006-4055.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en Olaf Noehring The Search Engine Project (TSEP) 0.942 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro tsep_config[absPath] de pagenavigation.php, un vector distinto de CVE-2006-4055. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olaf_noehring:the_search_engine_project:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.942",
            "matchCriteriaId" : "7259E2AC-D41C-4624-AE0D-16FFF2C7A9B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21291",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Elaine Aquino Online Zone Journals (OZJournals) 1.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro keywords. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ozjournals:ozjournals:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7847C929-15BA-4525-9292-A4D29C664032"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21311",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.cgi de mojoscripts.como mojoGallery permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro nombre de usuario (username). NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojoscripts:mojogallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627663FE-725A-40E5-B491-16A847ED3E8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21438",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Subject, (2) Comment, and (3) Add new comment sections."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en civicSpace 0.8.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante las secciones (1) Asunto, (2) Comentario, y (3) Añadir nuevo comentario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:civicspace:civicspace:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "239DFCF9-CE84-4D18-9764-2B2D2B6199D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442704/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442704/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application crash), or have other unknown impact, via (1) a long Location field sent by a web server, which triggers an overflow in the reconnect function in reader/http/http.c; (2) a long URL sent by a web server when AlsaPlayer is seeking a media file for the playlist, which triggers overflows in new_list_item and CbUpdated in interface/gtk/PlaylistWindow.cpp; and (3) a long response sent by a CDDB server, which triggers an overflow in cddb_lookup in input/ccda/cdda_engine.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en Andy Lo-A-Foe AlsaPlayer 0.99.76 y anteriores permiten a atacantes remotos provocar una denegación de servicio (cierre de aplicación), o tienen otros impactos desconocidos, mediante (1) un campo Localización (Location) largo enviado por un servidor web, lo que provoca un desbordamiento en la función reconnect en reader/http/http.c; (2) una URL larga enviada por un servidor web cuando AlsaPlayer está buscando un archivo de medios para la lista de reproducción, lo que produce un desbordamiento en new_list_item y CbUpdated em inetrface/gtk/PlaylistWindows.cpp; y (3) una respuesta larga enviada por un servidor CDDB, que ocasiona un desbordamiento en cddb_lookup en input/cdda/cdda_engine.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andy_lo-a-foe:alsaplayer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99.76",
            "matchCriteriaId" : "E32D41EC-546B-40F3-B63D-7BE62FA78DD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/alsapbof-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0249.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-24.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442725/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19450",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/alsapbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0249.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442725/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Webligo BlogHoster 2.2 allows remote attackers to inject arbitrary web script or HTML via the \"From: part of the comment post,\" probably involving the nickname parameter to previewcomment.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Webligo BlogHoster 2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de \"la parte De: (From:) del mensaje de comentario\", probablemente relacionado con el parámetro apodo (nickname) de previewcomment.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webligo:bloghoster:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638070DE-04EA-4BD9-BE66-BFD21F2985E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442706/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Comment section."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Archangel Management Archangel Weblog 0.90.02 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de las secciones (1) nombre (Name) o (2) comentario (Comment)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archangelmgt:weblog:0.90.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA85FCBF-1BF7-4C70-86AF-B6A6A8272685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442580/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442580/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows local users to perform unauthorized actions by visiting a web site that executes a JavaScript window.blur loop to remove focus from the browser window, then pressing CTRL-SHIFT-ESC to invoke the Task Manager."
      }, {
        "lang" : "es",
        "value" : "Simpliciti Locked Browser no limita adecuadamente las acciones de usuario a las que se pretenden dentro del entorno de Internet Explorer, lo cual permite a usuarios locales realizar acciones no autorizadas visiatndo un sitio web que ejecute un bucle JavasScript windows.blur para quitar el foco de la ventana de navegador, cuando se presiona CTRL-MAYUSCULAS-ESC para invocar el Administrador de Tareas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simpliciti:locked_browser:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252E167E-1226-4A42-BAF1-CA3AAB2213E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442058/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444026/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442058/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444026/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information."
      }, {
        "lang" : "es",
        "value" : "Un error de regresión en el paquete Perl para Red Hat Enterprise Linux 4 omite el parche para CVE-2005-0155, lo cual permite a usuarios locales sobrescribir archivos de su elección sin información de depuración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:linux_kernel_2.6.9:*:*:*:*:*",
            "matchCriteriaId" : "4A4A962F-3512-40C5-8860-F3212E441494"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0605.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0605.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-11T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de evaluación de variable dinámica en compose.php en SquirrelMail 1.4.0 hasta la versión 1.4.7 permite a atacantes remotos sobreescribir variables del programa arbitrarias y leer o escribir los archivos adjuntos y preferencias de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C179A3C-8C8C-429B-BACA-8ADAE4170465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E6734C-EE1C-40B6-9759-15298707A6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6733B8C-5A9E-45CE-8938-F39A69EB0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6591E5-5F36-4663-85A6-9D870FD49FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D062B70A-E5FF-403B-8BD1-777D6462B7CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A884536-4D27-4350-B815-AB4E625879DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED3CC3-E0A8-4C20-9EF7-405CD32E9EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD89F143-EEBF-472D-9653-E7534F5799FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "442BF5C9-DC58-4A94-A634-33D6A4F3C6DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C44025-C79D-4791-8EF6-3E26786E194E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-August/000970.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115532449024178&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21354",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0668.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442980/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442993/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-full.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-08-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-August/000970.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=306172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115532449024178&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0668.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442980/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442993/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-full.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.squirrelmail.org/security/issue/2006-08-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nSquirrelMail, SquirrelMail, 1.4.8"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-1168",
      "sourceIdentifier" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow."
      }, {
        "lang" : "es",
        "value" : "La función decompress en compress42.c en (1) ncompress 4.2.4 y (2) liblzw permite a atacantes remotos provocar una denegación de servicio (caída), y posiblemente ejecutar código de su elección, mediante datos manipulados que llevan a un desbordamiento inferior de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncompress:ncompress:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0FDFAB-53CE-409D-9E97-14A1E50CEBED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=141728",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://downloads.avaya.com/css/P8/documents/100158840",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2012-0810.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21427",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21434",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21437",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/21880",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/22296",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://secunia.com/advisories/22377",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-03.xml",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://securitytracker.com/id?1016836",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-226.htm",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1149",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:140",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2012:129",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0663.html",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.securityfocus.com/bid/19455",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3234",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=728536",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28315",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9373",
        "source" : "bc94ec7e-8909-4cbb-83df-d2fc9330fa88"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=141728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://downloads.avaya.com/css/P8/documents/100158840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2012-0810.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-226.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2012:129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_20_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0663.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=728536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the conf[classpath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en gpl.inc.php en Falko Timme y Till Brehm SQLiteWebAdmin 0.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro conf[classpath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:falko_timme_and_till_brehm:sqlitewebadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "2B664343-EBB6-48FE-A0EF-18AB59FC3ED5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/3195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en article-raw.php en Jason Alexander phNNTP 1.3 y aneriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro file_newsportal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jason_alexander:phnntp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "BB49D147-3D58-455E-B0CB-2FE043E8E4E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21407",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442582/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19423",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442582/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via \"password input.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.cgi de mojoscripts.com mojoGallery permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante \"la introducción de contraseña\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojoscripts:mojogallery:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627663FE-725A-40E5-B491-16A847ED3E8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21438",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Fill Threads Database (FTD) 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the (1) search field or (2) an e-mail message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Fill Threads Database (FTD) 3.7.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del campo (1) search o (2) un mensaje de correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fill_threads_database:fill_threads_database:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091CF8FF-FA6C-4360-8C3F-932AF55DA2ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in blursoft blur6ex 0.3 allows remote attackers to inject arbitrary web script or HTML via a comment title."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en blursoft blur6ex 0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un título de comentario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blursoft:blur6ex:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC9120D-01C7-4294-A009-C4C579B7D4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blursoft:blur6ex:0.3.462:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51672C5-2998-455C-829E-D3F103569188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442435/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442435/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Job Search module (job.module) 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el módulo Job Search (job.module) 4.6 anterior a la revisión 1.3.2.1 en Drupal permite a atacantes remotos ejecutar comandos SQL de su elección mediante una búsqueda de empleo o currículum."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:job_search:4.6_rev1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7326BA6E-13A7-4374-B5D0-58E7D7ECCA8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/77537",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21380",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/77537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Bibliography (biblio.module) 4.6 anterior a la revisión 1.1.1.1.4.11 y 4.7 anterior a la revisión 1.13.2.5 para Drupal permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:bibliography_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "742A15F9-111D-40C8-A1ED-9D8C175AC5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:bibliography_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6_rev1.1.1.1.4.10",
            "matchCriteriaId" : "EF7FC735-9298-4A2A-A3B4-F446EEA2F71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:bibliography_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7_rev1.13.2.4",
            "matchCriteriaId" : "8EA906ED-0CCA-4047-B88A-DCE7160C9AE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/77756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21435",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/77756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Bibliography (biblio.module 4.6 anterior a la revisión 1.1.1.1.4.11 y 4.7 anterior a la revisión 1.13.2.5 para Drupal permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:bibliography_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "742A15F9-111D-40C8-A1ED-9D8C175AC5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:bibliography_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6_rev1.1.1.1.4.10",
            "matchCriteriaId" : "EF7FC735-9298-4A2A-A3B4-F446EEA2F71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:bibliography_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7_rev1.13.2.4",
            "matchCriteriaId" : "8EA906ED-0CCA-4047-B88A-DCE7160C9AE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/77756",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21435",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19441",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/77756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems."
      }, {
        "lang" : "es",
        "value" : "Apache 2.2.2, cuando se ejecuta en Windows, permite a atacantes remotos leer código fuente de programas CGI mediante una petición que contenga caracteres en mayúscula (o mayúsculas alternadas) que evitan la directiva ScripAlias sensible a mayúsculas y minúsculas, pero permiten el acceso al archivo en sistemas de ficheros insensibles a mayúsculas y minúsculas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.58:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "F4E01B68-95EC-4CC7-8929-B3F4EF382ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9708E73F-33D8-45DD-BC88-19A590F05103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D0F5026B-E97E-48EB-871D-A77E44AE2C38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21490",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442882/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443487/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442882/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443487/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with \"severe\" or \"serious\" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112."
      }, {
        "lang" : "es",
        "value" : "Ruby on Rails anterior a 1.1.5 permite a un atacante remoto ejecutar código Ruby con un impacto \"severo\" o \"serio\" a través de una respuesta File Upload con una cabecera HTTP que modifica la variable LOAD_PATH, una vulnerabilidad diferente que CVE-2006-4112."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49B9DD7F-DA3A-49C5-B2D4-8A8BD73C6FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB938651-C874-4427-AF9B-E9564B258633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D59FAFB-5D48-4BD8-AD51-FF9A204E373D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE23CCE1-1713-4813-A0AB-1E10DBDA4D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "897109FF-2C37-458A-91A9-7407F3DFBC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289B1633-AAF7-48BE-9A71-0577428EE531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B947FD6D-CD0B-44EE-95B5-E513AF244905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3666B82-1880-4A43-900F-3656F3FB157A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE622F6D-AC7D-4D82-A33C-82C2CEFDB9B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06D18BA-A0AB-461B-B498-2F1759CBF37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EBE7E0-C474-43A7-85E3-093C754A253F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7195418-A2E9-43E6-B29F-AEACC317E69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39485B13-3C71-4EC6-97CF-6C796650C5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E16D8B-4FBD-4FB6-ABA8-B38ECA4D413F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A3B30A-65F0-4D63-9A09-B23E9FC8D550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62323F62-AD04-4F43-A566-718DDB4149CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:0.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E890B1-4237-4470-939A-4FC489E04520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F3B933-0F68-4F88-999C-0BE48BC88CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E13DAEA-F118-4CB2-88A5-54E3327B6B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC33BF68-D887-4C67-8E8C-D2A6CD877FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFCB88D-D946-4510-8DDC-67C32A606589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E793287E-2BDA-4012-86F5-886B82510431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "81365A89-D8F1-435A-B13B-C746C9FDCE67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04FDC63D-6ED7-48AE-9D72-6419F54D4B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF12B2F-39D9-48D5-9620-DF378D199295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E1EAAF-7B49-498B-BFEB-357173824F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9AD626-0AFA-4873-A701-C7716193A69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF69F60A-E8D3-4A4D-BBB5-DE42A1402262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "986D2B30-FF07-498B-A5E0-A77BAB402619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E3141A-162C-4674-BD7B-E1539BAA0B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E73F12-0551-42D2-ACC3-223C98B69C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6BA0659-2287-4E95-B30D-2441CD96DA90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01A4699-32D3-459E-B731-4240C8157F71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.koehntopp.de/archives/1367-Ruby-On-Rails-Mandatory-Mystery-Patch.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21466",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://weblog.rubyonrails.org/2006/8/9/rails-1-1-5-mandatory-security-patch-and-other-tidbits",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19454",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3237",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://blog.koehntopp.de/archives/1367-Ruby-On-Rails-Mandatory-Mystery-Patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://weblog.rubyonrails.org/2006/8/9/rails-1-1-5-mandatory-security-patch-and-other-tidbits",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "This vulnerability is fully addressed in the following product release:\r\nRuby on Rails, Ruby on Rails, 1.1.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the \"dependency resolution mechanism\" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or \"data loss,\" a different vulnerability than CVE-2006-4111."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el \"mecanismo de resolución de dependencias\" en Ruby on Rails 1.1.0 hasta 1.1.5 permite a un atacante remoto ejecutar código Ruby de su elección a través de una URL que no es manejada correctamente en el código de enrutamiento, lo cual lleva a una denegación de servicio (aplicación colgada) o \"perdida de datos\", una vulenrabilidad diferente que CVE-2006-4111."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E13DAEA-F118-4CB2-88A5-54E3327B6B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC33BF68-D887-4C67-8E8C-D2A6CD877FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFCB88D-D946-4510-8DDC-67C32A606589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E793287E-2BDA-4012-86F5-886B82510431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF706143-996C-4120-B620-3EDC977568DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21424",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21466",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/699540",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442934/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19454",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/699540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442934/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nRuby on Rails, Ruby on Rails, 1.1.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the REP_INC parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en genpage-cgi.php en Brian Fraval hitweb 4.2 y posiblemente anteriores versiones lo cual permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro REP_INC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitweb:hitweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "E474BCDD-8A5E-4E41-996B-22341A6FD96E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in view_com.php in Nicolas Grandjean PHPMyRing 4.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idsite parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en view_com.php en Nicolas Grandjean PHPMyRing 4.2.0 y anteriores permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro idsite."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyring:phpmyring:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2",
            "matchCriteriaId" : "F6F4A0D0-AA80-4A0B-980A-18C84048578C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0184.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21451",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.morx.org/ring.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442808/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19456",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0184.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.morx.org/ring.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442808/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the CFG[libdir] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en common.inc.php en PgMarket 2.2.3, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro CFG[libdir]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-zest_solutions:pgmarket:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7879E9-E16C-4529-AEE3-CAC01F8C7C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442684/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442684/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en pila en Lhaz anterior a 1.32 permite a atacantes con la intervención del usuario ejecutar código de su elección mediante un nombre de archivo largo en (1) un archivo LHZ, cuando se guarda el nombre de archivo durante la extracción; y (2) un archivo LHZ con una suma de comprobación CRC inválida, cuando se construye un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lhaz:lhaz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.31",
            "matchCriteriaId" : "400B507D-632F-4ED6-BF16-5F79DAB07A89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21348",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://vuln.sg/lhaz131-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.chitora.jp/lhaz.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442445/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://vuln.sg/lhaz131-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.chitora.jp/lhaz.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442445/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nLhaz, Lhaz, 1.32"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The squeue_drain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service (\"bad trap\" and system panic) by opening and closing a large number of TCP connections (\"heavy TCP/IP loads\").  NOTE: the original report specifies the function name as \"drain_squeue,\" but this is likely incorrect."
      }, {
        "lang" : "es",
        "value" : "La función squeue_drain en Sun Solaris 10, posiblemente sólo cuando se ejecuta en procesadores CMT, permite a atacantes remotos provocar una denegación de servicio (detección de error incorrecta o \"bad trap\" y kernel panic) abriendo y cerrando un gran número de conexiones TCP (\"cargas TCP/IP pesadas\"). NOTA. el informe original especifica el nombre de la función como \"drain_squeue\", pero esto es probablemente incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21453",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102554-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102554-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "It is reportedly unlikely that this affects systems not using CMT processors."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Temp_entered_login or (2) Temp_entered_email parameters to (a) gc.php, and in multiple parameters in (b) include/registrieren.php, possibly involving the (3) $form_email, (4) $form_vorname, (5) $form_nachname, (6) $form_strasse, (7) $form_plzort, (8) $form_land, (9) $form_homepage, (10) $form_bildpfad, (11) $form_profilsichtbar, (12) $Temp_sprache, (13) $form_tag, (14) $form_monat, (15) $form_jahr, (16) $Temp_akt_string, (17) $form_icq, (18) $form_msn, (19) $form_yahoo, (20) $form_username, and (21) $Temp_form_pass variables."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en GeheimChaos 0.5 y anteriores permiten atacantes remotos ejecutar comandos SQL de su elección  mediante los parámetros (1) (1) Temp_entered_login or (2) Temp_entered_email de (a) gc.php, y en múltiples parámetros de (b) include/registrieren.php, posiblemente relacionados con las variables (3) $form_email, (4) $form_vorname, (5) $form_nachname, (6) $form_strasse, (7) $form_plzort, (8) $form_land, (9) $form_homepage, (10) $form_bildpfad, (11) $form_profilsichtbar, (12) $Temp_sprache, (13) $form_tag, (14) $form_monat, (15) $form_jahr, (16) $Temp_akt_string, (17) $form_icq, (18) $form_msn, (19) $form_yahoo, (20) $form_username, y (21) $Temp_form_pass."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaossoft:geheimchaos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5",
            "matchCriteriaId" : "CCF7F177-F3CE-43E7-8BF7-223AE7E994A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115464299914573&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21355",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442209/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115464299914573&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442209/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the Temp_entered_password parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en gc.php en GeheimChaos 0.5 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Temp_entered_password. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaossoft:geheimchaos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5",
            "matchCriteriaId" : "CCF7F177-F3CE-43E7-8BF7-223AE7E994A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21355",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Recipe (recipe.module) anterior a 1.54 para Drupal 4.6 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6",
            "matchCriteriaId" : "37A224F5-AD67-44F8-BB77-214879E81429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A73149-677F-4112-95DF-04CFC94E46FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFF99BC-5E1D-4ADA-8BE7-07F7761C972C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA805CAF-A678-43A9-932D-EE35DBCCA793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18331C39-0ACE-4651-9D9F-1533AAD7C58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD40E38-71BA-42AD-BEBB-D4AD05ADDF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82317650-F136-446D-904D-354B4D26E91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6946291-0F27-4666-95C8-E744800D3EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79713A65-5A3A-4682-8A49-614174AB7C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E42FFA3-6FAE-4764-AF83-F544E6BA6CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:recipe_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.53",
            "matchCriteriaId" : "7A08F0C9-476D-41A1-9951-916AF53DB9AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/77538",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/77753",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21381",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19422",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/77538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://drupal.org/node/77753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "If you do not use the Recipe Module, or use Recipe Module version 1.54 or later, you are not affected by this vulnerability.\r\nThis vulnerability has been addressed in the latest patch for:\r\nDrupal, Drupal, 4.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en owimg.php3 de See-Commerce 1.0.625 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro path (ruta)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:see-commerce:see-commerce:1.0.625:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00457145-6BD8-4B9C-9EB7-E82D6233396F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21460",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php."
      }, {
        "lang" : "es",
        "value" : "Simple one-file guestbook 1.0 y anteriores permitea atacantes remotos evitar la autenticación y borrar entradas del libro de visitas mediante un parámetro id modificado para guestbook.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_one-file_guestbook:simple_one-file_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "D2AF6C80-AC32-429A-9F93-75A6BA712CD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://it.security.netsons.org/exploit/simplegb.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21429",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442884/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19437",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://it.security.netsons.org/exploit/simplegb.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442884/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the url_index parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en boitenews4/index.php de Boiet de News 4.0.1 permite a atacantes remotos ejecutar código PHP de su elección  mediante una URL en el parámetro url_index."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boite_de_news:boite_de_news:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98099A7-5A0E-4E2A-B61B-88B473E01563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19440",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program."
      }, {
        "lang" : "es",
        "value" : "La biblioteca libXm en LessTif 0.95.0 y anteriores permite a usuarios locales escalar privilegios mediante la variable de entorno DEBUG_FILE, la cual se utiliza para crear archivos modificables por todo el mundo cuando libXm se ejecuta desde un programa con setuid activado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lesstif:lesstif:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95.0",
            "matchCriteriaId" : "0445D40E-8D8B-4805-AFDC-9C08E415FAEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lesstif:lesstif:0.93.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A4B331-2868-46E3-9734-DC3AEFD2F756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://karol.wiesek.pl/files/lesstif-advisory.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://karol.wiesek.pl/files/lesstif-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "LessTif is shipped with Red Hat Enterprise Linux 2.1 but not 3 or 4.  On Enterprise Linux 2.1 we build LessTif with debugging disabled, so the DEBUG_FILE environment variable is ignored and this issue cannot be exploited.\n",
        "lastModified" : "2006-08-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in main.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to execute arbitrary code via a large nickname, which is not properly handled by the listen_thread_udp function."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en main.c de DConnect Daemon 0.7.0 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un apodo largo, que no es manejado adecuadamente por la función listen_thread_udp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C29EACF1-C006-4819-8E24-FDC6CC1BA321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6E6F96-90F3-47CA-B6F6-B88A96A7709A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64776EF-2736-4542-B64C-BDD413E1F91B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21384",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442440/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19369",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442440/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nDConnect, DConnect Daemon, 0.7.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a client message before providing the nickname, which triggers a null pointer dereference."
      }, {
        "lang" : "es",
        "value" : "La función dc_chat en el cmd.dc.c del DConnect Daemon 0.7.0 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante el envío un mensaje al cliente antes de proporcionar el \"apodo\" (nickname), que dispara una referencia a un puntero nulo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C29EACF1-C006-4819-8E24-FDC6CC1BA321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6E6F96-90F3-47CA-B6F6-B88A96A7709A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64776EF-2736-4542-B64C-BDD413E1F91B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21384",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442440/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19370",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442440/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nDConnect, DConnect Daemon, 0.7.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de cadena de formato en DConnect Daemon 0.7.0 y anteriores permiten a administradore remotos ejecutar código de su elección mediante especificadores de cadena de formato que no son manejados adecuadamente al llamar a las funciones (1) privmsg() o (2) pubmsg desde (a) cmd.user.c, (b) penalties.c, o (c) cmd.dc.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C29EACF1-C006-4819-8E24-FDC6CC1BA321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A6E6F96-90F3-47CA-B6F6-B88A96A7709A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dconnect:dconnect_daemon:0.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64776EF-2736-4542-B64C-BDD413E1F91B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016641",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442440/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19371",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442440/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation of this vulnerability requires superior user or administrator privileges.\r\nThis vulnerability is addressed in the following product release:\r\nDConnect, DConnect Daemon, 0.7.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message."
      }, {
        "lang" : "es",
        "value" : "Múliples desbordamientos de búfer en Symantec VERITAS Backup Exec para Netware Server Remote Agent para Windows Server 9.1 y 9.2 (todas las construcciones), Backup Exec Continuous Protection Server Remote Agent para Windows Server 10.1 (10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, y 10.1.327.401), y Backup Exec para Windows Server y Remote Agent 9.1 (9.1.4691), 10.0 (10.0.5484 y 10.0.5520), y 10.1 (10.1.5629) permite a un atacante remoto provocar denegación de servicio (caida de aplicación) y posiblemente ejecutar código de su elección a través de mensajes RPC manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1:*:windows_server_remote_agent:*:*:*:*:*",
            "matchCriteriaId" : "E11FD33B-E9E1-4C1D-A3C2-622A99637B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.1_build9.1.4691:*:windows_server_remote_agent:*:*:*:*:*",
            "matchCriteriaId" : "0113460A-3653-471F-8CBC-DADDB8019424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:9.2:*:windows_server_remote_agent:*:*:*:*:*",
            "matchCriteriaId" : "F0FE14BC-EC55-41D8-A3B2-01E5D713C537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:windows_server_remote_agent:*:*:*:*:*",
            "matchCriteriaId" : "4D552062-F18D-4800-9618-C1A5F967F7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_build10.0.5484:*:windows_server_remote_agent:*:*:*:*:*",
            "matchCriteriaId" : "398B0C1C-3969-4664-A175-AF149DE701BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.0_build10.0.5520:*:windows_server_remote_agent:*:*:*:*:*",
            "matchCriteriaId" : "CA98695D-2217-419A-8CEA-8EE30FEF6A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.1:*:windows_server_remote_agent:*:*:*:*:*",
            "matchCriteriaId" : "D1C409F7-A4AA-4693-AFB2-8DCA9E9AB928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.1.325.6301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDC7A0-1BDF-4BE6-ACC0-9508092A07C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.1401:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B46764B-6B34-414D-AD39-61A0C645F940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.2501:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E7CF0C-3200-4976-B57B-91BDB8F50C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.3301:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F47DBE4-186F-4064-8FEF-FA36050B2074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.1.327.401:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AAC413A-B3BA-4AD4-9BD4-0BFC4355451E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:backup_exec:10.1_build10.1.5629:*:windows_server_remote_agent:*:*:*:*:*",
            "matchCriteriaId" : "5CAE4CB5-9716-4C34-A7F2-BA8133ECBA38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21472",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seer.entsupport.symantec.com/docs/284623.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/647796",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443037/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seer.entsupport.symantec.com/docs/284623.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/647796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443037/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component (com_webring) 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the component_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabildad PHP de inclusión remota de archivo en admin.webring.docs.php en the Webring Component (com_webring) 1.0 y anteriores para Joomla! permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro component_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:webring_component:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158BA196-1A0F-410C-85E1-4BAAB739A3DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21495",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443211/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443211/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and earlier for Mambo and Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en admin.remository.php en the Remository Component (com_remository) 3.25 y anteriores para Mambo y Joomla, cuando register_globals está habilitado, permite a una atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matt_smith:remository_for_mambo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.25",
            "matchCriteriaId" : "7B246BF7-7AFE-4ABC-BA59-47DABED88213"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21477",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.remository.com/component/option%2Ccom_mamboboard/func%2Cview/catid%2C6/id%2C3666/#3666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.remository.com/rem/Remository/Download/Mambo-Software/ReMOSitory-components/Remository-3.26/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442869/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19465",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.remository.com/component/option%2Ccom_mamboboard/func%2Cview/catid%2C6/id%2C3666/#3666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.remository.com/rem/Remository/Download/Mambo-Software/ReMOSitory-components/Remository-3.26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442869/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en ArcSoft MMS Composer 1.5.5.6, y posiblemente anteriores, y 2.0.0.13, y posiblemente anteriores, permite a un atacante remoto provocar denegación de servicio (caida) o ejecutar código a través de mensajes MMS(Multimedia Messaging Service) que disparan el desbordamiento de búfer en los programas de análisis (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcsoft:mms_composer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.5.6",
            "matchCriteriaId" : "6741B26D-247C-454A-974B-6A0D324242C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcsoft:mms_composer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.13",
            "matchCriteriaId" : "6D00B33D-55C7-487E-860E-56039F05D686"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21426",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arcsoft.com/support/downloads/download_patches/mms.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442841/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arcsoft.com/support/downloads/download_patches/mms.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442841/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service (resource exhaustion and application crash) via WAPPush messages to UDP port UDP 2948."
      }, {
        "lang" : "es",
        "value" : "ArcSoft MMS Composer 1.5.5.6 y posiblemente anteriores, y 2.0.0.13 y posiblemente anteriores, permiten a un atacante remoto provocar denegación de servicio (agotamiento de recurso y caida de aplicación) a través de mensajes WAPPush a los puertos UDP o UDP 2948."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcsoft:mms_composer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.5.6",
            "matchCriteriaId" : "6741B26D-247C-454A-974B-6A0D324242C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcsoft:mms_composer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.13",
            "matchCriteriaId" : "6D00B33D-55C7-487E-860E-56039F05D686"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21426",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1387",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.arcsoft.com/support/downloads/download_patches/mms.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442841/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arcsoft.com/support/downloads/download_patches/mms.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442841/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en  SAP Internet Graphics Service (IGS) 6.40 y anteriores, y 7.00 y anteriores, permite a un atacante remoto provocar denegación de servicio (caida) o ejecutar código de su elección a través de respuestas HTTP. NOTA:  \t\r\nesta información se basa sobre una información vaga. Los detalles serán actualizados una vez que el período de gracia haya terminado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_graphics_server:6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB24289F-DACB-43BA-80A3-C1BD56E88AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_graphics_server:6.40_patch_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2643B2-F01D-455E-8246-EA3E40168D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_graphics_server:6.40_patch_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DB0895-FBD7-440E-9066-D6EAD8508B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_graphics_server:7.00_patch_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2698C5-993D-4195-B637-44D24124575D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21448",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Buffer_Overflow.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/259540",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442840/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/457286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/472889/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Buffer_Overflow.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/259540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442840/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/457286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/472889/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade patches"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability related to a \"design flaw\" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests.  NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada relacionado con un \"defecto de diseño\" en SAP Internet Graphics Service (IGS) 6.40 y anteriores y 7.00 y anteriores permite a un atacante remoto provocar denegación de servicio (caida de servicio) a través de respuestas HTTP. NOTA: Esta información está basada en un acceso al sistema vago. Los detalles serán actualizados después de que el periodo de gracia haya finalizado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_graphics_server:6.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB24289F-DACB-43BA-80A3-C1BD56E88AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_graphics_server:6.40_patch_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2643B2-F01D-455E-8246-EA3E40168D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_graphics_server:6.40_patch_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DB0895-FBD7-440E-9066-D6EAD8508B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_graphics_server:7.00_patch_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2698C5-993D-4195-B637-44D24124575D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115524314804055&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21448",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Denial_of_Service.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442838/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115524314804055&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Denial_of_Service.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442838/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the calpath parameter.  NOTE: this issue has been disputed by a third party, who says that the affected $calpath variable is set to a constant value in the beginning of the script. CVE concurs that the initial report is invalid"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en cal_config.inc.php de Calendarix 0.7.2006401 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro calpath. NOTA: este problema ha sido impugnado por una tercera parte, la cual dice que la variable afectada $calpath se asigna a un valor constante en el principio de la secuencia de comandos. CVE coincide en que el informe inicial es inválido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vincent_hor:calendarix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.2006-04-01",
            "matchCriteriaId" : "F82A02D7-9F3E-4990-96CB-DCC89D351BD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000975.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443018/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443152/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443225/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443292/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000975.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443152/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443225/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) \"SOAP requests and responses\", (2) mbean, (3) ThreadIdentitySupport, and possibly others."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en IBM WebSphere Application Server anterior a 6.1.0.1 tienen impacto no especificado y vectores de ataque relacionados con (1) \"peticiones y respuestas SOAP\", (2) mbean, (2) ThreadIdentitySupport, y posiblemente otros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.0",
            "matchCriteriaId" : "BC9EDC2A-E09A-4517-A521-AF8D87EEC805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EE7744-4584-4AE4-9F27-11EFAA002E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE0C501-4062-49D0-8983-5E92765C7181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27E903-6D65-4D29-9583-43FB4CB473B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40DEF90-CE7F-46BB-A6FF-50C1797866B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21440",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) \"script generated syntax on wsadmin command line,\" and (3) traces."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server anteior a 6.1.0.1 permite a atacantes obtener información sensible mediante vectores no especificados relacionados con (1) el archivo de registro (log), (2) \"sintaxis generada por secuencia de comandos en la línea de comandos wsadmin\", y (3) trazas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F45BA3-6504-47AF-B757-7B6D3526FBF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EE7744-4584-4AE4-9F27-11EFAA002E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE0C501-4062-49D0-8983-5E92765C7181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27E903-6D65-4D29-9583-43FB4CB473B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40DEF90-CE7F-46BB-A6FF-50C1797866B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2604E01-E43E-4882-8896-5E646E850286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B68EE27-CC4F-4530-9DFE-D94171C45F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E5AEC-5C35-4962-B9BB-32D66290D1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4191D3-64AB-482C-9DEF-DD04C4C942CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21440",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK27857&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK28408&apar=only",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19463",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK27857&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK28408&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Microsoft Windows Help File viewer (winhlp32.exe) permite a atacantes con la intervención del usuario ejecutar código de su elección a través de ficheros HLP manipulados.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:help_file_viewer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA21AF56-28EB-42C6-BF21-0A2AAC8AB69F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443034/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19490",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443034/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors related to ifconfig and either netstat or SNMP queries."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en Sun Solaris 10 permite a un atacante remoto provocar denegación de servicio (system panic) a través de vectores no especificados relaciones con ifconfig y también con las consultas netstat o SNMP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21471",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016690",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102569-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102569-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) \"..%2f\" (encoded \"/\" slash), \"..../\" (multiple dot), and \"..%255c../\" (double-encoded \"\\\" backslash)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorios en IPCheck Server Monitor anterior 5.3.3.639/640 permite a un atacante remoto leer archivos de su elección a través de la secuencia modificada .. (punto punto) en la URL, incluyendo (1) \"..%2f\" (codificación \"/\" barra), \"..../\" (multiples puntos), y \"..%255c../\" (doble-codificación \"\\\" barra invertida)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:4.3.1.368:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D893AA0C-7C8A-4932-B6E9-96CE9C932AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:4.3.1.382:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50A39A25-9AAC-4408-AB31-0B09903FD641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:4.4.1.521:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4234547-7D3E-4893-8FEE-9AFE619ED4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:4.4.1.522:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2AFE26C-54D9-498E-BB50-2778A852EBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.0.1.272:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF9E20B-664A-49C4-9404-CD52E816650F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.0.1.299:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A738C8-BC16-44C2-A086-9C0AD3B4B388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.0.1.309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE5CE47-EA55-4879-A1A2-CE57821961A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.0.1.321:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910BA740-01C5-40C9-BE6C-9389BD9B9C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.1.0.341:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB962CF1-44D1-4D2E-9EA4-3835BE0E3B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.1.0.342:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6B279D-9367-4DFB-B60C-C577215EBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.1.0.345:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7648BA8-8F02-4DF1-A763-96EF599895BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.2.0.404:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF7387A-4A43-4CF1-8717-8710772EBACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.2.0.405:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C057AED9-565E-4B16-849B-B9FD9C0FF341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.2.0.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B364DE-C33B-431E-AB26-069DDF132B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.2.0.420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D2BAE0-C1EA-4836-9E70-93C30D8E6242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.2.2.449:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9997D3EA-9CA4-439B-8386-3E6A24A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.2.2.451:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D11DE7-F2FE-4FBE-B8B0-4B1471AF787E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.0.506:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFE35FA-8861-4F1A-82CC-4CEBC6BF45FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.0.507:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A25FEC-DDB7-493A-8FD4-DDD2565FB848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.0.508:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF38CB0-5253-4D32-89E1-8F3E515983AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.0.509:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39296C3-ED79-40DC-8D82-FDBE8D80E545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.1.574:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7075DFAE-75ED-4CBC-99FC-862075394ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.1.575:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDD8498-245E-4E18-984F-06CA179D6301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.1.578:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C33747D-6584-4D51-A906-71F545BE78A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.1.579:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085438B9-B318-46A9-A9C0-43ECDB4F043C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.1.580:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07FDAA9-24A0-4805-B67B-15FD25C10296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.1.581:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FD5462-4996-4349-9ACE-BC2A8AB17E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.1.586:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA60EC11-B955-4ED6-8FBA-C9082EFC8BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.1.587:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7D9496-8AA4-495E-AB2F-8242D34FBFA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.2.605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4955AE-4666-4497-9C04-5ACF2D45DAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.2.606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607B59F7-B643-4C16-9EA9-007AFEE95340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.2.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A17536-2CAC-4F73-8649-D72FFFF4B142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.2.610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF94D78-4D7B-4983-8514-65676D61BC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.2.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840DBDE7-DDEC-4CC0-BA60-A3EE1B76A483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipcheck:server_monitor:5.3.2.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD414917-1AFB-4DC2-B2A4-9635DF774B81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21468",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.paessler.com/forum/viewtopic.php?p=4047&sid=f8c0f03a69d9498338797c6ea3cc6733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.paessler.com/ipcheck/history",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442822/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444227/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19473",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28341",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.paessler.com/forum/viewtopic.php?p=4047&sid=f8c0f03a69d9498338797c6ea3cc6733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.paessler.com/ipcheck/history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442822/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444227/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en news.php en Virtual War (VWar) 1.5.0 y anteriores permiten a un atacante remoto ejecutar comandos SQL de su elección a través de los parámetros (1)sortby  y (2) sortorder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "3B69A0DC-4A4F-4816-9996-3384B9199FD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442880/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442880/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-14T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en extra/online.php en Virtual War (VWar) 1.5.0 R14 y anteriores permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro n."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EB68E8-9E4D-4571-8A2F-B5FDE38F66C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8649B70-E499-48B9-BEC0-40A5CBA965AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259BA0C6-2604-47F9-9F3F-9C1723D92B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E1C96A-E919-4217-9740-7A0E091FB173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EF2E5CD-19A3-4B28-B0DF-A9E78FD9E00D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8E151E-B445-476A-A984-EDB2912D5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A272DC-9B30-417A-9C77-67A7C35063C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F12BA77-5F39-44B3-A18F-69C8019FE276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966D4C0E-E82C-4BD2-AE42-F56A4B137CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4395243-2E0A-4DBA-90AD-4D74491A0E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331164B3-F2B7-4D74-8F72-6D183A4CE5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08559C71-79AA-4051-98AB-8DABA0571A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74736F85-D744-4999-B4BB-09A766EFDF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F1F787-DBB6-4CE7-ACE3-8BCE78671DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.5.0_r14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26A1A453-6181-4594-A71E-50DC6DF6EB20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-April/001519.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442989/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19472",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vwar.de/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-April/001519.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442989/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vwar.de/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-15T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netgear FVG318 running firmware 1.0.40 allows remote attackers to cause a denial of service (router reset) via TCP packets with bad checksums."
      }, {
        "lang" : "es",
        "value" : "Netgear FVG218 ejecutando el software empotrado (firmware) 1.0.40 permite a atacantes remotos provocar una denegación de servicio (reinicio del router) mediante paquetes TCP con sumas de comprobación incorrectas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:fvg318:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EA9F41-3469-4275-9FF6-9545BE2C5920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442870/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19468/info",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442870/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19468/info",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2446",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-15T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service (crash), as demonstrated using the TCP stress tests from the LTP test suite."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera entre las funciones kfree_skb y __skb_unlink en el manejo de búfer de socket del núcleo de Linux 2.6.9, y posiblemente otras versiones, permite a atacantes ermotos provocar una denegación de servicio  (caída), como se ha demostrado usando las pruebas de estrés TCP del conjunto de pruebas LTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19475",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192779",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0575.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-15T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función ReadSGIImage en sgi.c de ImageMagick anterior a 6.2.9 permite a atacantes con la intervención del usuario provocar una denegación de servicio  (caída) y posiblemente ejecutar código de su elección  mediante (1) bytes_per_pixel, (2) columnas, y (3) valores de fila, que provocan un desbordamiento de búfer basado en montón."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6393827E-8F17-4C95-B1E2-D6049B8AA63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F682CD-0117-4770-877F-1F3903BAFE04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5717E4CF-15CD-4369-801F-7E113F0FAFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34B9CBD-54BC-4131-820F-9483E50086BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD7EB24-20F1-493F-BD38-DF39638C319B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E62DFAA-1EFC-40D6-A4B5-9113DF0656B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BD0D69-A809-4DD3-824B-C68E3EF4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC271B0-ACAC-478E-B00B-FFBAAE33B5E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9BACC6-DEF1-4C20-B627-3AA55471B372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA96D5B-FD43-418E-980C-22DEBA4FC03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12378D7-6A7E-4636-9551-C224907A3219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55053EA-780E-46A9-91AE-F983DD54D154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8168249B-863D-44E3-8BC3-B877A64981B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A688471B-3A88-410B-AAD3-20A75E1A767E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F76B8D-D105-4106-B52C-FC201F5930AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB7AE5B-83D9-4DF5-A9A0-B0412D8C0B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "600590DA-A2F4-488F-B85B-9B3B86A8FC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "096FC2CB-49A7-444A-BDA6-802E123A9ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB2E37B-323A-4336-B081-56BD32260E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AB4F80-4136-4007-8C33-E1C8A84C11B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ADE3A3-8FA5-439A-97ED-6EE93ED43699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A48433-240E-4555-966B-4BA767AA3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0900904-462F-47DF-82C8-DD69D3E1EC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA9ACBD-6065-4340-B987-560BE5A54FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74068962-7689-4155-91D7-506CD30BAFB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD4D7D7-C230-4986-9CA8-C4C7F9B9DC88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE3052B-3341-4B5C-A21F-4A10984D2641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A57BE9F-C790-4BEF-9A91-E6C565A1C1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572F13C8-4FCC-4BF2-BECA-D957AC62DD51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21462",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.overflow.pl/adv/imsgiheap.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0633.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443208/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443362/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-337-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.overflow.pl/adv/imsgiheap.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0633.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443208/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443362/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-337-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nImageMagick, ImageMagick, 6.2.9",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to \"two file exposure bugs.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo de estadísticas en Gallery 1.5.1-RC2 y anteriores permite a atacantes remotos obtener información sensible a través de vectores de ataque desconocidos, relacionados con \"dos bugs de exposición de archivos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1_rc2",
            "matchCriteriaId" : "E7891FC7-5630-4AF7-98E8-CF27BA3D6595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B821AEB0-7C0C-407E-9CCB-EEB16E1A2719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F517D6BA-9793-4A4D-BDC6-2F5349F0B354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E876B0F6-8363-43E0-8E00-E55B04A05F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131E313-CB18-45D7-9F4C-096EB0337B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2D7CE2-1461-4D01-A4B1-9E6F7A68FB2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA0436A-8294-44B4-B7D1-62A73BE4DFAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9125286-5A7D-4A1B-B5C4-888581B9798C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54143C9E-0EB0-4137-A01A-3E8C8A7412F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89382A13-8E5D-44DC-8D6B-8FD8DCAFE525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C999044-00FE-4DE1-A235-F036FC9AE09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A59F6E-A44B-4949-8487-CB089BF1CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B3525-BD38-47CF-B60A-F392FABDA357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD453B4B-75B9-476D-B1A6-65AB8E09107E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gallery_project:gallery:1.5_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB7ED6-F6AE-4E0E-BDEF-6F4E9D12F496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16594",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/16594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 1.5-pl1."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to \"access posts outside the topic.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en func_topic_threaded.php (o modo de vista por por hilos)  en Invision Power Board (IPB) anterior a 2.1.7 21013.60810.s permite a atacantes remotos \"acceder a mensajes fuera del hilo\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.7",
            "matchCriteriaId" : "F69B5D71-781A-4FDF-A5AB-0CE8AE6BBDBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?&showtopic=225755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21442",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?&showtopic=225755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter.  NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate before big.php uses pathtotemplate.  CVE has not verified either claim, but during August 2006, the original researcher made several significant errors regarding this bug type"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en big.php de pearlabs mafia moblog 6 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pathtotemplate. NOTA: una tercera parte afirma que el investigador está equivocado, porque template.php define pathtotemplate antes de que big.php la utilice. CVE no ha verificado ninguna de las afirmaciones, pero durante Agosto de 2006, el investigador original ha cometido varios errores significativos con respecto a este tipo de bugs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pearlabs:mafia_moblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "3BF8EC76-3AA7-45CD-9471-27EEFEE4B956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442867/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443153/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442867/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443153/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en  index.php en Yet another Bulletin Board (YaBB) permite a atacantes remotos iynectar secuencias de comandos web o HTML de su elección a través del parámetro categories."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.1:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "81CD19BD-CF9C-4699-B167-686635A539A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.2:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "2FEEB3E5-18A7-47E1-ADFF-4D74D68DC70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.4:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "7B26D66C-05CC-4A25-98CD-B2C055EB0518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.5:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "92385523-C1C9-4F93-A850-B8CE2D9B9AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yabb:yabb:1.5.5b:*:second_edition:*:*:*:*:*",
            "matchCriteriaId" : "6B6EF213-89E6-4755-A039-D0B300C54BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442817/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19460",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442817/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en  Login.php en Spaminator 1.7 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spaminator:spaminator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "F5406492-7D1D-41EA-BD6F-31EEDF2CA349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21469",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19466",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _BASE parameter to scripts in Classes/ including (1) Evenement.php, (2) Event.php, (3) Event_for_month.php, (4) Event_for_week.php, (5) My_Log.php, (6) My_Smarty.php, and possibly (7) Event_for_month_per_day.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Chaussette 080706 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro _BASE de archivos en Classes/ incluyendo (1) Evenement.php, (2) Event.php, (3) Event_for_month.php, (4) Event_for_week.php, (5) My_Log.php, (6) My_Smarty.php, y posiblemente (7) Event_for_month_per_day.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaussette:chaussette:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "080706",
            "matchCriteriaId" : "6422A6A0-9F2A-4E6D-B0C5-EEE52B11A387"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19480",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConf[path_library] parameter to (1) BaseCommand.php, (2) BaseLoader.php, and (3) BaseView.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Tony Bibbs y Vincent Furia MVCnPHP 3.0 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro glConf[path_library] de (1) BaseCommand.php, (2) BaseLoader.php, y (2) BaseView.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvcnphp:mvcnphp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8AD5D4F-A080-41F4-8245-881D28BEF4FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27894",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27895",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27896",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de directorio en la acción avatar_gallery en profile.php de XennoBB 2.1.0 y anteriores permite a atacantes remotos leer archivos de su elección mediante un .. (punto punto)  en el parámetro category."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "686E2ABF-5305-45BB-B68E-6FD94221976E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974207B6-C229-408F-A89F-423EBCDC35B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662BC3F5-BC53-440F-83EC-F5B8DA8228F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB942BB3-218B-4406-AB45-C57855055704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81EEC0F9-7843-4B8A-A533-EAB610AD3FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB020D4D-F70C-4C1E-9148-5DC92582A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5919324-E52F-446A-B957-5C2B672E5FB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21483",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442881/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19446",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.surfionline.com/security_advisories/20060810_xennobb_avatar_gallery_transversal.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442881/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.surfionline.com/security_advisories/20060810_xennobb_avatar_gallery_transversal.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Dragonfly CMS 9.0.6.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del campo search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF48284-E8C5-40B0-BDC4-410A6514DA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECBBA16-5E1A-4918-A36F-AE85BCD2EED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6071BF91-8775-4C9C-9941-54127CF72AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7102DB-4793-4D17-911E-011E1FB11D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95254450-C577-41D8-8878-B2555CFC598E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E81A35A-84B5-4450-A501-9B1D9126587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6575D4F3-6072-4B6C-9E01-522BCBF01B5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442885/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442885/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fname parameter.  NOTE: another researcher was unable to find a way to execute code after including it via a URL.  CVE analysis as of 20060816 was inconclusive"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en cls_fast_template.php de myWebland miniBloggie 1.0 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fname. NOTA: otro investigador fue incapaz de encontrar una forma de ejecutar código tras incluirlo mediante una URL. El análisis de CVE a fecha del 16/08/2006 ha resultado inconcluyente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mywebland:minibloggie:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "10577E6B-6004-449E-9EC6-92B351332CA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/442966/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443160/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19476",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442966/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443160/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ficStyle parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en  inc/header.inc.php en phpPrintAnalyzer 1.2 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro ficStyle."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpprintanalyzer:phpprintanalyzer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "F4A43444-F081-42F7-A9AC-F340670ED054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpprintanalyzer:phpprintanalyzer:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB6B472-82B0-40A7-9B0D-CA68A0ACC890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28322",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en NetCommons 1.0.8 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netcommons:netcommons:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "631D9C56-29BE-49B3-807D-600C6B2211C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2351301450/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21445",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19497",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2351301450/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nNetCommons, NetCommons, 1.0.9"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-16T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php or (2) image.php2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en  TinyWebGallery 1.5 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro  image de (1) image.php o (2) image.php2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "706C4750-36F2-4D9D-822F-A174D90A3BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE1A1DE-DD29-4A96-B483-1CA2B5AA59F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinywebgallery:tinywebgallery:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF8C28C-3AE4-4031-949A-B120097B93EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016682",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442818/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443353/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445089/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442818/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443353/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445089/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "SmartLine DeviceLock anterior a 5.73 Build 305 no hace cumplir adecuadamente las listas de control de acceso (ACL) en modo en sucio (raw mode), lo que permite a usuarios locales evitar los controles NTFS y obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartline:devicelock:5.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D794CD-EC4C-4727-B4D4-1E681584FFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartline:devicelock:5.73_build_288:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD9EE03-86BD-47AB-A5B5-AC195C43CAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartline:devicelock:5.73_build_300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80877EBE-D1A9-441D-A18A-8C32729200F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartline:devicelock:5.73_build_303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD70764-AF9E-46F2-B177-EB09059A8489"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21494",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.protect-me.com/dl/whatsnew.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443193/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19500",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.protect-me.com/dl/whatsnew.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443193/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nSmartLine, DeviceLock, 5.73 Build 305 \r\nSmartLine, DeviceLock, 6.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service (CPU consumption) via unspecified vectors, as originally demonstrated using a Nessus scan."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el NCPENGINE de Novell eDirectory 8.7.3.8 permite a usuarios locales provocar una denegación de servicio (agotamiento de CPU) a través de vectores no especificados, como se ha demostrado originalmente utilizando un escaneo Nessus."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F668C0-8420-4401-AB0F-479575596CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDCC7B6-34CA-4551-9833-306B93E517BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69C160-39F7-48B8-B9A3-CC86690453C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029ADE6D-6761-4196-847C-A0EFB3A06341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8D4976-BAE9-4A83-9DF6-9436C54E8413"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21496",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016695",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19498",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nNovell, eDirectory, 8.7.3 SP9"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file."
      }, {
        "lang" : "es",
        "value" : "El iManager en eMBoxClient.jar en Novell eDirectory 8.7.3.8 escribe contraseñas en texto claro en un archivo de registro, lo que permite a usuarios locales obtener contraseñas leyendo el archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8D4976-BAE9-4A83-9DF6-9436C54E8413"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21496",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016695",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en HP-UX B.11.00, B.11.11. y B.11.23, cuando se ejecutan en modo confiado, permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016697",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-183.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443303/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-183.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443303/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el subsistema LP de HP-UX B.11.00, B.11.04, B.11.11, y B.11.23 permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21499",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Aug/1016698.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-184.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19535",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00746980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Aug/1016698.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-184.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00746980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3121",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service (crash) via the length parameter in a heartbeat message."
      }, {
        "lang" : "es",
        "value" : "La función peel_netstring en cl_netstring.c en el subsistema de pulso (heartbeat) en High_Availability Linux aneriora 1.2.5, y 2.0 anterior a 2.0.7, permite a atacantes remotos provocar una denegación de servicio (caída) a través del parámetro length en un mensaje de latido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41611406-0032-4654-934C-98FE706FB3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717F536C-36C2-45F8-8D6B-D6B5F029688C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02ED57E-4E9A-4520-B7E5-576688431D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C832A05-510B-4719-A12E-3C4CE1CFBA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469BFA83-B0CD-4F33-B1F9-BAA813745F8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED71A88B-AE3F-4C3F-9762-388D6446EC32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A950CBD-4FD5-4C50-A92C-486D7C62CDB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58861498-5077-4AC2-A919-2996679D523A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21505",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21511",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21518",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21521",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21629",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-23.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1151",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.linux-ha.org/SecurityIssues",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:142",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19516",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-335-1",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3288",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28396",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.linux-ha.org/SecurityIssues",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-335-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message.  NOTE: this issue is due to an incomplete fix for CVE-2006-3853."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, y 10.00.TC5, cuando se ejecuta en Windows, permite a atacantes remotos ejecutar código de su elección medianet un nombre de usuario largo, lo que provoca un desbordamiento en vsprintf cuando se está mostrando el mensaje de error resultante. NOTA: este problema se debe a una solución incompleta de CVE-2006-3853."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE22C67-C698-4A4D-83C5-3B208D11A655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D973568E-735A-45AB-BF95-90D7EAE89DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFD3CEB-3221-4051-BE70-DC7D78BBA6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8B40E5-8808-4AA4-83B5-DD7EC6CB33CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443150/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443150/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) \"SET DEBUG FILE\" commands."
      }, {
        "lang" : "es",
        "value" : "IBM UInformix Dynamic Server (IDS) permite a usuarios remotos autenticados crear y sobrescribir archivos de su elección mediante las funciones (1) LOTOFILE y (2) trl_tracefile_set, y los comandos (3) \"SET DEGUB FILE\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE22C67-C698-4A4D-83C5-3B208D11A655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D973568E-735A-45AB-BF95-90D7EAE89DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFD3CEB-3221-4051-BE70-DC7D78BBA6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8B40E5-8808-4AA4-83B5-DD7EC6CB33CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443216/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443216/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) \"SET DEBUG FILE\" SQL command, and the (2) start_onpload and (3) dbexp functions."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server (IDS) anterior a 9.40.xC7 y 20.00 anterior a 10.00.xC3 permite a usuarios remotos autenticados ejecutar comandos de su elección mediante el comando SQL (1) \"SET DEBUG FILE\", y las funciones (2)start_onpload y (3) dbexp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CBE5E70-7519-4270-BB7F-FAB83B5EF7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:7.31_.xd8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1F3A9-93E7-4BD3-808D-B96C47A472A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27905D83-5092-42F0-AED5-A964F256C23C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98EAC87C-567F-4115-8F2F-AC4FD4C89E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A9BF3A-5DB9-4CB4-B7F7-848FFDF73D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC93597-82DD-486C-B277-DCBB45406A8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED4E07-1195-4831-89A1-8E3F836B76E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD37D26-7BAF-49AE-B43C-F94705767C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.xc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D60A0B-F823-4869-9218-670A4C62670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A35A9A-94DB-4193-B371-2A5DC2DEDDCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_database_server:10.0_xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA7F732-A4A9-41BC-A9FB-D7F822973181"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443185/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21242921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443185/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Dolphin 5.1 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro dir[inc] de (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, y muchos otros archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boonex:dolphin:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803F937F-BFD1-4474-897F-795391C07446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21535",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016692",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28473",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28474",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28478",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28479",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28493",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28496",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28498",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28499",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28500",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28501",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28502",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28503",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28505",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28506",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28507",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28508",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28509",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28510",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28511",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28513",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28514",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28515",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28516",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28519",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28520",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28524",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28525",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28526",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28527",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28528",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28529",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28530",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the name parameter for a modload operation."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de directorio en autohtml.php en el módulo AutoHTML para PHP-Nuke permite a usuarios locales incluir archivos de su elección mediante un .. (punto punto) en el parámetro name de una operación modload."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-nuke:autohtml_module:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31E8E8A8-AAA7-4960-BADC-47B479C9ED24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lezr.com/vb/showthread.php?p=104324",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443289/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19525",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lezr.com/vb/showthread.php?p=104324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443289/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en memcp.php en XMB (Extreme Message Board) 1.9.6 y anteriores permite a atacantes remotos incluir y ejecutar archivos locales mediante secuencias de salto de directorio en el parámetro langfilenew, como se ha demostrado inyectando secuencias PHP en el archivo de registro del Servidor Apache HTTP, el cual es incluido posteriormente por header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmb_software:extreme_message_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.6",
            "matchCriteriaId" : "5782DB8B-F790-42DA-BAD3-E2D38A1E14B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/xmb_196_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21293",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443167/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19501",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/xmb_196_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443167/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the \"magic_quotes\" parameter is disabled.",
      "vendorComments" : [ {
        "organization" : "XMB",
        "comment" : "XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/",
        "lastModified" : "2021-04-23T12:30:36.953"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en MODPlug Tracker (OpenMPT) 1.17.02.43 y anteriores y libmodplug 0.8 y anetriores permiten a atacantes con la intervención del usuario ejecutar código de su elección mediante (1) cadenas largas en archivos ITP utilizados por la función CSoundFile::ReadITProject en soundlib/Load_it.cpp y (2) módulos manipulados utilizados por la función CSoundFile::ReadSample en soundlib/Sndfile.cpp, como se ha demostrado con archivos AMF manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modplug:tracker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17.02.43",
            "matchCriteriaId" : "4D995708-BB8B-4666-BF16-0541E4589387"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/mptho-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=bc2cdd57d549ab3ba59782e9b395d0cd683fd3ac",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21418",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200612-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442721/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-521-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2011-0477.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/mptho-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=bc2cdd57d549ab3ba59782e9b395d0cd683fd3ac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200612-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442721/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-521-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=497154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rhn.redhat.com/errata/RHSA-2011-0477.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), and (3) msoe.dll (Outlook), which leads to memory corruption. NOTE: it is not certain whether the issue is in Internet Explorer or the individual DLL files."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6.0 SP1 y posiblemente otras versiones permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección instanciando objetos COM como controles ActiveX, incluyendo (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), y (3) msoe.dll (Outlook), lo que lleva a una corrupción de memoria. NOTA: no está confirmado si este problema está en Internet Explorer o en los archivos DLL individuales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443290/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443295/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443299/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19521",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19529",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19530",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443290/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443295/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443299/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032.  NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad no especificada en Cisco PIX 500 Series Security Appliances permite a atacantes remotos enviar paquetes UDP de su elección a dispositivos de la intranet mediante vectores no especificados relacionados con comandos de establecimiento del Protocolo de Iniciación de Sesión (Session Initiation Protocol o SIP), un problema distinto de CVE-2006-4032. NOTA: el fabricante, tras trabajar con el investigador, ha sido incapaz de reproducir el problema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_501:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151D5A44-2D0D-478A-B011-A0892817B814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_506:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E346F334-9BA3-4BDC-8D0F-D749A7D76E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EE5C14-F556-48A5-BB3F-5465DC823B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_515e:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286199EA-71CF-46B4-9131-F1752C2EA82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E437F4-1B19-4B57-9EAD-3AC04717E389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_525:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2019F-DF6E-4924-B0D2-37094B5265F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_535:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600B7CF-4AEB-4319-8EF4-4FEA40EF6367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F867890-74A4-4892-B99A-27DB4603B873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cryptographic module in ScatterChat 1.0.x allows attackers to identify patterns in large numbers of messages by identifying collisions using a birthday attack on the custom padding mechanism for ECB mode encryption."
      }, {
        "lang" : "es",
        "value" : "El módulo criptográfico en ScatterChat 1.0.x permite a atacantes identificar patrones en gran número de mensajes mediante la identificación de colisiones utilizando un \"ataque de cumpleaños\" (birthday attack) en el mecanismo de relleno específico para el modo ECB de cifrado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scatterchat:scatterchat:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798E948D-3CF2-48DD-B490-13EC82F20D1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scatterchat.com/advisories/2006-01_non_tech.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.scatterchat.com/advisories/2006-01_tech.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443038/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scatterchat.com/advisories/2006-01_non_tech.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.scatterchat.com/advisories/2006-01_tech.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443038/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability will be addressed in the following future product release:\r\nScatterChat, ScatterChat, 2.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1.0 and earlier, and possibly 1.1.2, when register_globals and allow_url_fopen are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en param.peoplebook.php del componente Peoplebook para Mambo (com_peoplebook) 1.0 y anteriores, y posiblemente 1.1.2, cuando register_globals y allow_fopenurl están activados, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:peoplebook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "7A819574-E740-4213-BA2B-70491A38203A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:peoplebook:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2370EE26-7DAB-4893-A6F4-8AFB8179B11D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21470",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443201/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19505",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3277",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443201/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" and \"allow_fopenurl\" are enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templates_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index.php en WEBInsta CMS 0.3.1 y posiblemente anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro templates_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webinsta:cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.1",
            "matchCriteriaId" : "91557A74-565B-4254-B44D-8BA5C09AB695"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv45-K-159-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://my.opera.com/atomo64/blog/show.dml/443167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443154/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445083/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19489",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv45-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://my.opera.com/atomo64/blog/show.dml/443167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443154/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445083/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en libmusicbrainz (o mb_client o MusicBrainz Client Library) 2.1.2 y anteriores, y SVN 8406 y anteriores, permiten a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección mediante (1) una cabecera Location lagra por parte del servidor HTTP, que provoca un desbordamiento en la función MBHttp::Download de lib/http.cpp; y (2) una URL larga en los datos RDF, como se ha desmostrado con una URL en un campo rdf:resource en un documento RDF XML, lo cual provoca desbordamientos en muchas funciones de lib/rdfparse.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbrainz:libmusicbrainz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.2",
            "matchCriteriaId" : "D756F5FB-ACA2-4469-B4CF-FA10FFA4A347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musicbrainz:libmusicbrainz_svn:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8406",
            "matchCriteriaId" : "7994C84B-D543-40F8-8F9C-8F92EE15BF57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/brainzbof-adv.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21404",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016691",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443205/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444843/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19508",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-363-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/brainzbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443205/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444843/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-363-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wb_class_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulerabilidad de inclusión remota de archivo en PHP en includes/session.php de Wheatblog (wB) 1.1 y anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar códicho PHP de su elección mediante una URL en el parámetro wb_class_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wheatblog:wheatblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "C288CC7B-4C3D-4C2D-8BFF-207C3368327B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wheatblog:wheatblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F12014-7C97-484E-BAD4-39EE96EC29F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/25903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secwatch.org/advisories/1015085/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=601184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442987/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/472575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19482",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secwatch.org/advisories/1015085/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=601184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442987/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/472575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page, a different vulnerability than CVE-2004-1512."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Soft3304 04WebServer 1.83 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la URL, que no se limpia adecuadamente antes de ser devuelta en una página de error, una vulnerabilidad distinta de CVE-2004-1512."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.83",
            "matchCriteriaId" : "FD6A4346-711A-47BC-A941-0BA545E03508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC23605E-6603-443F-90F7-A44B60E4BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6068B76-8085-4942-9872-D69E82AF9D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF54719-2DDC-4900-871B-B2052841CF1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21504",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19496",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.soft3304.net/04WebServer/Security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.soft3304.net/04WebServer/Security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nSoft3304, 04WebServer, 1.84\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authentication via unspecified vectors related to request processing."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en 04WebServer 1.83 y anteriores permite a atacantes remotos evitar la autenticación de usuario a través de vectores no especificados relacionados con el procesado de peticiones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.83",
            "matchCriteriaId" : "FD6A4346-711A-47BC-A941-0BA545E03508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC23605E-6603-443F-90F7-A44B60E4BCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6068B76-8085-4942-9872-D69E82AF9D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soft3304:04webserver:1.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF54719-2DDC-4900-871B-B2052841CF1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21504",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19496",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.soft3304.net/04WebServer/Security.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.soft3304.net/04WebServer/Security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nSoft3304, 04WebServer, 1.84"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remote attackers to execute arbitrary code on an agent via unspecified vectors related to authentication and input validation."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el agente de copia de respaldo (backup agent) y el Cell Manager de HP OpenView Storage Data Protector 5.1 y 5.5 anteiror al 10/08/2006 permite a atacantes remotos ejecutar código de su elección en un agente a través de vectores no especificados relacionados con la autenticación y la validación de entrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_storage_data_protector:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "C6BFBB63-DFBA-4ECF-B62F-23069125F627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:openview_storage_data_protector:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC36ADB-81B5-4DA8-A344-756CDF563B0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00742778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-412866/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21485",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016688",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/673228",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19495",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/re-20060811-00547.pdf?lang=en",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00742778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/niscc/NISCC-412866/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/673228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/re-20060811-00547.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "A patch is available for affected versions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en proje_goster.php de Spidey Blog Script 1.5 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spidey_blog:spidey_blog_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "A657A2EC-0BD7-4D8E-A79F-2ADFEBF66FE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21482",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19518",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in help.mmp.php in the MMP Component (com_mmp) 1.2 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en help.mmp.php del componente MMP (com_mmp) 1.2 y anteriores para Mambo permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:mambo_email_publisher:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "897EEC8F-D7B2-454F-B8E0-18B7127C18A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19502",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_pre parameter in lib/specialdays.php and the (2) lib_path parameter in lib/dbman_filter.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en PHProjekt 5.1 y posiblemente anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro (1) path_pre en lib/specialdays.php y el parámetro (2) lib_path en lib/dbman_filter.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprojekt:phprojekt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1",
            "matchCriteriaId" : "A4C49ED7-210D-4401-B9A6-B8CF66BD95EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phprojekt.com/modules.php?op=modload&name=News&file=article&sid=257&mode=thread&order=0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21526",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3284",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phprojekt.com/modules.php?op=modload&name=News&file=article&sid=257&mode=thread&order=0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to /classes/ scripts including (1) Cache.class.php, (2) Customer.class.php, (3) Performance.class.php, (4) Project.class.php, (5) Representative.class.php, (6) User.class.php, or (7) common.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en WebDynamite ProjectButler 0.8.4 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro rootdir en archivos de /classes/ incluyendo (1) Cache.class.php, (2) Customer.class.php, (3) Performance.class.php, (4) Project.class.php, (5) Representative.class.php, (6) User.class.php, o (7) common.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webdynamite:projectbutler:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED1540A-1A27-4A40-97D8-2AC3A42D3748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19503",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly other versions before October 15, 2006, allows remote attackers to inject arbitrary web script or HTML via the calendarID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en calendar.asp en ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode permite a atacantes remotos inyectar secuecias de comandos web o HTML de su elección mediante el parámetro calendar ID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspplayground.net:aspplayground.net:2.4.5:*:advanced_and_unicode:*:*:*:*:*",
            "matchCriteriaId" : "76FD00C4-1BA7-4404-A949-B1261ABA3D6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4206",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443035/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443035/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "ASPPlayground.NET",
        "comment" : "The issue has been fixed in the latest round of patch released on Oct 15, 2006.",
        "lastModified" : "2006-12-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to (1) content/content.php or (2) /inc/indexhead.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Bob Jewel Discloser 0.0.4 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fileloc de (1) content/content.php o (2) /inc/indexhead.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bob_jewell:discloser:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.4",
            "matchCriteriaId" : "3F0E6863-7603-43C0-B82B-611708F55DFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1314/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19532",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1314/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de directorio en wp_db_backup.php en la extensión Skippy WP-DB-Backup para WordPress 1.7 y anteriores permietn a usuarios autenticados remotamente con privilegios de administración leer archivos de su elección mediante un .. (punto punto) en el parámetro backup de edit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skippy.net:wp-db_backup_plugin_for_wordpress:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B26686-03C9-4E87-85F9-0141CE538F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skippy.net:wp-db_backup_plugin_for_wordpress:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810441D7-1FAA-412A-9C89-4A92E4219504"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.wordpress.org/changeset/4095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443181/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19504",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.wordpress.org/changeset/4095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443181/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Apply patch"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en install3.php en WEBInsta Mailing List Manager 1.3e permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cabsolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webinsta:mailing_list_manager:1.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71E3B93-45AE-437D-ACB0-6E26EF361A58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/311/org/WEBInsta_Mailing_list_manager_%28cabsolute_path%29_1.3e_RFI.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442983/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/311/org/WEBInsta_Mailing_list_manager_%28cabsolute_path%29_1.3e_RFI.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442983/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to use the server as an open mail relay via modified mail_text2, user_row[5], nu_mail_1, and shop_mail parameters.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "nu_mail.inc.php en Andreas Kansok phPay 2.02 y 2.02.1, cuando register_globals está activado, permite a atacantes remotos utilizar el servidor como un retransmisor de correo abierto mediante parámetros mail_text2, user_row[5], nu_mail_1, y shop_mail modificados. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_kansok:phpay:2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A506AC2E-C312-4474-ADD3-72349BFA48BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_kansok:phpay:2.02.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F399D9-C9C9-4E48-AC88-9D9E54C9B948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en b0zz y Criss Vincent Owl Intranet Engine 0.90 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b0zz_and_chris_vincent:owl_intranet_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.90",
            "matchCriteriaId" : "BB4797FB-5D0F-4ECC-B8C2-5F23114E104E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2301137722/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21519",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1540643&group_id=9444&atid=309444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2301137722/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1540643&group_id=9444&atid=309444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to Owl Intranet Engine version 0.91"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en b0zz y Criss Vincent Owl Intranet Engine 0.90 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b0zz_and_chris_vincent:owl_intranet_engine:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F215F38D-970A-4DEA-8DFB-D4DC6967527F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2339103264/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21519",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1540643&group_id=9444&atid=309444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2339103264/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1540643&group_id=9444&atid=309444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en config.php en David Kent Norman Thatware 0.4.6 y posiblemente anetriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_kent_norman:thatware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.6",
            "matchCriteriaId" : "8F6BF46C-A9BE-4521-B01B-D747AA00BDAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/3257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2166",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) GPC data to the ipn_get_stored_session function in ipn_main_handler.php, which can be leveraged to modify elements of $_SESSION; and allow remote authenticated users to execute arbitrary SQL commands via (2) a session id within a cookie to whos_online_session_recreate, (3) the quantity field to the add_cart function, (4) an id[] parameter when adding an item to a shopping cart, or (5) a redemption code when checking out (dc_redeem_code parameter to includes/modules/order_total/ot_coupon.php)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en  Zen Cart 1.3.0.2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) datos GPC en la función ipn_get_stored_session en ipn_main_handler.php, lo cual puede ser aprovechado para modificar elementos de $_SESSION; y permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección mediante (2) un identificador de sesión dentro de una cookie para whos_online_session_recreate, (3) el campo quantity para la función add_cart, (4) un parámetro id[] cuando se añade un producto a un carrito de la compra, o (5) un código de amortización cuando se está confirmando la compra (el parámetro dc_redeem_code en el includes/modules/order_total/ot_coupon.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0.2",
            "matchCriteriaId" : "2F2E7957-ABB7-4E1B-B08D-1FE1FA5EDBCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21484",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00109-08152006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?t=43579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00109-08152006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?t=43579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the autoLoadConfig[999][0][loadFile] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index.php en Zen Cart 1.3.0.2 y anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro autoLoadConfig[999][0][loadFile]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0.2",
            "matchCriteriaId" : "2F2E7957-ABB7-4E1B-B08D-1FE1FA5EDBCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21484",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00109-08152006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00109-08152006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T23:04:00.000",
      "lastModified" : "2023-11-07T01:59:14.557",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4159.  Reason: This candidate is a duplicate of CVE-2006-4159.  Notes: All CVE users should reference CVE-2006-4159 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the module_dir parameter, a different vulnerability than CVE-2006-4196.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en modules/usersonline/users.php en WEBInsta CMS 0.3.1 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro module_dir, una vulnerabilidad distinta de CVE-2006-4196. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webinsta:webinsta_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.1",
            "matchCriteriaId" : "3272CC40-4B41-4391-9AED-B397C55D8573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-17T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Zen Cart 1.3.0.2 y anteriores permite a atacantes remotos incluir y posiblemente ejecutar archivos locales de su elección mediante secuencias de salto de directorio en el parámetro typefilter."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C8BCE1-3959-4CF1-B45D-9C9C5437C7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.1_patch1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A3AD01-366B-488E-868B-972749150316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB8EFC7-DC11-49D0-BDFB-5C9460459A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.2d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69984850-EDA0-4F5E-9F79-48AA660D931B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.3d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55577877-7456-4AA3-95B9-A3BA7A31B60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2CC34F0-22C9-421E-8160-D2A751A1B317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.4d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD91623-8C40-45C9-B4AD-6307D5FF2FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.5d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DF4D70-7368-4048-9E8C-A170B4A21811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.2.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADD93A8-E710-4348-A738-A8C64C8235D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EBE72F-4A37-4D38-B512-CC05C739F33D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21484",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00109-08152006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00109-08152006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN."
      }, {
        "lang" : "es",
        "value" : "El objeto COM de Servicios de Terminal (tsuserex.dll) permite a atacantes remotos provocar unad enegación de servicio (caída) y posiblemente ejecutar código de su elección instanciándolo como un objeto ActiveX en Internet Explorer 6.0 SP1 en Microsoft Windows 2003 EE SP1 CN."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443493/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19570",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443493/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method."
      }, {
        "lang" : "es",
        "value" : "Desbordamientod e búfer basado en pila en el control ActiveX IBM Access Support eGatherer anterior a 3.20.0284.0 permite a atacantes remotos ejecutar código de su elección mediante un parámetro nombre de archivo (filename) muy largo para el método RunEgatherer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:egatherer:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4B983A-84FB-4553-A252-321DA41AA6C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:egatherer:2.42.243:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96D1BF3-A79E-4E02-94C5-FD718D8CE683"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21528",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060816.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/380277",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443471/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444899/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19554",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eeye.com/html/research/advisories/AD20060816.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/380277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443471/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444899/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an \"authority problem\" in ThreadIdentitySupport as identified by PK25199, and \"Potential security exposure\" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el servidor de aplicaciones IBM WebSphere Application Server anterior a 6.0.2.13 tienen vectores e impacto no especificados, incluyendo (1) un \"problema de autoridad\" en ThreadIdentitySupport como se ha identificado en PK25199, y \"Potenciales problemas de exposición de seguridad\" como identifican (2) PK22747, (3) PK24334, (4) PK25740, y (5) PK26123."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2.11",
            "matchCriteriaId" : "1ABF32A6-E46F-4F34-A683-F9D90AD010DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21487",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to \"JSP source code exposure\" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server anterior a 6.0.2.13 permiet a atacantes locales o remotos (dependiendo del contexto) obtener información sensible a través de vectores no especificados relacionados con (1) \"exposición de código fuente JSTP\" (PK23475), (2) el archivo de registro de la Captura de Datos del Primer Fallo (First Failure Data Capture)(ffdc)(PK24834), y (3) trazas (PK25568), un problema distinto de CVE-2006-4137."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.2.11",
            "matchCriteriaId" : "1ABF32A6-E46F-4F34-A683-F9D90AD010DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714C405D-1E8F-45C1-8A09-5103F0080C76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7F31FD3-8681-4F07-9644-5CC87D512520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458BAD79-958E-4665-B1F8-0D46E0C57045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1A723F-D685-4FE5-8938-5682A2D02155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9643B593-DADF-4F57-B41E-541C7F554A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521DB050-3C94-49BF-8666-6EC2C358AA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21487",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24478",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21243541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/22991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3281",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0970",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21243541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/22991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in calendar.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the year parameter.  NOTE: The page parameter vector is covered by CVE-2006-4009."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en calendar.php en Virtual War (VWar) 1.5.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro year. NOTA: El vector de parámetros page está cubierto por CVE-2006-4009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "3B69A0DC-4A4F-4816-9996-3384B9199FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDAD337-4009-474B-9105-B18BEE690479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B1A470-C615-498F-9292-19370DE5379F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D51D11E1-8756-4D5F-9F2A-1048411911CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A7E74A-113E-46C9-AB7B-85DBFCCD2522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1C5ED5-2892-4F00-941A-EE64C9B56565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D51F5A-3B53-4938-951E-3B3F1024BD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCA7085-CD42-418D-8DBE-B191582DFBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143EC184-3132-439B-835D-AF4D41FA3598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "256509A6-F4A0-4443-BC04-EE74CF48BA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3805AC03-2AC5-4233-8BF0-EB799164028B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EF75D3-DB96-48EF-A002-4532A860ABA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87E2E48-B53E-4638-86EC-A284DF2F2F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFA22F-659A-4CBE-B3D7-A8D7B2D7AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E672D937-CF21-478E-82AD-A5FB31AF6CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED33CE9-48E3-4EBC-8236-EA9913CE36D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21EF3A6-287C-448E-AAAD-AD0946C2B604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4DBDAC-3B64-47D1-A2E6-D9D80AA1BDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E470DF7A-A93C-4C5E-92C2-7CEE4D529519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C792C4-6B80-48D3-851C-FF85511246ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AEE99F9-C46B-4688-B70E-CEF6EC8A40D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4998F301-A079-4ED8-8A8C-BC11153DBAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C72A2E-A54B-40B0-8E2F-8DD543C56EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E9FFC7-E606-489B-A135-98F6B6BEF5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vwar:virtual_war:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC93C7E2-C78B-4F62-95C7-6029A32EF22C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443171/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443171/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2023-11-07T01:59:14.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-3139.  Reason: This candidate is a duplicate of CVE-2006-3139.  Notes: All CVE users should reference CVE-2006-3139 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions."
      }, {
        "lang" : "es",
        "value" : "MySQL anteriores a 4.1.21, 5.0 anterior a 5.0.25, y 5.1 anteriores a 5.1.12, cuando se ejecutan en sistemas de fichero sensibles al uso de mayúsculas o minúscular, permite a usuarios autenticados remotamente crear o acceder a una base de datos cuando el nombre de la base de datos difiere sólo en el uso de mayúsculas y minúsculas de una base de datos para la cual tienen permisos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFEDB808-A8D8-403E-9103-AB486C793EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6AAD13-3CA1-4543-834B-39FB53D4462D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBEDF5A-5205-4012-B9B8-0FA304E7119A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF35900-4051-4E07-9BFA-347BEAB8AB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC969A5-52CC-44F2-A929-DE559A5D7624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CE88F-2941-4A08-9472-359CF214F81C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575039BD-A8B6-4459-B5F0-F220A94650EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B23CB-7535-4EF7-B926-466A5161A0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E686C3-4100-465C-9F45-068580B496E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB618DB2-6B00-4E99-8232-937D2C51986B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E063D-355D-4A5A-A05F-36BF582DE36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214E3CF9-6362-4F5A-91B7-5E69564F7144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BED939-3366-4CBF-B6BF-29C0C42E97F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BEAD26-ADDC-4FC6-A493-584315183936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153E8DFB-4197-4117-87C6-C0FBE3C05600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "765BF98E-7AB1-45EA-9935-2C311E621211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22408224-0634-4CC6-888F-892E9D932CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2646B4-593E-4AC9-8292-1AD805632DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "4D57E557-7F6D-4618-86AC-B10C08341900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC10CD2-B9A3-46DD-839E-C7FB6647155F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC21395-4C78-4343-9452-578B24C2656D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5032D74E-CC8D-4217-AEF0-98DCD1820AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3340604-0D38-4494-847B-E9E8B0026A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC117BF1-3127-477A-9500-C9A32596ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC54D7B3-DC9B-43AC-BE10-565BDF292A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A7AC36-4E5D-483B-939E-257FDEDE48EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED5BA55-FF4F-4F89-89B1-554624DDA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C2CEF98-8561-42D2-BCE5-3AAE4DC81ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0C43BB-81C6-496F-AC7B-61382DE76B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9FF055-99BC-4E15-80C8-80FEF3CBA990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6132F5E-ADE6-44C2-85BD-17408594789F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6779AC-EF41-46B5-8B26-07FA2537E5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.0.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F038AF5-C96C-43EE-9D46-1DD8CAF567EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E24BD3CF-0047-47F8-8B13-E2A6348E3924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7196E5-8483-4872-A78A-8BE7EC551CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "14DDA057-D211-42BD-B8AF-F250F1C5B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32CA2F70-77E4-4280-B845-4CE5774162C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA788329-9A66-49EA-B7E4-E465C0E7E320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C06765-D153-4D4D-B8CD-DB2E386E082B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141D83A9-89C2-456F-B70D-F274EBE3EAC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6769975-47A4-4D0A-9181-F59776D13D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E942FA-A458-4607-B48D-FCA112AFF1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E241159-FAA4-4DCF-AB68-BE36DF95D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6995B6-B594-454B-BD26-EACFB8241DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC14E107-7C11-4D5B-994B-CCACFD62097E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:4.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8105AE3-7FF6-43C5-9B47-29ACD4DD7C3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "6F610D56-6BB6-48FB-B43A-670CE9168500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1668BB5B-E7FB-4430-B8D5-89E308F5DD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777E919-FD4B-452B-88D7-165410C703F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF54CC8D-B736-461D-B693-686E862EF969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053ACE9B-A146-42C0-ADB2-47F6119965D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B4F891-2A03-45A8-A49C-7F8B8F7D8407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E62AC4-954E-476C-98BE-C138E328AE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B88385C-F5FB-401F-80D5-5BF11CE3C19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F49A1D-BCA3-4772-8AB3-621CCC997B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F719DD8E-8379-43C3-97F9-DE350E457F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342BB65B-1358-441C-B59A-1756BCC6414A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8589B1E7-0D6D-44B4-A36E-8225C5D15828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FEEE64-899F-4F55-B829-641706E29E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8597F56-BB14-480C-91CD-CAB96A9DDD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB2323C-EFE2-407A-9AE9-8717FA9F8625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6341F695-6034-4CC1-9485-ACD3A0E1A079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DF5F19-ECD9-457F-89C6-6F0271CF4766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mysql.com/bug.php?id=17647",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.mysql.com/commits/5927",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21506",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0152.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=17647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.mysql.com/commits/5927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0152.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that MySQL runs on a system with a file system supporting case-sensitive file names.\r\nThis vulnerability is addresses in the following product releases: \r\nMySQL, MySQL, 4.1.21\r\nMySQL, MySQL, 5.0.25\r\nMySQL, MySQL, 5.1.12",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203426\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 or 3",
        "lastModified" : "2006-09-19T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."
      }, {
        "lang" : "es",
        "value" : "MySQL anterior a 5.0.25 y 5.1 anterior a 5.1.12 evalúa los argumentos de rutinas suid en el contexto de seguridad del creador de la rutina en lugar del de aquel que llama a la rutina, lo que permite a usuarios autenticados remotamente escalar privilegios a través de una rutina que ha sido puesta a su disposición utilizando GRANT EXECUTE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77A2761-2B44-4061-9C29-A54F90A1AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754B78F2-A03C-40BE-812B-F5E57B93D20B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665E063D-355D-4A5A-A05F-36BF582DE36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214E3CF9-6362-4F5A-91B7-5E69564F7144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BED939-3366-4CBF-B6BF-29C0C42E97F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "19001041-22C4-4D2C-A918-378DACBB1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88FEEE64-899F-4F55-B829-641706E29E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB2323C-EFE2-407A-9AE9-8717FA9F8625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6341F695-6034-4CC1-9485-ACD3A0E1A079"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mysql.com/bug.php?id=18630",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.mysql.com/commits/7918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21506",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21770",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30351",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0364.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19559",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-338-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3306",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mysql.com/bug.php?id=18630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.mysql.com/commits/7918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-338-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect the versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n\nIssue was addressed in MySQL packages as shipped in Red Hat Enterprise Linux 5 via:\n\nhttps://rhn.redhat.com/errata/RHSA-2008-0364.html",
        "lastModified" : "2008-07-25T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface."
      }, {
        "lang" : "es",
        "value" : "Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 anterior a MP1 16/08/2006 permite a atacantes remotos evitar la autenticación y obtener privilegios mediante vectores de ataque desconocidos en la interfaz de administración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec_veritas:netbackup_puredisk_remote_office_edition:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F51E892B-C1A3-49A2-A7EE-9198A9985669"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21507",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.08.16.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seer.entsupport.symantec.com/docs/284734.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443395/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443520/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19524",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.08.16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seer.entsupport.symantec.com/docs/284734.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443395/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443520/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addresses in the following patch:\r\nSymantec Veritas, NetBackup PureDisk Remote Office Edition, 6.0 MP1 20060816"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm) before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP  en archive.php en el componente mosListMessenger (com_lm) anterior al 19/07/2006 para Mambo y Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:moslistmessenger_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB96F700-2343-4C1C-BA01-95B67616C577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:moslistmessenger_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D1ED78-C380-4B09-A123-9EDDA9C9BACF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.phil-taylor.com/2006/08/09/information-on-moslistmessenger-security-hardening/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php?topic=86460.msg439766#msg439766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21531",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443356/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blog.phil-taylor.com/2006/08/09/information-on-moslistmessenger-security-hardening/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php?topic=86460.msg439766#msg439766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443356/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) lizge or (2) bade parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en index.php de Lizge V.20 Web Portal permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en los parámetros (1) lizge o (2) bade."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lizge:lizge_web_portal:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B38FD346-70EC-4004-9F76-8D6054E310AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443309/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19533",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443309/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application crash) via a crafted CUR image file."
      }, {
        "lang" : "es",
        "value" : "IrfanView 3.98 (con extensiones) permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) mediante un archivo de imagen CUR manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:3.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8391AF-D227-437B-9DF0-E8FF82A625CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443187/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443187/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la herramienta grid-proxy-init en Globus Toolkit 3.2.x, 4.0.2, y 4.1.0 anterior al 15/08/2006 permite a usuarios locales robar información de credenciales reemplazando el archivo de credenciales del proxy entre la creación del archivo y la comprobación de acceso exclusivo al archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globus:globus_toolkit:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72CDC1D-4CF8-4E8A-8A7F-1C41A21DAD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globus:globus_toolkit:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E69418-82DA-49DD-BB34-8CD79C3BF80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globus:globus_toolkit:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF249FE-99B9-45CC-B666-B59F2589DFC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21516",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config."
      }, {
        "lang" : "es",
        "value" : "Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 anterior al 15/08/2006 permite a usuarios locales obtener información sensible (certificados del proxy) y sobrescribir archivos de su elección mediante un ataque de enlace simbólico en archivos temporales en el directorio /tmp, como ha sido demostrado con archivos creados por (1) myproxy-admin-adduser, (2) grid-ca-sign, y (3) grid-security-config."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globus:globus_toolkit:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72CDC1D-4CF8-4E8A-8A7F-1C41A21DAD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globus:globus_toolkit:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E69418-82DA-49DD-BB34-8CD79C3BF80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:globus:globus_toolkit:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF249FE-99B9-45CC-B666-B59F2589DFC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21516",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.globus.org/mail_archive/security-announce/2006/08/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.globus.org/mail_archive/security-announce/2006/08/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-18T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en classes/query.class.php de dotProject 2.0.4 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro baseDir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3862952F-9DE1-471A-A895-A1AFCA3C40F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FFB14E-3C84-4AAE-A04D-221DCDE0F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AA0527-4CB6-48BE-AA09-82952570369D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotproject:dotproject:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "935791D0-FFC0-4774-B00F-F83634BA4FBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19547",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the \"America Online 9.0\" directory, which allows local users to gain privileges by replacing critical files."
      }, {
        "lang" : "es",
        "value" : "AOL 9.0 Security Edition revision 4184.2340, y probablemente otras versiones, utiliza permisos inseguros (Todos/Control Total) para el directorio \"America Online 9.0\", lo que permite a usuarios locales obtener privilegios mediante el reemplazo de archivos críticos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol:9.0_4184.2340:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADE56AB-6A94-4490-B3BE-515CE8154289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18734",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-08",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443622/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443622/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "AOL has released fixes to address this issue. These fixes can be automatically applied by logging in to the service."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la funcionalidad de importación de proyecto en Sony SonicStage Mastering Studio 1.1.00 hasta 2.2.01 permite a atacantes remotos ejecutar código de su elección mediante un archivo SMP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007BA588-541F-4233-A494-D8FE6B438468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE05DDE-67B9-4541-950A-05DA15D05A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BCF040-A950-4AAB-AC97-657A48DAD37E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.2.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E013F834-5952-4AF8-AA04-2D1138E237BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.3.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5016C921-01E0-4C31-ADCC-5CB92D2E3263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE9B73D-C4E7-4CFD-AD91-18459C095C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7982EB9-2CBE-4C2E-8A8D-C4E4C04717C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75348F71-D7D6-4CD5-B28E-AD7B4F18E559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:1.4.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474FB5AE-E699-48DA-A8F7-1FF7353946C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:2.0.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B31B130-88B3-4654-9A51-6C7B0A273C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:2.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FE1FCF-47ED-4E6A-8B59-B00748B17441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:2.1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856D8D4D-D016-4E98-8C34-AE8AF94C3AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sony:sonicstage_mastering_studio:2.2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EE9FE0-F3E2-4F35-B3AB-E681B96C41AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.sony-europe.com/KB/Solutions/EN/V00000_V00499/v00244.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21510",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/697761",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27966",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pentest.co.uk/documents/ptl-2006-01.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19558",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.sony-europe.com/KB/Solutions/EN/V00000_V00499/v00244.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/697761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pentest.co.uk/documents/ptl-2006-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nSony, SonicStage Mastering Studio, 1.2.04\r\nSony, SonicStage Mastering Studio, 1.4.04\r\nSony, SonicStage Mastering Studio, 2.2.04"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) shopid parameter to (a) s01.php, (b) s02.php, (c) s03.php, and (d) s04.php; and possibly a URL located after \"shopid=\" or \"sid=\" in the PATH_INFO."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en POWERGAP permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro (1) shopid de (a) s01.php, (b) s02.php, (c) s03.php, y (d) s04.php; y posiblemente una URL situada después de \"shopid=\" o \"sid=\" en el PATH_INFO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powergap:powergap_business:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343DB27D-DED3-4664-8FA3-1613937E5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powergap:powergap_lite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC6543B-F0C1-4DC1-89B2-B420C2D7C0EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443469/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443469/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _sysSessionPath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en pageheaderdefault.inc.php de Invisionix Roaming System Remote (IRSR) 0.2 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro _sysSessionPath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisionix_systems:invisionix_roaming_system_remote:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2",
            "matchCriteriaId" : "8F74527A-3B7A-44C3-83C1-A4B34C4AE422"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19567",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter in category mode."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en torrents.php de WebTorrent (WTcom) 0.2.4 y anteriores permiet a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat en el modo categoría."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wtcom:web_torrent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.4_alpha",
            "matchCriteriaId" : "E5A411AC-A727-4964-8B67-3934300CD02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wtcom:web_torrent:0.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AAB542-BD8E-465B-AACB-91E977C12CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wtcom:web_torrent:0.2.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4182BAC1-5FA2-47E5-9CA3-8C0AB41F99F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wtcom:web_torrent:0.2.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FDEBAE-4940-4CBC-80A4-9C7DDCD9CD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wtcom:web_torrent:0.2.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9055551-EA8A-4F83-B880-BEB51913EABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wtcom:web_torrent:0.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC54BA18-BB1E-4A22-98D4-37DBDAA07533"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19569",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_inc parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en include/urights.php en Outreach Project Tool (OPT) Max 1.2.6 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro CRM_inc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outreach_project_tool:opt_max:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.6",
            "matchCriteriaId" : "DE0DC787-B0D3-435A-B592-D8A48918281A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19548",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index.php de Fusion News 3.7 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionphp:fusion_news:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B6D4BA-2CB0-4AB2-9FDB-BA4F6963D534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionphp:fusion_news:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940CFBC6-9FCD-4DCF-AD30-C3F65F8CE1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionphp:fusion_news:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DABAE06D-BAE7-4551-AC39-7869817A2D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionphp:fusion_news:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92182B7D-0430-48B5-A7DD-B816A26F3C47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0317.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016701",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19546",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0317.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en processor/reporter.sql.php en el componente Reporter de Mambo (com_reporter) permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:reporter:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455EAC9F-A2FA-4766-88B1-7D94D906C1F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443373/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19553",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443373/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en install.jim.php del componente JIM 1.0.1 para Joomla o Mambo permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:jim_instant_messaging_component:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12BA5DD-AE81-4E98-97F5-FF76B515B13F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21545",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443630/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19575",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443630/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified vectors related to \"processing a path name.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el controlador de Sistema de Ficheros Xsan en Mac OS X 10.4.7 y OS X Server 10.4.7 permite a usuarios locales con acceso de lectura Xsan, ejecutar código de su elección a través de vectores no especificados relacionados con \"el procesado de un nombre de ruta\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xsan:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5897F93-F78D-42CB-9882-00769B3411D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xsan:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539F122F-FBB5-45DE-8CB4-EEE5E35B4548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xsan:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA03C6F-A7AA-4759-AD7B-A6365ACBA801"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304188",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21551",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016711",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/737204",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19579",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/737204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/27994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, Xsan, 1.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command."
      }, {
        "lang" : "es",
        "value" : "El controlador del sistema de ficheros Universal Disk Format (UDF) en el núcleo de Linux 2.6.17 y anteriores permite a usuarios locales provocar una denegación de servicio (cuelgue o caída) mediante determinadas operaciones que incluyen archivos truncados, como ha sido demostrado mediante el comando dd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.17",
            "matchCriteriaId" : "A1F146DA-2787-4409-BE72-092CD275F3E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lkml.org/lkml/2006/6/16/6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21515",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21695",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21711",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22382",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27227",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31229",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31685",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_53_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0665.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444887/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3308",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2006/6/16/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_53_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444887/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3.  NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie.  Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability.  NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de concurrencia en Mozilla Firefox 1.5.0.6 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante múltiples eventos Javascript temporizados que cargan un archivo XML profundamente anidado, seguido por una redirección del navegador hacia ora página, lo cual lleva a un fallo de concurencia que provoca que se liberen estructuras incorrectamente, como ha sido demostrado por (1) ffoxdie y (2) ffoxdie3. NOTA: se ha reportado que Netscape 8.1 y K-Meleaon 1.0.1 también se han visto afectados por ffoxdie. Mozilla confirmó a CVE que ffoxdie y ffoxdie3 disparan la misma vulnerabilidad subyacente. NOTA: se ha reportado posteriormente que Firefox 2.0 RC2 y 1.5.0.7 también están afectados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:k-meleon_project:k-meleon:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1EAAD01-C770-446C-916F-66782953AF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F38886-C25A-4C6B-93E7-36461405BA99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65D2670-F37F-48CB-804A-D35BB1C27D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:navigator:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D673003C-0491-4C94-8907-5E36BB5EB9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lcamtuf.coredump.cx/ffoxdie.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lcamtuf.coredump.cx/ffoxdie3.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-59.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pianetapc.it/view.php?id=770",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5VP0M0AJFW.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443020/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443306/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443500/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443528/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447837/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447840/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448956/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448984/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449245/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449487/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449726/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=348514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lcamtuf.coredump.cx/ffoxdie.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lcamtuf.coredump.cx/ffoxdie3.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-59.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pianetapc.it/view.php?id=770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securiteam.com/securitynews/5VP0M0AJFW.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443020/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443306/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443500/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443528/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447837/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447840/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448956/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448984/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449245/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449487/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449726/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=348514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en setlocale en IBM AIX 5.1.0 hasta 5.3.0 permite a usuarios locales escalar privilegios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21541",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY88183&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY88512&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY88528&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19578",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY88183&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY88512&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=IY88528&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "IBM has released an advisory and interim fixes to address this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en horde/imp/search.php en Horde IMP H3 anterior a 4.1.3 permite a atacanets remotos incluir secuencias de comandos web o HTML de su elección a través de múltiples vectores no especificados relacionados con nombres de carpetas, como se ha inyectado en el campo de formulario vfolder_label en la pantalla de búsqueda IMP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF82BE80-C62C-4E1A-8AB9-5773E49142B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DEABE1-B6C4-4C6F-A098-D5BC9F3C65A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E486E1-3BC7-444A-8BBB-6571CCF44E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8E2B1E-C3C7-466D-982C-36FC51D0BE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E3B91F-F391-4126-832C-C5582F5D6FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2912428D-9A74-48C2-8866-669355CAB535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A17589E-AAD1-432A-A5E3-623A8EF66572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA1F0BF-6F17-4062-86B0-83EEDA5EAC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505DFF07-4F63-4A0E-87E4-DC899F345307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B313A4C-12CE-4CA9-8036-26580152AE7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7730FD04-0CC8-4D96-A3B5-9D628381653E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D589E22C-7F87-43EF-B5FF-DC2B43E5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:horde:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AD38FB-23DF-406D-8889-E9EB18D22C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2A8C5B-6155-4B40-B8C8-B4944064E3DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11E08A4-79D6-46FE-880F-66E9778C298E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A3894F-2E3F-49CA-BEE5-759D603F6EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDBDC41-7E6F-4C97-95BD-7DEB2D9FE837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B52D447-8E56-4E04-9650-38D222DA8D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C455353-0401-4975-89BC-C23D32A684F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D9D9E1-D8B7-4A56-BC2F-90BDC97322B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DE856E-98FF-4B49-BD7F-3E326FEB89EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED34889-9F98-46BC-9176-557484272C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FBC61D-6A08-4DE8-A5E5-A3FC57E7759D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52AEEE6-2364-4CFB-9337-C5CCA54362E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD137160-B80D-4C65-A9A9-CEE12107E3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6C2AC8-C21A-4152-AAE6-915ACE65CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1956C8F0-EB91-4322-85C1-6BE15AA13703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48DEBEB-0C2D-4F6A-AF63-04990D2FD5AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E004FA4-0180-458A-8E8C-8167EF684ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0A1617-17D1-4C9F-A818-27321FD2FEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86CDC19-43C3-4ACC-94B4-388BCC8A2203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9931A5B-CD0C-43A3-B32D-915FF4AF57D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:3.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC69F98-A3B4-4573-AFE4-2069218B3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184592A5-4108-40DB-8882-9D2468490DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28470602-E3F1-4F04-B012-F91AB95E7A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B584932-BFB2-4462-BC69-B9FCC059F59F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702F7A33-CF9E-4966-B622-E4BD27B120AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:imp:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1BB456-5462-4ACE-AECF-730B1C7BE2CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.horde.org/archives/announce/2006/000294.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443361/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000294.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443361/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka \"cross-site referencing.\" NOTE: some sources have referred to this issue as XSS, but it is different than classic XSS."
      }, {
        "lang" : "es",
        "value" : "index.php en Horde Application Framework anerior a 3.1.2 permite a atacantes remotos incluir páginas web de otros sitios, lo que podría ser útil para ataques de phishing, mediante una URL en el parámetro url, también conocido como \"referencia en sitios cruzados\" (cross-site referencing). NOTA: algunas fuetnes se han referido a este problema como XSS, pero es diferente del clásico XSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC8BBFC-263E-4735-847D-5544D18922E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB1F389-5D64-4B8C-B207-7D23F0C12DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8892DF-11F2-4991-97E8-D561DEAC4F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B46B6F5-055E-44EB-BB78-503811C0E57C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B197B0-F3B7-40D6-9872-C1A94622C242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAEAAF02-1B61-421A-887C-107B7234262B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.4_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01557585-CE92-49FB-B9BB-AAAE7D355BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2698E2D7-09BF-4490-B362-4245CD3087D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B40A46-117D-4D85-8CC8-27236A3280C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFBECFF-D1A4-465D-B59F-E70246DE4BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57ABD1BD-6676-4B54-9F3E-FACF1346794F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EC6167-5D16-4236-8EBC-412EE1784802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:application_framework:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4F6A2A-05B6-42EA-8F61-D0AB610A6757"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.horde.org/archives/announce/2006/000292.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21500",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443360/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000292.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443360/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending crafted SQLJRA packet, which results in a null dereference."
      }, {
        "lang" : "es",
        "value" : "IBM DB2 Universal Database (UDB) anterior a 8.1 FixPak 13 permite a atacantes autenticados remotamente provocar una denegación de servicio (caída) (1) enviando el primer comando ACCSEC sin un parámetro RDBNAM durante el proceso de conexión (CONNECT), o (2) enviando paquetes SQLJRA manipulados, lo cual resulta en una referencia a nulo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "CFCC258E-BF48-4D05-805D-25F74A1BD4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "C937B416-678E-49BF-90A9-271A00DAF35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.0:*:os_390:*:*:*:*:*",
            "matchCriteriaId" : "3D57D2F4-6A8D-47E6-ADB6-A1D6FFE464C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "0864138D-6D70-4D85-A623-570CF08FC8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "3E6D6AF7-1083-45B6-8EEF-1C80CC4479FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "0A847132-100A-4109-B890-803D297CB0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "98CA5DB1-AEB0-4F4E-A5CC-FC9F5929A29C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7AAB0F57-3E37-4604-842F-372A963CCDF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.4:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "E1A207FA-1E31-4E62-B0B5-EF86F4627692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.4:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "C9321C42-CAF0-4079-9389-17B2E3AE34D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.4:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "70FDFE4D-769C-4C7A-BCC7-217E05E5AED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.4:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "F0898B3F-D18E-45CF-9D82-CCBC820727EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.4:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F441845B-9E1F-491C-A5D9-816F6649F00B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "DD4D9995-B739-4C5D-92C7-372B9AB2BD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.5:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "7FA427F3-DD47-4359-8514-F02C398A8E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.5:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "A220316D-6D0C-47A7-994E-1D8A2CF5D628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.5:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "1C64CAA9-5BE7-4600-AF7E-9CE480861BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.5:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "E076BD5E-5A25-4EBA-BC8F-FDE8D63FA595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "0861D4F3-46F1-4A9F-B2A9-4A6756E9706C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "CB16643D-7BD5-41F3-AA61-F6640EDE22CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "29EED40E-A3A2-4F25-8627-2FF60C94BC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "E75FED7D-2B5C-4C7D-AF3A-956F2FF8C149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BE40BCCF-93BB-4B32-8E55-0BD9532E3BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6c:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "5E0C7B84-66C4-4FE5-9412-FBD5DBB4323E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6c:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "46320B9E-3FA7-4AF6-80ED-7A89C2678F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6c:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "32041E5A-2DF1-46FA-A520-FFD451AE30BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6c:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "43A1F69A-49B6-43E5-A0E2-2572EBBB49C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.6c:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F05D503A-106D-4192-A1E4-BDB5535ACC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "38F090EF-53EE-4F21-9B8B-C8C42AD4C121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "828C5C06-4711-4C57-9657-3CAAAF76DCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "BF84E6DF-D9E3-4835-BCE1-2B47DB9DC5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "A7C1ED00-7D98-4F8E-B6A8-C9C16B27196E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "7757DA05-C0A8-49EC-99D4-99AE95CBB2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7b:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "3C334DEF-07A5-4377-85C1-D3623A0904FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7b:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "9E1A0923-FCFB-4669-B3C7-7EC65B7CA288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7b:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "34F3CA5A-9FBF-4B35-851D-7A2D6FB0613F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7b:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "9CF93B79-4866-448C-A230-4C2F8AAB467B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.7b:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6EFCAD6F-4741-41B9-AE3E-5F02B8DD90C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "E70C9CA6-890A-4E8D-A625-82538402D336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "07F0C470-B9D9-4327-A918-FEAEC1BF9436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5D454393-D17F-48DB-84DA-05E61D8805F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "61C20E8F-04F8-4609-BC49-C71A2C01739C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "4ADB7290-1954-4873-9B90-772704B2177C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8a:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "2D5AB9D5-D732-4C6C-9BCC-6DBA3809780B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8a:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "33A46387-BA75-4ECE-AFC0-EF69425E0940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8a:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7EAD4BCC-88F8-4ED8-A5ED-4E5EFC66CDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8a:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "4540F5C4-B859-4AFD-88ED-029700785D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.8a:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6A224945-8A17-4DBD-BB14-8E8BD476A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "8944A5FC-6258-4740-9373-491F8C41DD35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "C99162AE-739B-497B-94B2-7EEA79C5812D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "5D1B08DC-F52B-439B-827D-4BE4ECA78A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "4313BEDA-BCC5-47E6-934B-58AE8DD21FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D3DE2356-73EB-47D4-BEEF-E9AB8B1FF0FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9a:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "4C3AA6C4-7700-4637-8B75-ABED7D8993A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9a:*:hp_ux:*:*:*:*:*",
            "matchCriteriaId" : "E9A95C89-E9CC-49A2-8395-F3D89774966D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9a:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "B730265C-358D-4BBF-8B40-48D943114E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9a:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "719F646C-3958-4469-9C17-430E394E8D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.1.9a:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "86D936F6-2DC0-4BC3-943E-A5C9F2319206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.2:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "67C33265-E3BC-406B-9986-E977CDE768FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.10:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "7ED5600A-BD0C-4E48-A8B5-6833883A8981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.10:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "1CD16421-5F61-46EB-B23C-2267DA0B5FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.10:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "F680EF69-C60C-482A-A301-E335EBB34217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.12:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "4CC41143-ADD4-47D0-876A-5C3AB6E94CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.12:*:solaris:*:*:*:*:*",
            "matchCriteriaId" : "00C357A5-DCAF-4F5C-9B83-144D0AB74F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:8.12:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "47D6DC83-FEBC-4C0B-A774-C55775BB2DF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21550",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013114",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/db2/2006-09-05.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445298/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/454307/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg24013114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.appsecinc.com/resources/alerts/db2/2006-09-05.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445298/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/454307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP) allows remote authenticated users to read arbitrary files via (1) C:\\ (Windows drive letter), (2) UNC, and possibly other types of paths in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio absoluto en la funcionalidad get de Anti-Spam SMTP Proxy (ASSP) permite a usuarios autenticados remotamente leer archivos de su elección mediante (1) C:\\ (Windows drive letter), (2) UNC, y posiblemente otros tipos de rutas en el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_hanna:anti-spam_smtp_proxy_server:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE532AC-5CA8-47C3-971E-DFCB360861C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048853.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21523",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048853.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter.  NOTE: this might be resultant from a directory traversal vulnerability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Fotopholder 1.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro path. NOTA: esto puede ser resultado de una vulnerabilidad de escalado de directorios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jake_olefsky:fotopholder:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B67C70C-FE4D-461C-A989-1BF95E970A16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0316.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. (dot dot) in the path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de directorio en index.php en Fotopholder 1.8 permite a atacantes remotos leer directorios de su elección o archivos mediante un .. (punto punto) en el parámetro path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jake_olefsky:fotopholder:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B67C70C-FE4D-461C-A989-1BF95E970A16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0316.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0316.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T20:04:00.000",
      "lastModified" : "2023-11-07T01:59:15.197",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4253.  Reason: This candidate is a duplicate of CVE-2006-4253.  Notes: All CVE users should reference CVE-2006-4253 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a denial of service (crash) related to the \"HID0 attention enable on PPC970 at boot time.\""
      }, {
        "lang" : "es",
        "value" : "El núcleo de Linux 2.x.6 anterior a 2.6.17.9 y 2.4.x anterior a 2.4.33.1 en sistemas PowerPC PPC970 permite a usuarios locales provocar una denegación de servicio (caída) relacionada con \"activación de la atención a HID0 en PPC970 en tiempo de arranque\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.33.1",
            "matchCriteriaId" : "A90A49DC-1C02-435E-ADC7-F5237E65355B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.17.9",
            "matchCriteriaId" : "1FA2176D-50CD-424B-8174-0C26343C432E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.9",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21563",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21695",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22148",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1237",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_57_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19615",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3330",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3331",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-611",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10666",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_57_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "Upgrade to Linux Kernel version 2.4.33.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules in mambo-phpshop (com_phpshop) for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) mod_phpshop.php, (2) mod_phpshop_allinone.php, (3) mod_phpshop_cart.php, (4) mod_phpshop_featureprod.php, (5) mod_phpshop_latestprod.php, (6) mod_product_categories.php, (7) mod_productscroller.php, and (8) mosproductsnap.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en el módulo Desplazamiento de Productos (Product Scroller) y otros módulos de mambo-phpshop (com_phpshop) para Mambo y Joomla! permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path en (1) mod_phpshop.php, (2) mod_phpshop_allinone.php, (3) mod_phpshop_cart.php, (4) mod_phpshop_featureprod.php, (5) mod_phpshop_latestprod.php, (6) mod_product_categories.php, (7) mod_productscroller.php, y (8) mosproductsnap.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:product_scroller_module:product_scroller_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1765A2B-4DB8-43DF-B6F7-5E95AD388DC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/28151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443623/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19591",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443623/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in the lmtg_myhomepage Component (com_lmtg_myhomepage) for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) install.lmtg_homepage.php and (2) mtg_homepage.php.  NOTE: this issue has been disputed by a third party, who states that the $mosConfig_absolute_path variable is only used within a function definition.  CVE source code analysis on 20060824 is not conclusive but tends to concur with the dispute.  In addition, it appears that the component name is actually \"lmtg_myhomepage\""
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Múltiples vulnerabilidades de inclusión remota de archivo en PHP en el componente lmtg_myhomepage (com_lmtg_myhomepage) para Mambo permiten a atacantes remotos ejecutar código PHP de su eleccion mediante una URL en el parámetro mosConfig_absolute_path en (1) install.lmtg_homepage.php y (2)mtg_homepage.php. NOTE: este problema ha sido impugnado por una tercera parte, que afirma que la variable $mosConfig_absolute_path sólo se usa dentro de una definición de función. El análisis de código fuente de CVE a fecha del 24/08/2006 no es concluyente, pero tiende a coincidir con la impugnación. Además, parece que el nombre de componente es en realidad \"lmtg_myhomepage\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mtg_myhomepage_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DEB7A3E-4438-422C-BAB7-770EF9EB4FC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0431.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443624/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0431.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443624/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kaspersky Anti-Hacker 1.8.180, when Stealth Mode is enabled, allows remote attackers to obtain responses to ICMP (1) timestamp and (2) netmask requests, which is inconsistent with the documented behavior of Stealth Mode."
      }, {
        "lang" : "es",
        "value" : "Kaspersky Anti-Hacker 1.8.180, cuando está activado el Modo Oculto (Stealth Mode), permite a atacantes remotos obtener respuestas a peticiones ICMP de (1) marca de tiempo (timestamp) y (2) máscara de red (netmask), lo cual es inconsistente con el comportamiento documentado del Modo Oculto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-hacker:1.8.180:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B19F27-372C-420E-AA4B-1CA37417C9CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443180/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443180/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local users to provide Trojan horse libraries to Norton by using RegSaveKey and RegRestoreKey to modify HKLM\\SOFTWARE\\Symantec\\CCPD\\SuiteOwners, as demonstrated using NISProd.dll.  NOTE: in most cases, this attack would not cross privilege boundaries, because modifying the SuiteOwners key requires administrative privileges.  However, this issue is a vulnerability because the product's functionality is intended to protect against privileged actions such as this."
      }, {
        "lang" : "es",
        "value" : "Symantec Norton Personal Firewall 2006 9.1.0.33, y posiblemente anteriores, no protege adecuadamente las claves de registro de Norton, lo cual permite a usuarios locales proporcionar librerías a modo de troyanos a Norton mediante el uso de RegSaveKey y RegRestoreKey para modificar HKLM\\SOFTWARE\\Symantec\\CCPD\\SuiteOwners, como ha sido demostrado usando NISProd.dll. NOTA: en la mayoría de los casos, este ataque no cruzaría los límites de privilegios, porque la modificación de la clave SuiteOwners requiere privilegios de administración. No obstante, este problema es una vulnerabilidad porque la funcionalidad del producto pretende proteger contra acciones con privilegios como esta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_personal_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2006_9.1.0.33",
            "matchCriteriaId" : "3559D0D7-09DD-454F-A96A-FD6D773AAA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Norton-DLL-faking-via-SuiteOwners-protection-bypass.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443632/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Norton-DLL-faking-via-SuiteOwners-protection-bypass.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443632/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) oid parameter in modules/gateway/Protx/confirmed.php and the (2) x_invoice_num parameter in modules/gateway/Authorize/confirmed.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Cubecart 3.0.11 y anteriores permiten a atacantes remotos ejecuatr comandos SWL de su elección mediante el parámetro (1) oid en modules/gateway/Protx/confirmed.php y el parámetro (2) x_invoice_num en modules/gateway/Authorize/confirmed.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715762F5-862C-489D-A75F-B1E78F2AC332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3BCE9-897E-4951-AD9E-E3830A0776FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F4B32C-3CC1-466F-92C4-7F763A6989FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56691D2C-42CE-4136-8DCA-4A03F2D308CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.7-pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC141847-A950-4CC3-AF62-BDD862FFE49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1AE759-D15D-4FFA-AE42-883BE3FE9066"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.cubecart.com/?do=details&id=523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/cubecart_3011_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/cubecart_3011_sql.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/cubecart_3011_sql_mqg_bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21538",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=21247",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443476/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19563",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.cubecart.com/?do=details&id=523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/cubecart_3011_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/cubecart_3011_sql.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/cubecart_3011_sql_mqg_bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=21247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/27984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443476/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4268",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file, (2) x, and (3) y parameters in (a) admin/filemanager/preview.php; and the (4) email parameter in (b) admin/login.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en CubeCart 3.0.11 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) file, (2) x, e (3) y en (a) admin/filemanager/preview.php; y el parámetro (4) email en (b) admin/login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715762F5-862C-489D-A75F-B1E78F2AC332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF3BCE9-897E-4951-AD9E-E3830A0776FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F4B32C-3CC1-466F-92C4-7F763A6989FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56691D2C-42CE-4136-8DCA-4A03F2D308CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.7-pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC141847-A950-4CC3-AF62-BDD862FFE49D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1AE759-D15D-4FFA-AE42-883BE3FE9066"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.cubecart.com/?do=details&id=523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/cubecart_3011_adv.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21538",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=21247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=27986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443476/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19563",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3314",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.cubecart.com/?do=details&id=523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/cubecart_3011_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?showtopic=21247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=27986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443476/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  NOTE: this issue has been disputed by third party researchers, stating that there is no mosConfig_absolute_path parameter and no admin.x-shop.php file in the reported package"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en admin.x-shop.php en el componente x-shop (com_x-shop) 1.7 y anteriores para Mambo y Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path. NOTA: Esta vulnerabilidad ha sido impugnada por terceros investigadores, determinando que no hay un parámetro mosConfig_absolute_path y tampoco un fichero admin.x-shop.php en el paquete reportado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:x-shop_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "347FA0B6-8BE5-4214-9AD4-18AF63AB0A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:x-shop_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "866C519B-0487-4B96-9622-38D467068CC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0427.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443625/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19588",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0427.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443625/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en mambelfish.class.php del componente mambelfish (com_mambelfish) 1.1 y anteriores para Mambo permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosconfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambelfish_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "7CDBA4C0-1023-4CF7-BF10-E857B6F352AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21544",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443672/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443672/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in install/upgrade_301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter.  NOTE: the vendor has disputed this vulnerability, saying \"The default vBulletin requires authentication prior to the usage of the upgrade system."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en install/upgrade_301.php en Jelsoft vBulletin 3.5.4 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro step. NOTA: el fabricante ha impugnado esta vulnerabilidad, diciendo \"El vBulettin por defecto requiere autenticación antes del uso del sistema de actualización\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DB2651-4DD5-4007-B0B4-9E2CD9D06D00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0061.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0069.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0121.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0217.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pldsoft.com/forum/showthread.php?t=1340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0061.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0069.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0121.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0217.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pldsoft.com/forum/showthread.php?t=1340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service (resource consumption) via a large number of requests to register.php.  NOTE: the vendor has disputed this vulnerability, stating \"If you have the CAPTCHA enabled then the registrations wont even go through. ...  if you are talking about the flood being allowed in the first place then surely this is something that should be handled at the server level."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Jelsoft vBulletin 3.5.4 permite a atacantes remotos provocar una denegación de servicio (agotamiento de recursos) mediante un gran número de peticiones a register.php. NOTA: el fabricante ha impugnado esta vulnerabilidad, afirmando \"Si tienes el CAPTCHA activado entonces los registros ni siquiera podrán continuar. ... si estás hablando de la inundación que se permite en primer lugar entonces seguro que esto se algo que debería ser manejado a nivel de servidor.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DB2651-4DD5-4007-B0B4-9E2CD9D06D00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0381.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443648/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0381.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443648/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrary web script or HTML by uploading an attachment with a .pdf extension that contains JavaScript, which is processed as script by Microsoft Internet Explorer 6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Jelsoft vBulletin 3.5.4 y 3.6.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección enviando un adjunto con extensión .pdf que contiene JavaScript, lo cual es procesado como una secuencia de comandos por Microsoft Internet Explorer 6."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04DB2651-4DD5-4007-B0B4-9E2CD9D06D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089A26E5-BB0B-4900-8B08-DADB7BD7572C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0074.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0082.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442488/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0074.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0082.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442488/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T22:04:00.000",
      "lastModified" : "2023-11-07T01:59:15.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unknown vulnerability in Microsoft PowerPoint allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as TROJ_MDROPPER.BH.  NOTE: on 20060822, it was determined that TROJ_MDROPPER.BH was exploiting CVE-2006-0009, so this is not a new vulnerability"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo (com_catalogshop) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en catalogshop.php en el componente CatalogShop para Mambo (com_catalogshop) permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:catalogshop_component:1.0_beta_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED449FC1-9CB6-45B9-9EB6-20121D20C538"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443758/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443758/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to novalib/class.novaEdit.mysql.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en Tutti Nova 1.6 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro TNLIB_DIR de novalib/class.novaEdit.mysql.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tutti_nova:tutti_nova:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "25E45308-03E5-4A20-AC81-8B44A59D404C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19612",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to (1) include/novalib/class.novaAdmin.mysql.php and (2) novalib/class.novaRead.mysql.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Tutti Nova 1.6 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el paámetro TNLIB_DIR de (1) include/novalib/class.novaAdmin.mysql.php y (2) novalib/class.novaRead.mysql.php. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tutti_nova:tutti_nova:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "25E45308-03E5-4A20-AC81-8B44A59D404C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21572",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19612",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the mainnav parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/layout/plain.footer.php en SportsPHool 1.0 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mainnav."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sportsphool:sportsphool:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF8F497-34A4-48AD-9E66-FC58BA26CD4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21594",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19610",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the icon_topic parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en topic_post.php en XennoBB 2.2.1 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro icon_topic."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5919324-E52F-446A-B957-5C2B672E5FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A71C54-E528-4499-92BE-DB286905293A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB81EAE-714E-46CC-AB1B-C42A45CB9242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76310BBC-124C-44B8-9825-BBAF46E1628D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xennobb:xennobb:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F38F43-1B96-4FA7-B1C0-C1F80E359F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443765/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19606",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.surfionline.com/security_advisories/20060819_xennobb_icon_topic_sql.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443765/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.surfionline.com/security_advisories/20060819_xennobb_icon_topic_sql.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com_anjel) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  NOTE: this issue has been disputed by a third party, who says that $mosConfig_absolute_path is set in a configuration file"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en anjel.index.php en el componente ANJEL (anteriormente MaMML) (com_anjel) para Mambo permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path. NOTA: este problema ha sido impugnado por una tercera parte, que afirma que el valor de $mosConfig_absolute_path se establece en un archivo de configuración."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:anjel_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E7DC61-0DB6-4AC4-97D1-5ADA262E2181"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0441.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443627/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0441.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443627/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-21T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (com_akocomment) for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en akocomments.php en el módulo AkoComment 1.1 (com_akocomment) para Mambo 4.5 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arthur_konze_webdesign:akocomment:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F6AE28-BEE5-44E7-AC1B-1B974A588040"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443748",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en MamboLogin.php del componente MamboWiki (com_mambowiki) 0.9.6 y anteriores para Mambo y Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro IP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:mambowiki:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C794F3F-68BA-4439-8AEB-A51500A60A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:mambowiki:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AF9B44-32E5-433A-BD72-5D185E6D91BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lyquidity.com/mambo/index.php?option=com_mambowiki&Itemid=134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443706/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19594",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lyquidity.com/mambo/index.php?option=com_mambowiki&Itemid=134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the spaw_dir parameter in dialogs/ scripts including (1) a.php, (2) collorpicker.php, (3) img.php, (4) img_library.php, (5) table.php, or (6) td.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en SOLMETRA SPAW  Editor 1.0.6 y 1.0.7 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro spaw_dir en ficheros de dialogs/ que incluyen (1) a.php, (2) collorpicker.php, (3) img.php, (4) img_library.php, (5) table.php, o (6) td.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solmetra:spaw_editor:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB467A72-01BB-4326-BE33-5C36BDF1A80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solmetra:spaw_editor:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA59446C-22EE-483D-BBC2-1E7065617A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443752/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443752/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en comments.asp en LBlog 1.05 y anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lblog:lblog:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729296CC-AD88-4DFD-B156-3EFBB830C0EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21596",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443872/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19607",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443872/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter.  NOTE: it was later reported that 2.1.5 is also affected."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en news.php en Fantastic News 2.1.3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro CONFIG[script_path]"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B557345B-5A7F-43EC-9401-F355E5A2FF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F8C834-8E31-4A54-BD85-64D808A38007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D2DEBA-A626-4BC4-A836-844EE74CD8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E476B80-91F6-419A-9AA5-D1A8125B6A27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fscripts.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21571",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/457680/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19613",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fscripts.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/457680/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  NOTE: this issue has been disputed by third parties who state that contentpublisher.php protects against direct request in the most recent version.  The original researcher is known to be frequently inaccurate"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en contentpublisher.php del componente contentpublisher (com_contentpublisher) para Mambo permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosconfig_absolute_path. NOTA: Esta vulnerabilidad ha sido impugnada por terceros que establecen que el contentpublisher.php está protegido contra peticiones directas en la versión más reciente. El investigador original es conocido por ser frecuentemente impreciso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDF610B9-1105-4C37-B93E-4677311747F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E99D52-609D-4631-AC22-70B07229D887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729C14E1-B56D-49E1-81F6-5FA9B4FDC477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1_1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE201B-A40F-4387-B855-5176A828BA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B95AF0-CDD3-41FB-B343-46A69E909F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1a:a:*:*:*:*:*:*",
            "matchCriteriaId" : "21CD2A4A-6D6D-447A-9305-891B9F084735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1a:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D0AED1C3-740C-4EDE-A674-D753496A406A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.1a:beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7E78E2-1712-4B84-9EDD-58AF95AE6815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EE93EF-D273-4DEC-A85C-76290FEE40A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC21C1E-131A-4366-8741-7BE7594B6F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "993587DE-DA24-4D52-B190-AB236327D687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16ED2979-BB01-44E7-A0A3-D1B7F550F538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4E3399-C743-4664-A55A-77BF543CBD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5.3h:h:*:*:*:*:*:*",
            "matchCriteriaId" : "F009FC3C-4830-4D35-8D4A-4C84DBE8AF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49269426-5FA7-4CF1-AF64-BEC97A09E7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863BE900-E43A-4E0E-BB25-A7403305F4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE971092-FF34-4F5C-A088-82914D46CE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953A9204-E94E-4756-A687-FBE781ACE158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.3_beta:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE8D25B-73E4-464F-8076-FC491B9F2861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.5_1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7E14F4-A0E9-4014-8C3E-E6DCF3393D3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:mambo:4.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "57753E34-F22B-415C-8F0A-B8EFFC624559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28093",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443626/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444244/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443626/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444244/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) phphtmllib parameter to (a) phphtmllib/includes.php; tag_utils/ scripts including (b) divtag_utils.php, (c) form_utils.php, (d) html_utils.php, and (e) localinc.php; and widgets/ scripts including (f) FooterNav.php, (g) HTMLPageClass.php, (h) InfoTable.php, (i) localinc.php, (j) NavTable.php, and (k) TextNav.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en NES Game y NES System c108122 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro (1) phphtmllib de (a) phphtmllib/includes.php; archivos de tag_utils/  que incluyen (b) divtag_utils.php, (c) form_utils.php, (d) html_utils.php, and (e) localinc.php; y archivos de  widgets/ que incluyen (f) FooterNav.php, (g) HTMLPageClass.php, (h) InfoTable.php, (i) localinc.php, (j) NavTable.php, y (k) TextNav.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nes_game:nes_game:c108122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1E85D3-50B3-4468-A67D-083016E779F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nes_system:nes_system:c108122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFEA901D-3859-478E-8BD9-B5F3C2E79711"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21593",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rahim.webd.pl/exploity/Exploits/61.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19611",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rahim.webd.pl/exploity/Exploits/61.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits) 2.0.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin.a6mambocredits.php en el componente a6mambocredits (com_a6mambocredits) 2.0.0 y anteriores para Mambo permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_live_site. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:a6mambocredits_component:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18756695-E587-4576-8073-08381EEA5D74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21540",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016716",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19581",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/27991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Sony VAIO Media Server 2.x, 3.x, 4.x, y 5.x anteriores al 26/06/1006 permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:vaio_media_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5957BCD-6294-4156-B50D-F909E11855A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:vaio_media_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA910E61-0016-4DBD-8C9E-8DD6DEF2072E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:vaio_media_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A146BB4-2B42-4D50-B026-4628DF9981C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:vaio_media_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615E15E6-2828-47E9-8CAC-9D5586E9C486"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.sony-europe.com/kb/solutions/en/V00000_V00499/v00246.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21512",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.css.ap.sony.com/VAIO/Website/General/ImportantNotices.aspx?Section=SN&file=/vaio/importantnotice/security_notice/SecurityNotice_VMIS.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pentest.co.uk/documents/ptl-2006-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19561",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.sony-europe.com/kb/solutions/en/V00000_V00499/v00246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.css.ap.sony.com/VAIO/Website/General/ImportantNotices.aspx?Section=SN&file=/vaio/importantnotice/security_notice/SecurityNotice_VMIS.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pentest.co.uk/documents/ptl-2006-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to gain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en Sony VAIO Media Server 2.x, 3.x, 4.x, y 5.x anteriores al 26/06/2006 permite a atacantes remotos obtener información sensible a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:vaio_media_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5957BCD-6294-4156-B50D-F909E11855A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:vaio_media_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA910E61-0016-4DBD-8C9E-8DD6DEF2072E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:vaio_media_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A146BB4-2B42-4D50-B026-4628DF9981C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:vaio_media_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615E15E6-2828-47E9-8CAC-9D5586E9C486"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kb.sony-europe.com/kb/solutions/en/V00000_V00499/v00246.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21512",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pentest.co.uk/documents/ptl-2006-02.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19560",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kb.sony-europe.com/kb/solutions/en/V00000_V00499/v00246.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.pentest.co.uk/documents/ptl-2006-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en handlers/email/mod.listmail.php en PHlyMail Lite 3.4.4 y anteriores (Build 3.04.04) permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro _PM_[path][handler]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phlymail:phlymail_lite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.4",
            "matchCriteriaId" : "A1DC9A77-9482-43C7-8A4D-603651AF0B0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21582",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016718",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19587",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Niels Provos Honeyd before 1.5b allows remote attackers to cause a denial of service (application crash) via certain Address Resolution Protocol (ARP) packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Niels Provos Honeyd anterior a 1.5b permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) mediante determinados paquetes ARP (Address Resolution Protocol)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623D1180-2288-4F2C-BB1B-86F15DD0B70F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77EBABB9-5DC9-48F6-95EA-FF392B428981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niels_provos:honeyd:1.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91147D02-3E72-4D15-B6AA-08F2ABBFE7D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.honeyd.org/release.php?version=1.5b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.honeyd.org/release.php?version=1.5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-22T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en cPanel 10 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) dir de dohtaccess.html, o el parámetro (2) file en (a) editit.html o (b) showfile.html."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F23C1C-4F4E-4BFA-8FF2-51BF76EAE0C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443637/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443637/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3869",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en URLMON.DLL en Microsoft Internet Explorer 6 SP1 en Windows 2000 y XP SP1, con versiones del parche MS06-042 anteriores al 24/08/2006, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección mediante una URL larga en un sitio web que utilice compresión HTTP 1.1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21557",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1441",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016731",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.microsoft.com/kb/923762/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/821156",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/923762.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0608.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/28132",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444046/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444241/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444319/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19667",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3356",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28522",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28893",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.microsoft.com/kb/923762/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/821156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/923762.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.nsfocus.com/english/homepage/research/0608.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444046/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos web en sitios cruzados (XSS) en ascan_6.asp en Panda ActiveScan 5.53.00 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro email."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_activescan:5.53.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E446FF61-F6DA-4AC7-8623-8731A6EFE323"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2006/08/panda-activescan-xss-vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19471",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lostmon.blogspot.com/2006/08/panda-activescan-xss-vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en classes/Tar.php en el componente bigAPE-Backup(com_babackup) para Mambo 1.1 permite a atacantes remotos incluir archivos de su elección a través del parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:bigape-backup_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C67DA0D-FB23-4609-AC35-A3BF26820EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21574",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in shopping_cart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad e inyección SQL en shopping_carg.php de osCommerce anetrior a 2.2 Milestone 2 060817 permite a atacantes remotos ejecutar comandos SQL de su elección a través de parámetros array de id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms2_2006-08-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC95B48-A7DF-49DF-B24C-3C8370D9FB53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.oscommerce.com/index.php?showtopic=223556&pid=918371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016719",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00110-08172006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444780/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.oscommerce.com/index.php?showtopic=223556&pid=918371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00110-08172006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444780/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. (dot dot) in unspecified parameters in the (1) tep_cache_also_purchased, (2) tep_cache_manufacturers_box, and (3) tep_cache_categories_box functions."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de escalado de directorio en cache.php de osCommerce anterior a 2.2 Milestone 2 060817 permiten a atacantes remotos determinar la existencia de archivos de su elección y descubrir la ruta de instalación mediante un .. (punto punto) en parámetros no especificados en las funciones (1) tep_cache_also_purchased, (2) tep_cache_manufacturers_box, y (3) tep_cache_categories_box."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms2_2006-08-17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC95B48-A7DF-49DF-B24C-3C8370D9FB53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.oscommerce.com/index.php?showtopic=223556&pid=918371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00110-08172006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.oscommerce.com/index.php?showtopic=223556&pid=918371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00110-08172006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en tiki-searchindex.php en TikiWiki 1.9.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro highlight. NOTA: los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175D43FD-450F-443E-831B-B8091BE7054F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21536",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en comments.asp en SimpleBlog 2.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:8pixel.net:simple_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "A89A3FD1-0C4B-4F1B-BC02-4D263A8E386E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/18488/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443923/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19609/info",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/18488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443923/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19609/info",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6.0 SP1 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un atributo Color largo en múltiples objetos DirectX Media Image DirectX Transforms ActiveX COM de (a) dxtmsft.dll y (b) dxtmsft3.dll, incluyendo (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1 y (3) DX3DTransform.Microsoft.Shapes.1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443907/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19640",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://xsec.org/index.php?module=releases&act=view&type=1&id=17",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443907/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://xsec.org/index.php?module=releases&act=view&type=1&id=17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Java Plug-in J2SE 1.3.0_02 hasta 5.0 Update 5, y Java Web Start 1.0 hasta 1.2 y J2SE 1.4.2 hasta 5.0 Update 5, permite a atacantes remotos explotar vulnerabilidades especificando una versión JRE que contiene vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.3.0_02:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "FD1870BA-062F-41D1-8038-F722BE368516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:1.4.2:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "E2D500E0-A80D-4C9E-94F0-6B59AFEB186A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:5.0:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "AB323619-76BA-4DCF-9613-4C963C235D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:5.0_update1:*:sdk:*:*:*:*:*",
            "matchCriteriaId" : "90A293D3-9A69-4B33-82CE-22A7515819E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:j2se:5.0_update5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "872BDAB5-DB9C-4C18-89CE-296B69661677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_start:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1E8E17-C426-424C-82D7-0D54D2B83687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_start:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C248C52-F922-458D-9566-0AEA9FEC037A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_start:1.0.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B745C9-7B4B-4ECD-AE4C-11C332DB08FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_start:1.0.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1EEB86-E5BB-4034-B9FD-C869F6D069EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_web_start:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53966B2-0CC5-4590-A7C7-82252F837A26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21570",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/382413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/11757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/8879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3354",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/382413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/11757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/8879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service (\"tight loop\" and CPU consumption for listener applications) via unknown vectors related to TCP fusion (do_tcp_fusion)."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en rutinas de API (1) libnsl y (2) TLW/XTI en Sun Solaris 10 permite a atacantes remotos provocar una denegación de servicio (bucle cerrado y agotamiento de CPU para aplicaciones a la escucha) a través de vectores desconocidos relacionados con la fusión TCP (do_tcp_fusion)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102576-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102576-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en cscope 15.5 y anetriores permiten a atacantes con la intervención del usuario provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de múltiples vectores que incluyen (1) un nombre de ruta largo que no se maneja adecuadamente durante el análisis de la lista de archivos, (2) nombres largos de ruta que resultan de la expansión de rutas variables como la expansión de la \"tilde\" para la variable de entorno HOME, y (3) un argumento de línea de comandos -f (o reffile) largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cscope:cscope:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.5",
            "matchCriteriaId" : "7D9324B0-3391-4D44-AA10-FAF870445F0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22239",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22515",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1101.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=30266760&forum_id=33500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2009-1101.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 was not vulnerable to this issue as it contained a backported patch since its first release.\n\nIn Red Hat Enterprise Linux 3 and 4, this issue was addressed via: https://rhn.redhat.com/errata/RHSA-2009-1101.html",
        "lastModified" : "2009-06-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2932",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-23T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regression error in the restore_all code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service (panic) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Error de registro en el código de la ruta restore_all del soporte de la partición 4/4 GB para los núcleos de Linux non_hugemem en el escritorio de Red Hay Linux y Enterprise Linux 4 permite a un usuario local provocar denegación de servicio(panic) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4D5E23-1680-4557-AC0C-B4F528588648"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28120",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19664",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11410",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "evaluatorSolution" : "Red Hat has issued an update for the kernel."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3745",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-23T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en la función sctp_make_abort_user en la implementación de SCTP en Linux 2.6.x anteriores a 2.6.17.10 y 2.4.23 hasta 2.4.33 permite a usuarios locales provocar una denegación de servicio (panic) y posiblemente obtener privilegios de root a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.17.9",
            "matchCriteriaId" : "B7689D9D-DB54-4C0A-BFED-7A85A1D71ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BB496-749A-40C8-BAA9-6CFBBE308065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C30F255-1297-46EA-9FBC-05564792FF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0600.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21576",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21695",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22148",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_57_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444066/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444887/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19666",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3358",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28530",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-611",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10706",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_22_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_57_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0617.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444066/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444887/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-346-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control (RBAC) settings in the \"File System Management\" profile."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Solaris 8 y 9 versiones anteriores a 20060821 permite a atacantes remotos ejecutar sentencias de su elección mediante vectores sin especificar, involucrando la configuración del Control de Acceso por defecto basado en rol (RBAC) en el perfil \"File System Management\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102514-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102514-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than CVE-2006-4306 and CVE-2006-4319."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el comando de formato en Sun Solaris 8 y 9 anterior a 21/08/2006 permite a un usuario local modificar archivos de su elección a través de vectores no especificados que afectan al perfil que permite ejecutar el formato con privilegios elevados, un asunto diferente al de CVE-2006-4306."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21581",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22295",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102514-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3355",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102514-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Blackboard Learning System 6 y Blackboard Learning and Community Portal Suite 6.2.3.23, y Blackboard Vista 4 permiten a atacantes remotos inyectar Javascript, VBScript, o HTML de su elección mediante (1) datos, (2) secuencias de comandos de vb, y (3) URIs javascript mal formados en diversas etiquetas HTML cuando se envía un mensaje al Foro de Discusión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34DEADE2-62A0-4FDC-8172-7726D8555DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_learning_and_community_portal_suite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA1C885-E1F2-4AD8-BFC9-4504DA0B9DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:blackboard_learning_and_community_portal_suite:6.2.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08F08EF-A832-4DD3-A6C1-2D38309A0FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackboard:vista:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4851F315-7345-4892-B7D9-690D4F11650D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21577",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444062/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444116/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444885/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3366",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444062/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444116/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444885/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions."
      }, {
        "lang" : "es",
        "value" : "Servidor VNC de AK-Systems Windows Terminal 1.2.5 ExVLP no tiene protección de clave, y permite a atacantes remotos validarse y ver sesiones RDP ó Citrix."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ak-systems:windows_terminal:1.2.5_exvlp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267D26B2-FDB6-482A-9CF7-C3331FA84E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444060/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444060/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 1.5.0.6 permite a un atacante remoto provocar denegación de servicio (caida) a través de una respueta FTP manipulada, cuando al intentamos conectar con un nombre de usuario y una contraseña a través del URI del ftp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/23197",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23202",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23235",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this flaw a security issue.  This flaw is the result of a NULL pointer dereference, which is not exploitable and can only cause a client crash.",
        "lastModified" : "2006-09-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en Sonium Enterprise Adressbook 0.2 permite a un atacante remoto provocar ejecutar código PHP de su elección a través del parámeto folder en múltiples archivos en los directorios pulignsm como se demostró por plugins/1_Adressbuch/delete.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonium:enterprise_adressbook:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DC1E2C-DED9-440E-81A2-083D1CF66F25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/342/org/Sonium_Enterprise_Adressbook_Version_0.2_%28folder%29_RFI.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443701/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28464",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/342/org/Sonium_Enterprise_Adressbook_Version_0.2_%28folder%29_RFI.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443701/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a \"non-random value\" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access."
      }, {
        "lang" : "es",
        "value" : "Cisco PIX 500 Series Security Appliances y ASA 5500 Series Adaptive Security Appliances, cuando ejecutan 7.0(x) hasta 7.0(5) y 7.1(x) hasta 7.1(2.4), y el Firewall Services Module (FWSM) 3.1(x) hasta 3.1(1.6), provoca que la contraseña EXEC, las contraseñas de usuario local, y la contraseña de activación se cambien a un \"valor no aleatorio\" bajo determinadas circunstancias, lo que provoca un bloqueo a los administradores y podría permitir a los atacantes obtener acceso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_501:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151D5A44-2D0D-478A-B011-A0892817B814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_506:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E346F334-9BA3-4BDC-8D0F-D749A7D76E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EE5C14-F556-48A5-BB3F-5465DC823B85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_515e:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286199EA-71CF-46B4-9131-F1752C2EA82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E437F4-1B19-4B57-9EAD-3AC04717E389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_525:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B2019F-DF6E-4924-B0D2-37094B5265F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:pix_firewall_535:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9600B7CF-4AEB-4319-8EF4-4FEA40EF6367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F867890-74A4-4892-B99A-27DB4603B873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D80DB80-F243-469B-993F-E368B092B3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en los concentradores de la serie Cisco VPN 3000 anteriores a 4.1, 4.1.x hasta 4.1(7)L, y 4.7.x hasta 4.7(2)F permiten a atacantes ejecutar los comandos (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, y (6) RMD FTP para modificar archivos o crear y borrar directorios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D953DA9F-B54E-4941-85BE-48933C98DB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E298AD-26AC-4E1D-83D8-5C2016CC6559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71DAF71-5763-44D8-AD1E-5ADE8BC15120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA54782-93A8-47BE-863D-89CA3678BF6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67F66A10-246D-447B-941F-F1175684F0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82435757-D892-4298-9176-5EC1FEC93037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5BAFC4A-D8FB-4450-BC29-83B306000C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03F5D3F-6FB1-4A25-B544-D3C973F35DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A90348C-94E2-4F04-A887-E7EFFC1ACF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5E136E-9215-46A8-A40A-AE964C588A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.2.f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13F7BC2-7491-4266-9B32-3E6D8978A6C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The manager server in Symantec Enterprise Security Manager (ESM) 6 and 6.5.x allows remote attackers to cause a denial of service (hang) via a malformed ESM agent request."
      }, {
        "lang" : "es",
        "value" : "El servidor de administración en Symantec Enterprise Security Manager (ESM) 6 y 6.5.x permite a atacantes remotos provocar una denegación de servicio (la aplicación no responde) mediante una petición de agente ESM mal formada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_security_manager:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6C41CBD-FF1D-4DA0-A044-423B2F4A7450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_security_manager:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1CD675-463B-42DA-B0D9-0C09C33A7BEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_security_manager:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5C43D9-37D5-4981-87EF-BE7FAB2D1531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:enterprise_security_manager:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC1C6DE-0C86-4A16-A432-3AB93AC1A754"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016728",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444068/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.08.21a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444068/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.08.21a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and earlier, when running on Windows, might allow local users to gain privileges via a malicious program file under \"Program Files\" or its subdirectories."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta no confiable en la búsqueda no literal de Windows en múltiples productos SSH de Tectia, incluyendo el Client/Server/Connector 5.0.0 y 5.0.1 y Client/Server anterior a 4.4.5, y Manager 2.12 y anteriores, cuando se ejecutan en Windows, podrían permitir a usuarios locales escalar privilegios mediante un archivo de programa malicioso en \"Archivos de Programa\" o sus subdirectorios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6693DC2D-CDA1-4E37-9569-58874F55A48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16CDE975-9E08-493B-9385-3EC2CABC4A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A63EA6B-2400-48C4-924D-3509971CCBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0658F08E-2596-4D8E-91AA-44A9DBE8F151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74169893-A34F-49FB-8C83-36C4AA808925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013E94CC-AF68-44D0-826F-28B1825A8DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9981E30-0D54-4464-8287-E450E7E8F770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED17577-F56D-48DF-8863-B4FF039C47D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74A91E2-C93E-49F4-B349-8E4CEC285C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.1j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7244A-BFF7-4C7C-82FF-6B53236DB86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BADA4CC-FC94-427A-AF93-9AAFDAADDB91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1D6B7F-8B52-42C0-8613-740CACFB3463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5024EC6-2A47-4ACE-A661-B78D314C7D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA64A6E8-0EB7-4BCA-A7AA-245A466C2F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5058DC44-835D-4BD9-B550-E5CB22F6475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23ED4911-6CF5-4562-B421-A328D7BE0291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.3.8k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F3388A-39FA-4A3A-819A-764A16AAEB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DDF3D8-35EA-4677-B1AC-1CA674EEBCD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F37366E9-F1B6-4458-AE1C-790405AC8740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C727829-5E3A-41F6-BAB3-01AED39674D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF57477-FB53-49CC-BAD4-CDC0FD9363F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FB72FC-37EE-4D42-893E-9C0924EEA2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18D681B-ACE1-47E3-851D-57DA47D1E2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F470797-BBE4-4360-A38A-2722B8CF3BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6587AA-E91D-4194-81D0-FCF1AA382CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_connector:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D921A61E-D401-404E-B539-DAFE05D001F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_connector:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A3B9E9-3643-443B-A19A-2AE989832C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207A0CC3-240E-467E-A82D-DB9751378C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D62693-EA3F-406E-AC66-79B1CD566F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF059D3-7250-44F9-9337-AD66A0F28071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4480D2-1B5C-443D-8D7F-976885C33BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795DEA94-79D6-4132-B205-AB098E92216A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD05A3E8-105D-4712-8BBE-2D5CF4F78890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6691FF-77F2-4AE3-B49F-BFB8744AD046"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075B6E8D-4C4B-4E98-94C6-52B842BE65FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B99F6E-712C-4205-9185-26F543EFC881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF0262B-1451-40CA-9DD1-F2DEA793BD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27E0224-9431-49EF-8B32-850CDF6FFFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A88A21-7427-4452-8C2A-6C31542FA83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DCEAA0-509A-4978-BE53-0CBE084366FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3203DC73-05F2-4A28-9E62-3D87B482586A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BDA1AAC-3FCF-47D8-A6B4-9DB0D776CE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F4CDF1-695A-4677-A829-74BB365BF4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEF55DD-FC87-42A3-9DAF-9862AA9649CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0FA974-7671-4FB7-BB36-274B5970EBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C2BA84-A520-489E-AF08-F3D35B0D580B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "011F841A-4F1B-49B2-B379-9FE126141568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:4.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C54819-CF51-4BBE-873F-4A0E2072D10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802C46F0-0FE2-42BD-910A-08CC9639BC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2E96C8-F8F8-4002-B242-3ADDF1E84B7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ssh.com/company/news/2006/english/security/article/775/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ssh.com/company/news/2006/english/security/article/775/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-23T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when the \"Restart\" action is selected from the Management server GUI, which causes the agent to locate the pathname of the user's program and restart it with root privileges."
      }, {
        "lang" : "es",
        "value" : "El agente de administración de SSH Tectia (SSH Tectia Management Agent 2.1.2) permite a usuarios locales obtener privilegios de root ejecutando un programa con nombre sshd, lo que se consigue mediante un listado de procesos cuando la acción \"Reiniciar\" (Restart) se selecciona desde la interfaz gráfica de usuario (GUI) del servidor de administración, lo cual provoca que el agente localice el nombre de ruta del programa del usuario y lo reinicie con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53793268-B61F-4730-8786-F22860B1270B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207A0CC3-240E-467E-A82D-DB9751378C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D62693-EA3F-406E-AC66-79B1CD566F1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CE63BE-9056-408C-90D2-6E2CA2E258F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF059D3-7250-44F9-9337-AD66A0F28071"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21559",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ssh.com/company/news/2006/english/security/article/776/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ssh.com/company/news/2006/english/security/article/776/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp.  NOTE: this issue was originally incorrectly reported for the ppp driver."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el controlador sppp en FreeBSD 4.11 hasta 6.1, NetBSD 2.0 hasta 4.0 beta anterior al 23/08/2006, y OpenBSD 3.8 y 3.9 anterior al 02/09/2006 permite a atacanets remotos provocar una denegación de servicio (panic), obtener información sensible, y posiblemente ejecutar código de su elección mediante paquetes LCP (Link Control Protocol) modificados con una longitud de opciones que excede la longitud total, lo que provoca un desbordamiento en (1) pppoe y (2) ippp. NOTA: este problema fue inicial e incorrectamente reportado para el controlador ppp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582B9BF3-5BF1-44A3-A580-62F2D44FDD34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7752D43D-64AF-474F-BFBB-2625A29C1B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4416CBA-76B9-4051-B015-F1BE89517309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9875E709-11BA-4B8F-A2FC-26844DD4D563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-019.txt.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21587",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21731",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.FreeBSD.org/advisories/FreeBSD-SA-06:18.ppp.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.FreeBSD.org/patches/SA-06:18/ppp4x.patch",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/errata.html#sppp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sppp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-019.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.FreeBSD.org/advisories/FreeBSD-SA-06:18.ppp.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.FreeBSD.org/patches/SA-06:18/ppp4x.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata.html#sppp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sppp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in attachment.php in WoltLab Burning Board (WBB) 2.3.5 allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en attachment.php en WolgLab Burning Board (WBB) 2.3.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una imagen GIF que contiene Javascript codificado en formato URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94ED665B-3297-4B2E-95DE-DCBAF63D17F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443876/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19639",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443876/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en WFTPD Server 3.23 permite a atacantes remotos ejecutar código de su elección mediante comandos SIZE muy largos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:texas_imperial_software:wftpd:3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4BF11D-951C-46EF-B54E-2F2E3C23E783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0608-exploits/wftpd_exp.c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016723",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19617",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0608-exploits/wftpd_exp.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Texas Imperial Software",
        "comment" : "Texas Imperial Software has tested this issue against current versions of WFTPD and WFTPD Pro, and finds that versions after 3.23 are not vulnerable. Users of WFTPD or WFTPD Pro should update to the most current version in order to address this issue. The update is free to fully registered users unregistered users can download a fresh copy of the shareware version of the application.\n\n",
        "lastModified" : "2011-01-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the \"File System Management\" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el comando format en Solaris 8, 9, y 10 permite a usuarios locales con acceso a format (tales y como el perfil RBAC \"File System Management\") ejecutar código de su elección a través de vectores desconocidos, una vulnerabilidad distinta de CVE-2006-4307."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "32CF7469-6D2F-4E34-8013-7F0D3433D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "11847B60-D66B-4386-940A-C53B11853E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F305CBD-4329-44DE-A85C-DE9FF371425E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:64_bit:*:*:*:*:*",
            "matchCriteriaId" : "63874B2D-AD5D-4BB4-A83B-7B717E570191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:hw2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEB91FE-FB39-4AB2-8172-2A47EC59861B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21581",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102519-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102519-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en sef.php del componente OpenSEF 2.0.0 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensef_project:opensef:2.0-beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F07C245B-0A41-4ECD-BFEA-DD93BFE160B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensef_project:opensef:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944553E5-EAFB-483D-A5A2-9B5C210E7889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensef_project:opensef:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55893CE1-954B-42D9-B585-4B0FDA3D89CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensef_project:opensef:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA04CD9-D66C-4BD9-9551-8AAE6879514D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensef_project:opensef:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204AA46F-AA81-4047-8221-FF24B075D38A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensef_project:opensef:2.0_rc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8229B1-FDDF-448E-8D9C-CE0D88C5BC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensef_project:opensef:2.0_rc5_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15695DA9-FA04-437E-B169-19853814B3C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensef_project:opensef:2.0_rc5_sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4A1A62-AC1E-425B-AAC4-C5A96E7DAF88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en cpg.php del componente Coppermine Photo Gallery (com_cpg) 1.0 y anteriores para Mambo permite a atacantes remotos ejecutar código PHp de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04BAAEE-4047-47BE-AB93-3B3C923EF78F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component (com_estateagent) for Mambo, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en estateagent.php del componente EstateAgent (com_estateagent) para Mambo, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bits-dont-bite:estateagent:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4EA585D-3F5D-4447-BA0A-EEC9CDC03CAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000984.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443911/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19625",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000984.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443911/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cate_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en list.php en CityForFree indexcity 1.0, cuando magic_quites_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cate_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cityforfree:indexcity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A4C924-4E5E-47E9-AFBD-449186D210FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/135/description.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445907/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/135/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445907/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in add_url2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en add_url2.php de CityForFree indexcity 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro url."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cityforfree:indexcity:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A4C924-4E5E-47E9-AFBD-449186D210FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/135/description.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445907/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/135/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445907/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en gbook.php en Doika guestbook 2.5, y posiblemente anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doika:doika_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "0A338F5E-ACF2-4DDA-BD60-70DA5C9B0CB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/134/description.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21549",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445903/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/134/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445903/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ichitaro for Linux; and FormLiner before 20060818 allows remote attackers to execute arbitrary code via long Unicode strings in a crafted document, as being actively exploited by malware such as Trojan.Tarodrop.  NOTE: some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Justsystem Ichitaro 9.x hasta 13.x, Ichitaro 2004, 2005, 2006, y Government 2006; Ichitaro para Linux; y FormLiner anterior al 18/08/2006 permite a ataacntes remotos ejecutar código de su elección mediante cadenas Unicode largas en un documento manipulado, tal y como está siendo explotado activamente por software malicioso como Trojan.Tarodrop. NOTA: algunos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:formliner:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1271BA13-118F-45C5-ADCD-845AF16727D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042BB9E2-6536-4BA0-804C-530EF548E387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D0935F-D5F8-4D95-A483-036660B498F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39F16-968A-48E9-907F-36133B6775D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC262B5-28BE-4EC6-89CC-B013A15CB10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72EFC88E-B6D1-4B8A-ADDD-5B2EF6523FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF08B2B3-8387-4A91-8866-4C9555901D0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4125282-F81C-45E4-B5A3-D5685A859455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038FB1DB-00F3-4761-A6F4-551360CF7983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro_government:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957BEBB5-8DAD-427A-936D-6AB1362B33AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21552",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.justsystem.co.jp/info/pd6002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/enterprise/security_response/weblog/2006/08/justsystems_ichitaro_0day_used.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-081615-5201-99",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.justsystem.co.jp/info/pd6002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/enterprise/security_response/weblog/2006/08/justsystems_ichitaro_0day_used.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-081615-5201-99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in add_url.php in CloudNine Interactive Links Manager 2006-06-12 allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, or (3) keywords parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en add_url.php de CloudNine Interactive Links Manager 2006-06-12 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) title, (2) description, o (2) keywords."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudnine_interactive:links_manager:2006-06-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B30FF95-E556-4D85-8254-69474B71B400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/136/description.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21560",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445912/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/136/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445912/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin.php de CloudNine Interactive Links Manager 2006-06-12, cuando magic_quites_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro nick."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudnine_interactive:links_manager:2006-06-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B30FF95-E556-4D85-8254-69474B71B400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/136/description.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21560",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445912/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/136/description.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445912/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) core/includes/security.inc.php, (2) core/includes/smarty.inc.php, (3) qcms/includes/smarty.inc.php or (4) qlib/smarty.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Shadows Rising RPG (Pre-Alpha) 0.0.5b y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro CONFIG[gameroot] de (1) core/includes/security.inc.php, (2) core/includes/smarty.inc.php, (3) qcms/includes/smarty.inc.php o (4) qlib/smarty.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadows_rising_rpg:shadows_rising_rpg:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.5b_pre-alpha",
            "matchCriteriaId" : "25395BFF-9C80-4CE1-BEA9-785B0F60F60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000986.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19608",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000986.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4330",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-24T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador SCSI en Wireshark (anteriormente Ethereal) 0.99.2 permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21619",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21682",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21885",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22378",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-26.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016736",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/808832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0658.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444323/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19690",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28550",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-597",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14684",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/808832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444323/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4331",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-24T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples errores de superación de límite (off-by-one) en el analizador de preferencias ESP de IPSec. en Wireshark (anteriormente Ethereal) 0.99.2 permiten a atacantes remotos provocar una denegación de servicio (caída) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21619",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22378",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-26.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016736",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/638376",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0658.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19690",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10125",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14587",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/638376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4332",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-24T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the DHCP dissector in Wireshark (formerly Ethereal) 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service (crash) via unspecified vectors that trigger a bug in Glib."
      }, {
        "lang" : "es",
        "value" : "Vulnerabiliadd no especificada en el analizador DHCP en Wireshark (anteriormente Ethereal) 0.10.13 hasta 0.99.2, cuando se ejecuta en Windows, permite a aatacantes remotos provocar una denegación de servicio (caída) a través de vectores no especificados que disparan un bug en Glib."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21619",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-26.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016736",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/335656",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19690",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28554",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/335656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4333",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-24T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory."
      }, {
        "lang" : "es",
        "value" : "El analizador SSCOP en Wireshark (anteriormente  Ethereal) anterior a 0.99.3 permite a atacantes ermotos provocar una denegación de servicio (agotamiento de recursos) mediante paquetes mal formados que provocan que el analizador Q.2391 utilice demasiada memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21597",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21619",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21682",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21885",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22378",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-26.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016736",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/696896",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0658.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444323/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19690",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-597",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-26.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/696896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0658.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444323/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.cgi."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en CGI-Rescue Mail F/W System (formd) anterior a 8.3 permite a atacantes remotos falsificar correos electrónicos e inyectar cabeceras de correo electrónico a través de vectores no especificados en (1) mail.cgi y (2) query.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cgi-rescue:mail_f_w_system:8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83500224-0A32-4309-A519-128DF683FBCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2311048526/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21543",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28131",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2311048526/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en channels/chan_mgcp.c de MGCP en Asterisk 1.0 hasta 1.2.10 permite a atacantes remotos ejecutar código de su elección mediante una respuesta de fin de auditoría (audit endpoint) (AUEP) manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A92B4D-16A7-4D99-8F3A-2E5D3B12C86B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16783925-8EC5-431F-90B5-93B16DCC10B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C59AF9E-FEC7-44AB-B392-49DB11BAEB0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325C4452-6541-46F6-A86C-6D6987583FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5424B5B4-99B3-4695-8E0D-7E8DC8B88C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BDF9F0-1AFD-47E6-9054-A9FC6D422DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8D2125-019A-4B73-9E1A-98E745148803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C60C04-EF59-4F5C-96E5-A6E693EA9A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3636BB44-DF4D-40AB-8EBB-1EC5D911E4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B3C254-29D9-4911-89A9-AC0CD9EB13F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8679FD-B2E5-46F6-B20C-F109B9706C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E49F2D76-DC82-4289-8891-4982795D896A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203237E0-BB44-42D0-B65B-CBDAAA68A1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4042CC21-F3CB-4C77-9E60-AF8AA9A191C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656168D-7D6A-4E84-9196-A8B170E1F7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C619138A-557F-419E-9832-D0FB0E9042C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6656EA0-4D4F-4251-A30F-48375C5CE3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAD9104-BA4A-478F-9B56-195E0F9A7DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F06C361-D7DF-474B-A835-BA8886C11A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175954A5-E712-41B8-BC11-4F999343063D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.digium.com/pub/asterisk/ChangeLog-1.2.11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200608-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21600",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016742",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444322/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19683",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sineapps.com/news.php?rssid=1448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ftp.digium.com/pub/asterisk/ChangeLog-1.2.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200608-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444322/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sineapps.com/news.php?rssid=1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute code via format string specifiers or (2) overwrite files via directory traversals involving unspecified vectors, as demonstrated by the CALLERIDNAME variable."
      }, {
        "lang" : "es",
        "value" : "Asterisk 1.2.10 soporta el uso de variables controladas por cliente para determinar los nombres de archivo en la función Record, lo que permite a atacantes remotos (1) ejecutar código mediante especificadores de cadena de formato o (2) sobrescribir archivos mediante saltos de directorio relacionados con vectores no especificados, como se ha demostrado mediante la variable CALLERIDNAME."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175954A5-E712-41B8-BC11-4F999343063D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.musecurity.com/advisories/MU-200608-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016742",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444322/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19683",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sineapps.com/news.php?rssid=1448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200608-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444322/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sineapps.com/news.php?rssid=1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el manejo de la petición de autenticación de acceso de usuario en Cool_CoolD.exe en Cool Manager 5.0 (5,60,90,28) y Cool Messenger Office/School Server 5.5 (5,65,12,13) permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo username."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiran:cool_manager:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D18B12-7F97-4D18-A48D-923B5E16C13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiran:cool_messenger_office_school_server:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E08FEAE-3061-4D83-B828-D56305FC9977"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0605.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21569",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/coolmessenger55-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0605.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/coolmessenger55-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com_kochsuite) 0.9.4 component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en config.kochsuite.php del componente Kochsuite (com_kochsuite) 0.9.4 para Mambo y Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absoluet_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kochsuite_component:kochsuite_component:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A407A2A-4D4B-464C-8EE8-B67C9E5211AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443703/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19590",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443703/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcms_administer_site parameter to an unspecified script, probably index.php.  NOTE: this issue has been disputed by a third party, who states that $tcms_administer_site is initialized to a constant value within index.php"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en ToendaCMS 1.0.3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro tcms_administer_site de un fichero no especificado, probablemente index.php. NOTA: este problema ha sido impugnado por una tercera parte, que declara que $tcms_administer_site se inicializa a un valor constante dentro de index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3A79A9-C696-4B6F-92C3-9ED496D636FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toenda_software_development:toendacms:stable_1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82D69E3-6B9C-4CC0-97B0-AA53649C60F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/29358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443918/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444236/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19626",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443918/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444236/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en OneOrZero 1.6.4.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero:1.6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867F862D-22DE-43A5-92B5-10C0ABD83365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443631/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443631/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-24T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en OneOrZero 1.6.4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero:1.6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "867F862D-22DE-43A5-92B5-10C0ABD83365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443631/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443631/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-25T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, allows remote attackers to use the FTP printing interface as a proxy (\"FTP bounce\") by using arbitrary PORT arguments to connect to systems for which access would be otherwise restricted."
      }, {
        "lang" : "es",
        "value" : "Motor de impresión Fuji Xerox Printing Systems (FXPS), como se usa en productos incluyendo (1) Dell 3000cn hasta la versión 5110cn y (2) firmware Fuji Xerox DocuPrint en versiones anteriores a 20060628 y firmware Network Option Card en versiones anteriores a 5.13, permite a atacantes utilizar la interfaz de impresión FTP como un proxy (\"FTP bounce\") utilizando argumentos PORT arbitrarios para conectarse a sistemas para los cuales el acceso estaría de lo contrario restringido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:3000cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532844ED-5FC7-4E82-B952-329DF0633284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:3010cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A989FB9D-2D1D-4E3B-931E-F07690973A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:3100cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B029AC-DC1F-4E13-8920-B935400872BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:3110cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540F4B27-245A-48BD-9256-D998C0A2BD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:5100cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A101A57-0EEF-4F38-A5D2-CBA609185183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:5110cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B111FC-9F91-40F1-99DB-06912966AC2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_181:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A3031C-8F6A-4B4A-ABD0-D757BF273C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_181_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F323A9-A927-46CB-A5E3-CD15E19F5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_211:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B77692-BC61-4DA1-B663-DB94523D7737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_211_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F55AAD7-51CD-4E27-B371-054F8BA8D5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c1616:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690C64B8-73C5-44D5-9175-74E3A95AA582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c1616_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C451049F-4F93-4E56-B6D0-F20E9E6EEA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c2535a:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B73A75-921E-4C95-8C23-CD948CB3272E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c525a:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4EA020-6728-4B85-9E62-E12394CD75E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c525a_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE72B32-B190-4AE0-AF83-C46E6F4B1EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c830:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA7F17D-9E0A-447B-BCB6-A92EF808D8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c830_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32B109E-96DB-47F4-BC71-CBA2A7BCF1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:fuji_xerox_printing_systems_print_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADEBB9E-0656-440A-B21F-C6896F46E929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:phaser_6201j:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E682A0CD-C660-48AE-BC60-C50115FC2114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115652437223454&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444321/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3401",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115652437223454&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444321/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-25T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, does not properly perform authentication for HTTP requests, which allows remote attackers to modify system configuration via crafted requests, including changing the administrator password or causing a denial of service to the print server."
      }, {
        "lang" : "es",
        "value" : "El servidor HTTP incrustado en el motor de impresión Fuji Xerox Printing Systems (FXPS), como se usa en productos incluyendo (1) Dell 3000cn hasta la versión 5110cn y (2) firmware Fuji Xerox DocuPrint en versiones anteriores a 20060628 y firmware Network Option Card en versiones anteriores a 5.13, no realiza correctamente autenticación para peticiones HTTP, lo que permite a atacantes remotos modificar la configuración del sistema a través de peticiones manipuladas, incluyendo el cambio de la contraseña de administrador o provocando una denegación de servicio al servidor de impresión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:3000cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532844ED-5FC7-4E82-B952-329DF0633284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:3010cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A989FB9D-2D1D-4E3B-931E-F07690973A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:3100cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B029AC-DC1F-4E13-8920-B935400872BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:3110cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540F4B27-245A-48BD-9256-D998C0A2BD42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:5100cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A101A57-0EEF-4F38-A5D2-CBA609185183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:dell:5110cn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B111FC-9F91-40F1-99DB-06912966AC2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_181:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72A3031C-8F6A-4B4A-ABD0-D757BF273C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_181_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F323A9-A927-46CB-A5E3-CD15E19F5AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_211:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B77692-BC61-4DA1-B663-DB94523D7737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_211_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F55AAD7-51CD-4E27-B371-054F8BA8D5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c1616:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690C64B8-73C5-44D5-9175-74E3A95AA582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c1616_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C451049F-4F93-4E56-B6D0-F20E9E6EEA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c2535a:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B73A75-921E-4C95-8C23-CD948CB3272E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c525a:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4EA020-6728-4B85-9E62-E12394CD75E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c525a_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE72B32-B190-4AE0-AF83-C46E6F4B1EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c830:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA7F17D-9E0A-447B-BCB6-A92EF808D8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:docuprint_c830_network_option_card:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32B109E-96DB-47F4-BC71-CBA2A7BCF1BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:fuji_xerox_printing_systems_print_engine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADEBB9E-0656-440A-B21F-C6896F46E929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fuji_xerox:phaser_6201j:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E682A0CD-C660-48AE-BC60-C50115FC2114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115652437223454&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444321/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3401",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115652437223454&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444321/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3743",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-25T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de desbordamiento de búfer en ImageMagick anterior a 6.2.9 permiten a atacantes con la intervención del usuario ejecutar código de su elección mediante imágenes XCF manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB2E37B-323A-4336-B081-56BD32260E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AB4F80-4136-4007-8C33-E1C8A84C11B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ADE3A3-8FA5-439A-97ED-6EE93ED43699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C8CA07-E1D3-427B-AFA0-4110868D00DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A48433-240E-4555-966B-4BA767AA3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2F16E9-D441-45F6-B27A-9CB6D19A26BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0900904-462F-47DF-82C8-DD69D3E1EC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F50C03E-B94A-47C5-B394-3636BEE34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB80DF3F-DE3F-4CB3-B021-26B8D9F3B550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D85FBFE-9674-4ADF-887B-0D985CDC88EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA9ACBD-6065-4340-B987-560BE5A54FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74068962-7689-4155-91D7-506CD30BAFB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD4D7D7-C230-4986-9CA8-C4C7F9B9DC88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE3052B-3341-4B5C-A21F-4A10984D2641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A57BE9F-C790-4BEF-9A91-E6C565A1C1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "572F13C8-4FCC-4BF2-BECA-D957AC62DD51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=144854",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21621",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21719",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-14.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016749",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1168",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28205",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0633.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19697",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-340-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3375",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28575",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-605",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9895",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=144854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0633.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-340-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3744",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-08-25T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en ImageMagick anterior a 6.2.9 permiten a atacantes con la intervención del usuario ejecutar código de su elección mediante imágenes Sun Rasterfile (bitmap) manipuladas que provocan desbordamientos de búfer basado en montón."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.8",
            "matchCriteriaId" : "20260774-3D3E-4163-8058-25C2FCA5A329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB2E37B-323A-4336-B081-56BD32260E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AB4F80-4136-4007-8C33-E1C8A84C11B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ADE3A3-8FA5-439A-97ED-6EE93ED43699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C8CA07-E1D3-427B-AFA0-4110868D00DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A48433-240E-4555-966B-4BA767AA3C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2F16E9-D441-45F6-B27A-9CB6D19A26BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0900904-462F-47DF-82C8-DD69D3E1EC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F50C03E-B94A-47C5-B394-3636BEE34EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB80DF3F-DE3F-4CB3-B021-26B8D9F3B550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D85FBFE-9674-4ADF-887B-0D985CDC88EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA9ACBD-6065-4340-B987-560BE5A54FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74068962-7689-4155-91D7-506CD30BAFB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD4D7D7-C230-4986-9CA8-C4C7F9B9DC88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE3052B-3341-4B5C-A21F-4A10984D2641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A57BE9F-C790-4BEF-9A91-E6C565A1C1D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=144854",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21621",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21719",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21780",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21832",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22096",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-14.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/28204",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0633.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19699",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-340-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3375",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28574",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-605",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11486",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=144854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0633.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-340-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-25T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not specify a string option, which allows remote attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de cookies ArrowPoint para los Conmutadores de Servicio de Contenidos (Content Service Switches) Cisco serie 11000 especifica una dirección IP interna si el administrador no especifica una cadena de opción, lo que permite a atacantes remotos obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FC94DE-BBD2-43C6-9435-0242BA5DCC8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cisco.com/warp/public/117/AP_cookies.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/117/AP_cookies.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-25T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows local and remote attackers to read data from arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Java System Content Delivery Server 4.0, 4.1, y 5.0 permite a atacantes locales y remotos leer datos de archivos de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_content_delivery_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE6D4BD-0496-4ED7-8769-6C806F4B2B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_content_delivery_server:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15AF6B3-0948-4A9F-A0DA-73D93FB549E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_content_delivery_server:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B7096B-EB54-45DC-A688-CFF595F9250F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102593-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102593-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3124",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el análisis sintáctico de la cabecera HTTP en Streamripper anterior a 1.61.26 permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección mediante cabeceras HTTP manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:streamripper:streamripper:1.61.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201368B3-C82A-4CF8-AADC-24F4E67C4CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:streamripper:streamripper:1.61.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62AF206-3E5C-49F4-9013-A70B82664189"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.c",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21579",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21658",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21801",
        "source" : "security@debian.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-01.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=442126",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1158",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/28178",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19707",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3387",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28567",
        "source" : "security@debian.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=442126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in VistaBB 2.0.33 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/functions_mod_user.php or (2) includes/functions_portal.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en VistaBB 2.0.33 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path en (1) includes/functions_mod_user.php o (2) includes/functions_portal.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vistabb:vistabb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.33",
            "matchCriteriaId" : "5784939E-EE7F-413B-816B-C94987CB8D65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115641059002219&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=48",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19685",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115641059002219&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index.php de RedBLoG 0.5 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro root_path. NOTA: la procedencia de esta informacion es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redblog:redblog:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C3F687-96FF-499D-A22C-B84071BD5B52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/30311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/19658-rfi.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/30311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/19658-rfi.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en alltopics.php en All Topics Hack 1.5.0 y anteriores para phpBB 2.0.21 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro start."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:all_topics:all_topics_hack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "3CB754EC-387F-4E32-A0D2-BBA975F74E4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19682",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/functions_portal.php de IntegraMOD Portal 2.x y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:integramod:integramod_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AAC93D-1D99-4B9D-B816-3CD6CBFCB8E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115641052418714&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=47",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444207/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19689",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115641052418714&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444207/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via an absolute pathname in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio absoluto en includes/functions_portal.php de IntegraMOD Portal 2.x y anetriores, cuando magic_quites_gpc está desactivado, permite a atacantes remotos leer archivos de su elección mediante un nombre de ruta absoluto en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:integramod:integramod_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AAC93D-1D99-4B9D-B816-3CD6CBFCB8E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115641052418714&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=47",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444207/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19689",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115641052418714&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nukedx.com/?viewdoc=47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444207/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global administrator's password and gain privileges via the userlist.wdm file."
      }, {
        "lang" : "es",
        "value" : "Alt-N WebAdmin 3.2.3 y 3.2.4 ejecutándose con MDaemon 9.0.5, y posiblemente anteriores, permite a administradores de dominio autenticados remotamente cambiar la contraseña de un administrador global y escalar privilegios mediante el archivo userlist.wdm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035509D1-3AA0-450C-8C0D-08A5DE381B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841461CB-11A6-4672-A060-1AB6C8C62B3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://files.altn.com/WebAdmin/Release/RelNotes_en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21558",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444012/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19631",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://files.altn.com/WebAdmin/Release/RelNotes_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated global administrators to read arbitrary files via a .. (dot dot) in the file parameter to (1) logfile_view.wdm and (2) configfile_view.wdm."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de escalada de directorio en Alt-N WebAdmin 3.2.3 y 3.2.4 ejecutándose con MDaemon 9.0.5, y posiblemente anterioes, permite a administradores globales autenticados remotamente leer archivos de su elección mediante un .. (punto punto) en el parámetro file de (1) logfile_view.wdm y (2) configfile_view.wdm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035509D1-3AA0-450C-8C0D-08A5DE381B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841461CB-11A6-4672-A060-1AB6C8C62B3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://files.altn.com/WebAdmin/Release/RelNotes_en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21558",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444012/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19620",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://files.altn.com/WebAdmin/Release/RelNotes_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin.lurm_constructor.php in the Lurm Constructor component (com_lurm_constructor) 0.6b and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the lm_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin.lurm_constructor.php en el componente Lurm Constructor (com_lurm_constructor) 0.6b y anteriores para Mambo permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro lm_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:constructor_component:constructor_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6b",
            "matchCriteriaId" : "41971D50-DC18-49B3-BCDB-0270C12E84E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en modules/visitors2/include/config.inc.php en pSlash 0.70 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro lvc_include_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:derek_leung:pslash:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4193E3-DAF0-4978-AE41-C8F0D145D429"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000993.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444204/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19693",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000993.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444204/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a crafted ANI image file, possibly due to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "IrfanView 3.98 (con plugins) permite a atacantes con la intervención del usuario provocar una denegación de servicio (caída de aplicación) mediante una imagen ANI manipulada, posiblemente debido a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:3.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8391AF-D227-437B-9DF0-E8FF82A625CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442876/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19452",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442876/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  NOTE: another researcher has disputed this issue, saying that the software prevents the attack by checking whether _VALID_MOS is defined"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en contxtd.class.php en el componente Contacts XTD (ContXTD) para Mambo (com_contxtd) permiet a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path. NOTA: otro investigador ha impugnado este problema, diciendo que el software previene el ataque comprobando si _VALID_MOS está definida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:contacts_xtd_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B422242-08D0-4FCB-ABD5-B4CD37C3E55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443892/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444063/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443892/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444063/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) profil_nr and (2) sprache parameters in the main portion of the portal, the (3) suchstring field in suchForm in the main portion of the portal, the (4) GaleryKey and (5) Breadcrumbs parameters in the gallerie module, and the (6) GGBNSaction parameter in the ggbns module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Guder und Koch Netzwerktechnik Eichhorn Portal permietn a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados, que posiblemente incluyen los parámetros (1) profil_nr y (2) sprache, en la parte principal del portal, el campo (3) suchstring en suchForm en la parte principal del portal, los parámetros (4)GaleryKey y (5) Breadcrumbs en el módulo de galería, y el parámetro (6) GGBNSaction en el módulo ggbns."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guder_und_koch_netzwerktechnik:eichhorn_portal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958323BE-58D8-4AF2-A120-62E1CBCD148E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444065/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444065/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the (1) profil_nr and (2) sprache parameters in the main portion of the portal, the (3) suchstring field in suchForm in the main portion of the portal, the (4) GaleryKey and (5) Breadcrumbs parameters in the gallerie module, and the (6) GGBNSaction parameter in the ggbns module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Guder und Koch Netzwerktechnik Eichhorn Portal permiten a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados, que posiblemente incluyen los parámetros (1) profil_nr y (2) sprache en la parte principal del portal, el campo (3) suchstring en suchForm en la parte principal del portal, los parámetros (4)GaleryKey y (5) Breadcrumbs en el módulo de galería, y el parámetro (6) GGBNSaction en el módulo ggbns."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guder_und_koch_netzwerktechnik:eichhorn_portal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958323BE-58D8-4AF2-A120-62E1CBCD148E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444065/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444065/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-26T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in the Rssxt component for Joomla! (com_rssxt), possibly 2.0 Beta 1 or 1.0 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) pinger.php, (2) RPC.php, or (3) rssxt.php.  NOTE: another researcher has disputed this issue, saying that the attacker can not control this parameter.  In addition, as of 20060825, the original researcher has appeared to be unreliable with some other past reports.  CVE has not performed any followup analysis with respect to this issue"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Múltiples vulnerabilidades de inclusión remota de archivo en PHP en el componente Rssxt para Joomla! (com_rssxt), posiblemente 2.0 Beta 1 o 1.0 y anteriores, permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path en (1) pinger.php, (2) RPC.php, o (3) rssxt.php. NOTA: otro investigador ha impugnado este problema, diciendo que el atacante no puede controlar este parámetro. Además, a fecha de 25/8/2006, el investigador original se ha mostrado poco fiable según algunos reportes anteriores. CVE no ha realizado ningún análisis de seguimiento con respecto a este problema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rssxt_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0_beta_1",
            "matchCriteriaId" : "4BDB453C-598C-46B5-9A58-EF3B7AF55B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rssxt_component:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403550AF-3773-4C5A-92C4-74C091C65FFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443628/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444058/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443628/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444058/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the check_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en e/class/CheckLevel.php en Phome Empire CMS 3.7 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro check_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phome_empire:phome_empire_cms:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B8160-3909-4378-BB95-75CFE2A9A7C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21584",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006/08/19 12:02:27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Drupal Easylinks Module (easylinks.module) 4.7 anterior a 1.5.2.1 19/08/2006 12:02:27 permite a atacantes remotos inyectar secuencias de comandos o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_easylinks_module:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0407EA-0D9A-4366-A984-8A8B1F74FE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_easylinks_module:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD01703-AB49-4F06-840F-843A6081C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_easylinks_module:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523AB1CF-90D7-482B-89BE-77D3BAA277BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_easylinks_module:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6343FC40-02FD-4A40-AAF2-25796BFCF916"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/80087",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19670",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/80087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006/08/19 12:02:27 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Drupal Easylinks Module (easylinks.module) 4.7 anterior a 1.5.2.1 19/08/2006 12:02:27 permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_easylinks_module:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0407EA-0D9A-4366-A984-8A8B1F74FE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_easylinks_module:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD01703-AB49-4F06-840F-843A6081C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_easylinks_module:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523AB1CF-90D7-482B-89BE-77D3BAA277BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_easylinks_module:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6343FC40-02FD-4A40-AAF2-25796BFCF916"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/80087",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21603",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19673",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/80087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute arbitrary PHP code via a URL in the src parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en clients/index.php en Diesel Smart Traffic permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro src."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dieselscripts:diesel_smart_traffic:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1B4909-E864-4C8F-A182-A525276F6BEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19630",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Diesel Pay permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro read."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dieselscripts:diesel_pay:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC81C74-6B03-472F-B0AD-5A3F9A1584B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0416.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21588",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19623",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-08/0416.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Trident Software PowerZip 7.06 Build 3895 on Windows 2000 allows remote attackers to execute arbitrary code via a ZIP archive containing a long filename."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Trident Software PowerZip 7.06 Build 3895 en Windows 2000 permite a atacantes remotos ejecutar código de su elección mediante un archivo ZIP que contiene un nombre de fichero largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trident_software:powerzip:7.06_build_3895:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A12FCFF9-1E26-432D-A2F1-01AF6E8538C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21556",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/powerzip706-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19671",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/powerzip706-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 (20060812) allows remote authenticated users with the \"create products\" permission to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en E-commerce 4.7 para Drupal con file.module anerior a 1.37.2.4 (12/08/2006) permite a atacantes remotos autenticados con permiso para \"crear productos\" inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_e-commerce_module:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CD14F3-B7B5-47AA-B711-D0C1248DF0CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/80084",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21604",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19675",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/80084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the (1) uname or (2) SEmail parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en jobseekers/forgot.php de Diesel Job Site permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) uname o (2) SEmail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dieselscripts:diesel_job_site:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B44F0-17D2-4E40-8C80-D707BEA17BC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21589",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443926/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443926/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary web script or HTML via the ps parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en getad.php en Diesel Paid Mail permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro ps."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dieselscripts:diesel_paid_mail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000E66E2-E612-448E-A37B-BF47B53083E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21568",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443929/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19646",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443929/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the cropimagedir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin.cropcanvas.php del componente CropImage (com_cropimage) 1.0 para Mambo permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cropimagedir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cropimage_component:cropimage_component:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE3DA33-510F-48C2-B0C3-0396192A995F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443762/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19605",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443762/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-27T02:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el servidor POP3 de Alt-N Technologies MDaemon anterior a 9.0.6 permiten a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente ejecutar código de su elección mediante cadenas largas que contienen caracteres '@' en los comandos (1) USER y (2) APOP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63BE92A3-5320-4E68-89F7-BF977E602FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:2.8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6727183-BD1B-4816-A0B0-3CA24B1F41D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:2.71_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7503CBFE-B6F8-457E-BA78-16414EE14789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E791DD-1376-4E77-9D7B-C66E88146248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759C3190-DABF-4C54-8D26-A5285883BFA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF752E6A-0AB8-4B82-A895-9AF79B0783FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFA585E-4355-4497-8936-FD63E334B917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6906B4D1-9336-4E52-A1D4-1402F5EF2BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A1816E-0E48-4879-86A4-22E7FCCAC598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B02DB57-1B98-43AF-B400-73019A747C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E724258-DCD1-4F09-AD2F-3880F86FA649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "0906EDEB-A59F-4DDD-8763-AFA9EC78F9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2CFEEA75-350C-47D6-A2D4-8714D1D4907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772A222C-606C-42B5-A523-9584FFB9E0BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B8B55A-93D3-4456-8B84-DA437F7E18FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "EAD8D901-F60B-400B-A51E-0881D0077FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E419B0EF-DB52-43D7-906C-744CEF5D8E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB3DE93-03F4-4543-AF4D-A76C0AA86D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505D587A-DD1A-4C31-9C8E-D407CECF3545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E131AB50-9C43-4AF9-8637-618172FC1769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596930EE-960D-4307-B726-73DEBE5ABF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A221378-1198-4FBA-9857-05BA2E5E4B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A537AF6-0E86-41BD-AA41-B1598DCA01D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5162F06-31BD-4B04-8F60-A4ACBB7E16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCADFC8-99A1-4F7E-96E6-FD6F3F35EA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECE0B12-1F51-49A9-9C66-B7DC94ACE0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9125B2D-3EED-4014-8622-E9EBC5B2C99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA9FB24-DF9E-4A58-9F4B-B1613ADFCC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAC727D-046D-4021-BAE8-6CAD7890FEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B10DB1-1E18-4B58-B1E4-6A09871100CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A828E9-31AF-4199-9642-583830A1F180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F58E3A-8C0C-43C4-BAF3-05DD4DDC81C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437D2888-340C-48AB-815E-C04E5DE44CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46604A07-FBB0-4111-8B1C-2D01086BBB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD17AD0-27FE-49F5-A23D-2DE672D87C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4141E02E-C2DA-42C0-ABAB-62AFE4F869AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AA5447-4879-41A7-8F92-CAB0C3CD5E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9121D0-504E-444B-94C3-0E5C240376C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA25D7ED-BA8E-45E0-9399-B85499EF74D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB0B5F8-F010-4B70-947B-EA28EA38E237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F04FD52-7EA8-430E-86C7-5D3733A449AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFC20A7-14DF-4E00-873B-6F97A10EEA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9AF729-E2FA-4703-86AB-AD7416BD6EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72594AA0-3CB8-4F87-B709-F81E18D2ECBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D5F6E0-2047-4531-8C01-D79D3AE69170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CEAB790-561D-4815-99E0-78B62294B54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20CB70E2-1E3A-4FC1-BD26-E22EAC68D874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://files.altn.com/MDaemon/Release/RelNotes_en.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21595",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-08-04",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444015/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19651",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://files.altn.com/MDaemon/Release/RelNotes_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-08-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444015/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-28T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySQL before 4.1.13 allows local users to cause a denial of service (persistent replication slave crash) via a query with multiupdate and subselects."
      }, {
        "lang" : "es",
        "value" : "MySQL anterior a 4.1.13 permite a un usuario local provocar denegación de servicio (caida de esclavo de replicación persistente)a través de una consulta con multiacutalizaciones y subselecciones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.mysql.com/10442",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.mysql.com/internals/26123",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21712",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21762",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.mysql.com/10442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://lists.mysql.com/internals/26123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-28T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en el comando mkvg en IBM AIX 5.2 y 5.3 permite a usuarios locales escalar privilegios modificando la ruta para apuntar a programas (1) chdev, (2) mkboot, (3) varyonvg, o (4) varyoffvg maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB23261-D5A9-4C49-B08E-97A63ED6F84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-28T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in edituser.php in Xoops before 2.0.15 allows remote attackers to execute arbitrary SQL commands via the user_avatar parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en edituser.php en Xoops before 2.0.15 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro user_avart."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.14",
            "matchCriteriaId" : "B7CEA288-5191-44AD-95D9-410536BA0F31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://devteam.xoops.org/releases/changelog-2.0.15.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackers.ir/advisories/xoops.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28265",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://devteam.xoops.org/releases/changelog-2.0.15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackers.ir/advisories/xoops.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-28T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary local files via the lng parameter, as demonstrated by inserting PHP code into a log file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de directorio en index.php para Wikepage 2006.2a Opus 10 permite a un atacante remoto incluir archivos locales de sus elección a través del parámetro lng, como se demostró con la insercción de código PHP dentro del fichero de log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikepage:wikepage:2006.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89CF1DF-4FEF-4556-9C39-407907698A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikepage:wikepage:2006.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1E36E7-6D83-42B8-AC22-AB33CAFD8C7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21542",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-28T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in note.php in ProManager 0.73 allows remote attackers to execute arbitrary SQL commands via the note_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en note.php en ProManager 0.73 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro note_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:promanager:promanager:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C06AB7-A6E3-41D8-824E-9B014B4E1EC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-28T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local files via \"..\" sequences in the lang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en include_lang.php en Phaos 0.9.2 permite a un atacante remoto incluir ficheros locales de su elección a través de la secuencia \"..\" (punto punto) en el parámetro lang."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phaos:phaos:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424F1E8C-54A8-43BF-A984-FEDAE8451CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phaos:phaos:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD5FD84-209C-44B5-BF17-459C47A9A4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phaos:phaos:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65E183A5-1A6E-42A0-9DFD-6023F40C5370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote attackers to inject arbitrary web script or HTML via the D_REFRESH_URL parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en template/default/thanks_comment.php en Yet Another PHP Image Gallery (YaPIG) 0.95b permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro D_REFRESH_URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yapig:yapig:0.95b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8377F5-3C14-45FC-86F3-EB918687D2F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444328/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444328/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the relative_script_path parameter, a different vector than CVE-2006-2270. NOTE: this issue has been disputed, and as of 20060830, CVE analysis concurs with the dispute.  In addition, it is likely that the vulnerability is actually in a third party module, phpDig 1.8.8"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADO ** Vulnerabilidad PHP de inclusión remota de archivo en includes/phpdig/libs/search_function.php en Jetbox CMS 2.1 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro relative_script_path, un vector diferente que CVE-2006-2270. NOTA: este asunto ha sido impugnado, y en fecha 30/08/2006, el análisis de CVE está de acuerdo con esta disputa. Ademas, es probable que la vulnerabilidad esté realmente en un módulo de terceros, phpDig 1.8.8."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0916DF3D-71ED-423F-A2F4-842EE706ADDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000997.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/001003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444422/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444527/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444640/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444740/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444822/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444826/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000997.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/001003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444422/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444527/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444640/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444740/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444822/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444826/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[_BIGACE][DIR][admin] parameter in (a) system/command/admin.cmd.php, (b) admin/include/upload_form.php, and (c) admin/include/item_main.php; and the (2) GLOBALS[_BIGACE][DIR][libs] parameter in (d) system/command/admin.cmd.php and (e) system/command/download.cmd.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Bigace 1.8.2 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro (1) GLOBALS[_BIGACE][DIR][admin] en (a) system/command/admin.cmd.php, (b) admin/include/upload_form.php, y (c) admin/include/item_main.php; y el parámetro (2) GLOBALS[_BIGACE][DIR][libs] en d) system/command/admin.cmd.php y (e) system/command/download.cmd.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigace:bigace:1.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5A9B39-C468-4696-B675-D68928BA168B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444415/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19723",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444415/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en coin_includes/constants.php en phpCOIN 1.2.3 permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro the _CCFG[_PKG_PATH_INCL]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AC6D43-E648-47A7-A42B-7989F9F95EA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21624",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19706",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter in coin_includes scripts including (1) api.php, (2) common.php, (3) core.php, (4) custom.php, (5) db.php, (6) redirect.php or (7) session_set.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en phpCOIN 1.2.3 permiten a atacantes remotos ejecutar código PHP de su elección a través del parámetro _CCFG[_PKG_PATH_INCL] en archivos coin_includes entre ellos (1) api.php, (2) common.php, (3) core.php, (4) custom.php, (5) db.php, (6) redirect.php o (7) session_set.php. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coinsoft_technologies:phpcoin:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AC6D43-E648-47A7-A42B-7989F9F95EA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21624",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite (AES) 1.0a5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSA_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en AES/modules/auth/phpsecurityadmin/include/logout en AlberT-EasySite (AES) 1.0a5 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro PSA_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albert:albert-easysite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0a5",
            "matchCriteriaId" : "6E34B981-B7E6-49B1-93D3-6503D776AD28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albert:albert-easysite:0.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59AE931-A014-49F2-9C53-5F889C041F03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21651",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448292/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19729",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to \"1\"."
      }, {
        "lang" : "es",
        "value" : "index.php en eFiction anteriores a 2.0.7 permite a atacantes remotos evitar la autenticación y escalar privilegios modificando a \"1\" los parámetros (1) adminloggedin, (2) loggedin, y (3) level."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction:efiction:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9B6EFE-A3C7-469A-A024-7AF2E75DA838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction:efiction:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C196090-0580-4127-8FED-FC0B578BA29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction:efiction:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C609477-2DEE-4F49-82F1-ED8343C2C7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efiction:efiction:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09FCC217-970B-4844-88E2-430A8BCEAF3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://efiction.org/forums/index.php?topic=3698",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21625",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://efiction.org/forums/index.php?topic=3698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL in the template parameter.  NOTE: CVE disputes this claim, since the $template variable is defined as a static value before it is referenced in an include statement"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en index.php en Jupiter CMS 1.1.5 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro template. NOTA: CVE impugna esta afirmación, ya que la variable $template está definida como un valor constante antes de que se la haga referencia en una sentencia include."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB372559-61D8-4E8D-9ED2-DB7F211E8C78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000996.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000996.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] parameter, a different vector than CVE-2006-4291.  NOTE: This issue has been disputed by a third party, who states that the _IN_PHM_ declaration prevents this file from being called directly"
      }, {
        "lang" : "es",
        "value" : "**DISCUTIDA** vulnerabilidad php de inclusión remota de arhivo en handlers/email/mod.output.php en PHlyMail Lite 3.4.4 y anteriores (Build 3.04.04) permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en parámetro the _PM_[path][handler], un vector diferente que CVE-2006-4291. NOTA: este asunto ha sido discutido por una tercera parte, quien indica que la declaración _IN_PHM_ previente a este fichero de ser llamado directamente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phlymail:phlymail_lite:3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A067B32F-02DF-45B7-A99D-601D0506C0ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115629049105999&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444215/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115629049105999&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444215/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack.  NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms."
      }, {
        "lang" : "es",
        "value" : "The Cisco Network Admission Control (NAC) 3.6.4.1 y anteriores permite a un atacante remoto prevenir la instalación de Cisco Clean Access (CCA) Agent y evitar los mecanismos de protección locales y remotos a través de la modficación de (1) la cabecera HTTP User-Agent o (2) el comportamiento de la pila TCP/IP. NOTA:el vendedor ha discutido la severidad de este asunto, indicando que los usuarios no pueden puentear los mecanismos de autentificación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.4.1",
            "matchCriteriaId" : "8ABB4C62-1CF7-4280-B084-2C7EB3C7198C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17AF7C3-3453-4343-AC57-B3BAACAD36E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D20F5D1-C28A-4D0E-B4BA-3F8A9B05933E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA3ABF2-F8D7-4D46-8862-072AD105AE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B34BF7-B96E-4C6A-B6BD-803680629300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280C9607-98C6-44CE-9017-43592EC9D013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F972C202-DEEB-49AD-BBE7-442CA0E975E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028ABC18-8944-474C-8482-2DC4F0E0B51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD764CC4-F985-4A2F-B744-0B07BE59534F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B450984-DF81-46FE-A3E2-16323D1E55A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6133BA76-655F-4023-A5C5-31919D3C45E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5D9FFC-728E-4E2A-9787-0748D0C88433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8559F336-5A94-43ED-BF2E-0126038DA3C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FE412A-DB93-41FC-85B3-38E46913BEB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63702A32-F7D3-46FF-B7B2-A845081D3AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF86C8A2-154B-49B3-B263-41826DC196BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC77562-5C30-4DA3-AFCD-7CD63D85E298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CD71A6-724B-42C1-BBBD-456F74393909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7EDB2AB-B6EA-4327-A969-88BB822B3896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6828C91-18F9-4E36-B496-56E559180480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2251B20D-F0AA-4FCA-8B62-B3EED16726E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D400E92-D0E4-43C2-8ECF-84352B5B2608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59115E7-A5AB-4468-BE51-AB6E8D188B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE9D413-8078-4618-B4A6-4D774D30930F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89BCC4B-14A8-459F-94D9-70DDB6C205F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E40D45-E092-4D75-BE3C-64B7AB7A1018"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00200.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/ps6128/products_security_notice09186a00804fa82b.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/ps6128/tsd_products_security_response09186a008071d609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408603/30/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444424/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444501/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444737/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00200.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/ps6128/products_security_notice09186a00804fa82b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/ps6128/tsd_products_security_response09186a008071d609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/408603/30/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444424/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444501/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444737/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod_cluster module in the Zend Platform 2.2.1 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a (1) empty or (2) crafted PHP session identifier (PHPSESSID)."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en el (a) Session Clustering Daemon y el módulo (b) mod_cluster en Zend Platform 2.2.1 y versiones anteriores permiten a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código arbitrario a través de un identificador de sesión PHP (PHPSESSID) (1) vacio o (2) manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zend:zend_platform:*:a:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1a",
            "matchCriteriaId" : "28C06ABE-CB34-4E41-A2A4-ACF259823F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115642248226217&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21573",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_052006.128.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444263/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3388",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115642248226217&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_052006.128.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444263/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Zend Platform 2.2.1 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the final component of the PHP session identifier (PHPSESSID).  NOTE: in some cases, this issue can be leveraged to perform direct static code injection."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en Zend Platform 2.2.1 y anteriores permite a atacantes remotos sobrescribir archivos de su elección mediante una secuencia .. (punto punto) en el componente final del identificador de sesión PHP (PHPSESSID). NOTA: en algunos casos, este problema puede ser aprovechado para ejecutar una inyección directa de código estático."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zend:zend_platform:*:a:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.1a",
            "matchCriteriaId" : "28C06ABE-CB34-4E41-A2A4-ACF259823F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21573",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_052006.128.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444263/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_052006.128.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444263/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third party session handlers, which might make it easier for remote attackers to exploit other vulnerabilities by inserting PHP code into the PHPSESSID, which is stored in the session file.  NOTE: it could be argued that this not a vulnerability in PHP itself, rather a design limitation that enables certain attacks against session handlers that do not account for this limitation."
      }, {
        "lang" : "es",
        "value" : "PHP anterior a 4.4.3 y 5.x anterior a 5.1.4 no limita el conjunto de caracteres del identificador de sesión (PHPSESSID) para manejadores de sesión de terceros, lo cual puede hacer más fácil a atacantes remotos explotar otras vulnerabilidades insertando código PHP en el PHPSESSID, que es guardado en el fichero de sesión. NOTA: puede ser argumentado que no es una vulnerabilidad en PHP en si misma, sino más bien una limitación de diseño que habilita ciertos ataques sobre manejadores de sesión que no tienen en cuenta esta limitación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEF2298-98E8-409F-9205-84817CEF947B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D80F2A8B-B57F-4970-867A-55E8187C1502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8212495A-0F2A-4787-93F2-F6618F9A777B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B3138-3DCC-4682-B9A8-920E1110700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E727CECE-E452-489A-A42F-5A069D6AF80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "149A1FB8-593E-412B-8E1C-3E560301D500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "295907B4-C3DE-4021-BE3B-A8826D4379E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B881352D-954E-4FC0-9E42-93D02A3F3089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21573",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1466",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_052006.128.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444263/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_052006.128.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444263/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider this to be a PHP flaw.  The problem is caused by the insufficient input validation performed by Zend platform.",
        "lastModified" : "2008-10-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long \"header line\", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying \"The only denial of service that is possible here is to fill up the disk with core dumps if the OS actually generates different core dumps (which is unlikely)... the bug is in the shutdown code (finis()) which leads directly to exit(3), i.e., the process would terminate anyway, no mail delivery or receiption is affected.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Utilizar-tras-liberar en Sendmail versiones anteriores a 8.13.8, permite a atacantes remotos provocar una denegación de servicio (crash) mediante una \"header line\" larga, que provoca que una variable liberada anteriormente sea referenciada. \r\nNOTa: El desarrollador original ha impugnado la severidad de esta vulnerabilidad diciendo \"La única denegación de servicio posible aquí, es llenar el disco con volcados de memoria si el Sistema Operativo genera diferentes volcados de memoria (que es improbable)... el error reside en el código de apagado (finis()) que conduce directamente a exit(3), en este caso, el proceso terminaría de todas formas, no afecta a la distribución ni recepción de correo\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.13.8",
            "matchCriteriaId" : "59AD875A-87DA-43B2-87DB-DD7993118276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21637",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21641",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21696",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21700",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22369",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016753",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102664-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000999.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1164",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:156",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#sendmail3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sendmail3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28193",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19714",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.sendmail.org/releases/8.13.8.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3393",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3994",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102664-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/000999.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#sendmail3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sendmail3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.sendmail.org/releases/8.13.8.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This flaw causes a crash but does not result in a denial of service against Sendmail and is therefore not a security issue.",
        "lastModified" : "2006-08-30T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenBSD 3.8, 3.9, and possibly earlier versions allows context-dependent attackers to cause a denial of service (kernel panic) by allocating more semaphores than the default."
      }, {
        "lang" : "es",
        "value" : "OpenBSD 3.8, 3.9,y posiblemente versiones anteriores permiten a un atacante dependiente del contexto provocar denegación de servicio (kernel panic) destinando mas semaforos que los que hay por defecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21642",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016756",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#sem",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sem",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19713",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#sem",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata38.html#sem",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA) with a replay window of size 0 when isakmpd acts as a responder during SA negotiation, which allows remote attackers to replay IPSec packets and bypass the replay protection."
      }, {
        "lang" : "es",
        "value" : "isakmpd en OpenBSD 3.8, 3.9, y posiblemente versiones anetriores, crea Asociaciones de Seguridad (Security Associations o SA) con una ventana de respuesta de tamañoñ 0 cuando isakmpd actúa como respondedor durante una negociación SA, lo que permite a atacantes remotos repetir paquetes IPSec y evitar la protección contra repetición."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21652",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016757",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/errata.html#isakmpd",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/errata38.html#isakmpd",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19712",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata.html#isakmpd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata38.html#isakmpd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a \"?\" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871."
      }, {
        "lang" : "es",
        "value" : "pkgadd en Sun Solaris 10 anterior al 25/08/2006 instala archivos con permisos de archivo y directorio no seguros (755 ó 777) si el fichero pkgmap contiene un \"?\" (cierre de interrogación) en el modo field, lo cual permite a usuarios locales modificar archivos o directorios de su elección, una vulnerabilidad diferente que CVE-2002-1871."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21633",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102513-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102513-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path[ShowProcessHandle] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerablidad PHP de inclusión remota de archivo en main.php en Ay System Solutions CMS 2.6 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro path[ShowProcessHandle]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ay_system_solutions:ay_system_solutions_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "CB5E8F78-E20E-4BF2-8154-9C1AC24E7375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aysad.net/download/logs/WCSv2.7_upgrades.log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21661",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aysad.net/download/logs/WCSv2.7_upgrades.log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path[ShowProcessHandle] parameter to (1) home.php or (2) impressum.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Ay System Solutions CMS 2.6 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro path[ShowProcessHandle] a (1) home.php o (2) impressum.php. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ay_system_solutions:ay_system_solutions_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "CB5E8F78-E20E-4BF2-8154-9C1AC24E7375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21661",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML via the cat_name parameter, related to adding a category. (categories field).  NOTE: some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PHP iAddressBook anteriores a 0.95 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro cat_name, relacionado con añadir una categoría. (campo categories). NOTA: algunos detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clemens_wacha:php_iaddressbook:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC0CE86-D0E7-41B2-B598-279F706DA377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clemens_wacha:php_iaddressbook:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F060E71-9993-4555-A7C6-644705327E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clemens_wacha:php_iaddressbook:0.91a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA314E0F-EC8F-4A62-A2A5-0B6845327F4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clemens_wacha:php_iaddressbook:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4FFECA8-06FF-4982-9D0C-022245402E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clemens_wacha:php_iaddressbook:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D660BCA9-547D-4053-8A98-E23A5E947AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clemens_wacha:php_iaddressbook:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA3B611-F3D0-4E96-BA0A-EA5E92A16DBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21611",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wacha.ch/wiki/addressbook:changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19698",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://wacha.ch/wiki/addressbook:changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the config[BASE_DIR] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en myajaxphp.php en AlstraSoft Video Share Enterprise permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro config[BASE_DIR]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:video_share_enterprise:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53BA777F-4344-4042-A200-B312D360150E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444416/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19724",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444416/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the (1) tid parameter in the (a) todo/view (aka TODO List View), (b) todo/modify (aka TODO List Modify), or (c) todo/delete functionality; the (2) pid parameter in the (d) workflow/view or (e) workflow/print functionality; the (3) uid parameter in the (f) schedule/user_view, (g) phonemessage/add, (h) phonemessage/history, or (i) schedule/view functionality; the (4) cid parameter in (j) todo/index; the (5) iid parameter in the (k) memo/view or (l) memo/print functionality; or the (6) event parameter in the (m) schedule/view functionality."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Cybozu Garoon 2.1.0 para Windows permiten a usuarios remotos autenticados ejecutar comandos SQL de su elección mediante el (1) parámetro tid en la funcionalidad (a) todo/view (también conocido como TODO List View), (b) todo/modify (también conocido como TODO List Modify), o (c) todo/delete; el (2) parámetro pid  en la funcionalidad (d) workflow/view o (e) workflow/print; el (3) parámetro uid en la funcionalidad (f) schedule/user_view, (g) phonemessage/add, (h) phonemessage/history, o (i) schedule/view; el (4) parámetro cid en (j) todo/index; el (5) parámetro iid en la funcionalidad (k) memo/view o (l) memo/print; o el (6) parámetro event en la funcionalidad (m) schedule/view."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:2.1.0_for_windows:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC29CFF-9C2D-4743-9B11-5075BA99565C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybozu.co.jp/products/dl/notice_060825/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21664",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/cybozugaroon-en.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19731",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cybozu.co.jp/products/dl/notice_060825/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/cybozugaroon-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-29T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter to (1) show_news.php or (2) search.php.  NOTE: CVE analysis as of 20060829 has not identified any scenarios in which these vectors could result in remote file inclusion"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Múltiples vulnerabilidades de inclusión remota de archivo en PHP en CuteNews 1.3.x permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cutepath a (1) show_news.php o (2) search.php. NOTA: analistas del CVE el 29/08/2006 no han identificado ningún escenario en el cual estos vectores pudieran provocar una inclusión remota de archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4254A63A-3202-4D06-90B3-12D10511BC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A2D600-BEA7-4936-B210-91629B2EFCDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "674CC558-E3B7-4120-879A-0408A595C5BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-09/0040.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/001000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444385/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444733/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-09/0040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-August/001000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444385/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444733/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en SAP DB y MaxDB anterior a 7.6.00.30 permite a atacantes remotos  ejecutar código arbitrario mediante un nombre de base de datos largo al conectar mediante el cliente WebDBM."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysql:maxdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.00.22",
            "matchCriteriaId" : "C99DCF7C-841D-4A96-8ECF-8C6B2BA9F492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap-db:sap-db:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFDCFFD-4BBD-429A-89E9-B690A4E28CA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21677",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22518",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016766",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1190",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444601/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19660",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-009.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444601/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el objeto COM DirectAnimation.PathControl (daxctle.ocx) en Microsoft Internet Explorer 6.0 SP1 permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección mediante una llamada a la función Spline cuyo primer argumento especifica un número grande de puntos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit."
      }, {
        "lang" : "es",
        "value" : "X.Org y XFree86, incluyendo libX11, xdm, xf86dga, xinit, xload, xtrans, y xterm, no comprueban los valores de retorno de las llamadas a setuid y seteuid al intentar eliminar privilegios, lo cual permite a usuarios locales obtener privilegios haciendo fallar estas llamadas, como por ejemplo excediendo un ulimit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:emu-linux-x87-xlibs:7.0_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A99E8D-7B9B-4822-8550-5FB725F821CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FFBC43-2178-48DF-B61E-CCBA4682AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F506308-E878-4AA5-B5D5-A7E148D63947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D129D08C-AF18-4F9D-9781-64B8C1CFD65E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r6:6.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201EBA98-07CF-4F03-BB9F-694D65F0C118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r7:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02D3FA8-EDCD-4A3C-81CF-FC09633270DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r7:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D35005-EEB1-4FA1-95B5-EFF2ABC31AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x11r7:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDE33C3-5385-4457-A058-F43B08EFFFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:xdm:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388D6C4A-04DE-49B3-8B4B-30CC07961F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:xf86dga:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF163B1-8093-4E18-AF67-D97C22C205CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:xinit:1.0.2_r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D136635-B0EB-4714-95F0-F7341BB4558C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:xload:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75541A-E933-4292-B7D7-B4960745D717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:xorg-server:1.02_r5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A956491-A5FB-4848-8C06-D7BC66B0B614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:xterm:214:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A86C489-290F-4B62-BC6E-7934ACE57DFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.freedesktop.org/archives/xorg/2006-June/016146.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail.gnome.org/archives/beast/2006-December/msg00025.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21650",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-25.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200704-22.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/300368",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/23697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.freedesktop.org/archives/xorg/2006-June/016146.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail.gnome.org/archives/beast/2006-December/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200608-25.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200704-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/300368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/23697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not Vulnerable. This issue does not exist in Red Hat Enterprise Linux 2.1 or 3.  This issue not exploitable in Red Hat Enterprise Linux 4.  A detailed analysis of this issue can be found in the Red Hat Bug Tracking System:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195555",
        "lastModified" : "2006-09-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[BASE_PATH] parameter in (a) admin/autoprompter.php and (b) includes/common.inc.php, and the (2) CONFIG[LANGUAGE_CPATH] parameter in (c) admin/autoprompter.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en interact 2.2, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el (1) parámetro CONFIG[BASE_PATH] en (a) admin/autoprompter.php y (b) includes/common.inc.php, y en el (2) parámetro CONFIG[LANGUAGE_CPATH] en (c) admin/autoprompter.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interact_learning_community_environment:interact:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41A1FD6-2FC9-46C9-BB64-175F35354304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444526/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444526/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript, which is rendered by Internet Explorer."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en attachment.php en MyBulletinBoard (MyBB) 1.1.7 y posiblemente otras versiones permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una imagen GIF que contiene Javascript codificado en formato URL, lo cual es renderizado por Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=18",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444414/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19718",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444414/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request."
      }, {
        "lang" : "es",
        "value" : "usercp_avatar.php en PHPBB 2.0.20, cuando la subida de ficheros avatar está habilitada, permite a atacantes remotos usar el servidor como un proxy web enviando una URL al parámetro avatarurl, el cual es usado entonces en una petición HTTP GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AAEB34-A2E5-43C9-9EA5-DF8A6C848ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0238.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/20093",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/17965",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0238.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/20093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/17965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the (1) User-Agent HTTP header in tag.php, which is executed by all.php, and (2) the banned parameter in admin_index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección directa de código estático en CJ Tag Board 3.0 permite a atacantes remotos ejecutar código PHP de su elección mediante la (1) cabecera HTTP User-Agent en tag.php, que es ejecutado por all.php, y (2) el parámetro banned en admin_index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cj_design:cj_tag_board:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFC4925-A3D8-440D-BEAF-358AA94BB22E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-61/advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-61/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PHPSECURITYADMIN_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en security/include/_class.security.php en Web3news 0.95 y anteriores, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro PHPSECURITYADMIN_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web3king:web3news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95",
            "matchCriteriaId" : "D110E413-93D3-4CA5-BC89-E2C464E8250F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21640",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19744",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving \"table markups\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados(XSS) en PmWiki anterior a 2.1.18 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados que abarcan \"tabla de markups\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B6CC82-DA0C-4951-AACF-FA5474F7243E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A679D6-5261-4351-BD09-8975BAA44927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4FC7BC-0253-4A44-925E-57289B7BB944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E80F47F-D848-4FE9-9030-AFDF992F31B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578735E1-72AC-4607-ADB2-FBAEE7B90087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728FE60F-DC52-46B0-B718-4E7F1535AA1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5F0FD1-2CAB-4E05-AF19-79D3E5B5F681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96773E69-5182-4046-B29C-7BEF6653786A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "365F50C3-05F7-41A3-AE93-366DBBC829B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D440EFA-606A-402D-8F12-86E5B9C03CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D6BE6E-A13F-48B2-9813-8C0C94C8E2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DB117C-E330-4CFE-B4E0-3C39A3DF1E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F50EACAA-54D7-4C15-87A2-BD68C222446F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CDAFF6-C979-466C-914D-E6C03200C051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4581490-B665-407C-BEB9-51F1266A4ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC20F93E-F83E-4625-B79D-CCE49D43E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0F3638-4F2E-4790-AFA9-C68C2F298A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmwiki:pmwiki:2.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18FE5BE-A80B-4858-9E4F-E25C693F4B44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21667",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.pmichaud.com/wiki/PmWiki/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.pmichaud.com/wiki/PmWiki/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos web o HTML en hlstats.php en HLstats 1.34 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro q."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hlstats:hlstats:1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7998CDD1-22DA-4591-8516-8E221CD6B9A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0741.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21635",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19745",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0741.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-30T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors involving the PRIVMSG command.  NOTE: the vendor has disputed this vulnerability, stating that it does not affect 2.6.7 \"or any recent version\""
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad no especificada en Xchat 2.6.7 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores no especificados implicando el comando PRIVMSG. NOTA: el vendedor ha impugnado esta vulnerabilidad, afirmando que no afecta a la 2.6.7 \"ni a ninguna versión reciente\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xchat:xchat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.7",
            "matchCriteriaId" : "E2E899A7-0064-4015-9CDC-7532F763DE1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.xchat.org/viewtopic.php?t=2918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115523184321922&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xchat.org/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.xchat.org/viewtopic.php?t=2918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115523184321922&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xchat.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4244",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-08-31T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value."
      }, {
        "lang" : "es",
        "value" : "SQL-Ledger 2.4.4 a la 2.6.17 valida usuarios a través de la verificación del valor de la cookie sql-ledger-[username] selecciona el valor del parámetro sessionid, lo cual permite a un atacante remoto aumentar el acceso como cualquier usuario validado a través de la configuración la cookie y el parámetro con el mismo valor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A468DE-4EA0-40E5-848C-9A046E9EE073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB67B38-EB93-4F07-B57D-20D839036341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA5C8095-CDB8-40D3-8AE1-0F31B62DA859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93E88F3-AAB8-424A-909D-187490A569DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9379DECB-18FB-47FF-B6CA-FEDE70BD0090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE7C358-802F-47B9-B905-72077F0C27D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C91CB6-C4C3-4964-875B-868FCF2AFB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA97417-7192-4BC7-8C6D-CF2F311491AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB579DCA-1C5C-4EA3-9EFA-B440D64B771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CD497C-6B27-440C-ADD3-9CCE7835B512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8647ABC-1F51-4E3C-A362-ECE15961F7AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5587FE38-7533-45CD-B238-88691B8B0ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1942D52F-6877-4B81-9157-D5CAB707D66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBA608E-699C-4D60-AF1F-1BBA3862A47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5699B67-86B0-47FE-90D9-D409F6FABC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D11204D-B57D-40E6-B8FE-59F48BE8EAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31AB41D-86C9-4063-9D63-DEF9C463CB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388D505B-8227-4C5F-93BA-B37B7FCE08A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9895620D-BABD-4A4A-A196-BC5FCC549FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A067D306-200B-4EF6-A58F-0222FDA16C7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46865444-8B28-4DBA-8086-E2C5B5E4D33D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C671286-D9AC-46F0-866F-B530C25901FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5762E9-A65D-43D1-AE6F-D00469F2C1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A017D9C-78DE-4D35-AE6E-032311F8CF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F9DB72-874F-4369-AE14-EF33B98574E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A78E62-B64F-4A3F-A89A-86D19E7FA403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB32ED5F-490C-4C72-96EF-FE1B239A1841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE241D6D-6802-4BA6-B526-15824976C8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC578E3-D2DF-497B-8D25-AE64AA39DEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DAE416E-30A9-4AB3-B968-BB17EB1889F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BFEF80-BCC4-44BC-A7B6-D688F1688A96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD7E5E53-3B67-46CA-A85F-37A93958A4BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD66FE58-EF0E-4F02-9FDB-8AB5C715FCD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32309E76-7795-47B7-937E-CB6122A1BBB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD3EDFA2-8A21-4331-9715-3204DAA22845"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3635B9CC-E41D-4B08-8790-088035A1BB77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35CDD731-E995-4513-9AC4-D0EE9820E995"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CAECC0-260F-4B61-ACC6-18C075003FBB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC85020-344F-4B75-A79E-CA190FD8D335"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F314723-AE62-4DA9-8904-B27DD1D3AA28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.6.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB097CC-822C-4271-8D86-C978E3687630"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C8571C-8240-4DA2-9190-AA5844ACE954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D4DB7D-B779-42C3-87E0-F19FD546B1D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9347B79-BF54-45B9-91BE-10AC9B8CAE1D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80606CA8-22A2-4B8B-870D-80723DBA2EB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4E69D9-273F-4816-B793-2F6BAF764C74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81B17BD-570A-4FB2-B9F3-D7FA1230FB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC2718E-D742-4E6A-BBA2-4FE16AB9F808"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA77D30D-51F9-4B1D-8BCF-3725BDA43526"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9B5E2C-8C1C-4C47-B69D-A1AA17F9AAAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79497E96-8A63-4D02-A6C4-490146BFCDAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D962297-E903-4F52-A572-B58D056248E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2CB622-0A42-4498-9218-EC691772BF83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42629C1-3BC6-40AE-9A5C-F6E8CF5BD88E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89B5D37-EFC0-4C4C-AF9C-7504FBDB9DFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47E4D57-7CC5-493E-97BF-E46A50D8CF84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E2A5DA-FB9F-43C7-BF0E-D2015064B8BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E2D064-9D18-4868-A8C1-2CED2755425F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C3C7C0-F508-4565-BD6E-4C54A4DA0E9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:sql-ledger:sql-ledger:2.8.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4882BC7-93D6-457C-BFB8-633115F04E7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21689",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1472",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444741/100/0/threaded",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445512",
        "source" : "security@debian.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19758",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.sql-ledger.org/cgi-bin/nav.pl?page=news.html&title=What%27s%20New",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28671",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444741/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sql-ledger.org/cgi-bin/nav.pl?page=news.html&title=What%27s%20New",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivos en functions.php en phpECard 2.1.4 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro include_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpecard:phpecard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "A87BF213-4304-4ED6-8AF5-A09FB5E901E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21676",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19752",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en phpECard 2.1.4 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro include_path. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpecard:phpecard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "A87BF213-4304-4ED6-8AF5-A09FB5E901E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21676",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T10:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the GLOBALS[phpgw_info][user][preferences][common][country] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de directorio transversal en calendar/inc/class.holidaycalc.inc.php en phpGroupWare 0.9.16.010 y anteriores permite a un atacante remoto incluir archivos loccales de su elección a través de la secuencia .. (punto punto) y el byte nulo de acarreo (%00) en el parámetro GLOBALS[phpgw_info][user][preferences][common][country] ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02256AC-1BE6-423D-A974-61D5EF137573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21687",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to phpGroupWare 0.9.16.011"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.96 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PHP iAddressBook anterior a 0.96 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clemens_wacha:php_iaddressbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.95",
            "matchCriteriaId" : "3D5739D6-A57E-4C8D-948A-965E47C10367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wacha.ch/wiki/addressbook:changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wacha.ch/wiki/addressbook:changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a \"list of acceptable host IP addresses in the probe settings,\" which has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Paessler IPCheck Server Monitor anterior a 5.3.3.639/640 no implementa adecuadamente una \"lista de direcciones IP de hosts aceptables en la configuración de sondeo\", lo cual tiene impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:ipcheck_server_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.2.616_617",
            "matchCriteriaId" : "B9605E39-022C-40A4-A4EA-F6D1C3C4840E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.paessler.com/ipcheck/history",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.paessler.com/ipcheck/history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gonafish.com LinksCaffe 2.0 and 3.0 do not properly restrict access to administrator functions, which allows remote attackers to gain full administration rights via a direct request to Admin/admin1953.php."
      }, {
        "lang" : "es",
        "value" : "Gonafish.com LinksCaffe 2.0 y 3.0 no restringe adecuadamente el acceso a funciones de administración, lo cual permite a atacantes remotos obtener derechos totales de administración mediante una petición directa a Admin/admin1953.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gonafish.com:linkscaffe:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849C5A8B-80B4-4AE7-931E-B220A5FAB953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gonafish.com:linkscaffe:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B5A45F-0182-4A0F-ACCE-3D980BBFF8DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016767",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444636/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444636/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote attackers to execute arbitrary SQL commands via the pwd parameter (aka the Password field)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el panel de control de administración de Jetstat.com JS ASP Faq Manager 1.10 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro pwd (también conocido como el campo de contraseña)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetstat.com:js_asp_faq_manager:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0585AD-944B-48FF-B533-40D3782FEDB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28266",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444652/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nokia Browser, possibly Nokia Symbian 60 Browser 3rd edition, allows remote attackers to cause a denial of service (crash) via JavaScript that constructs a large Unicode string."
      }, {
        "lang" : "es",
        "value" : "El navegador de Nokia, posiblemente Nokia Symbian 60 Browser 3rd edition, permite a atacantes remotos provocar una denegación de servicio (caída) mediante JavaScript que construye una cadena Unicode larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:symbian:s60:3:*:*:*:*:*:*",
            "matchCriteriaId" : "480FC87C-9599-4CD4-A94E-C8E83B9CFC93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442990/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19484",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/442990/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Terminal Server, when running an application session with the \"Start program at logon\" and \"Override settings from user profile and Client Connection Manager wizard\" options, allows local users to execute arbitrary code by forcing an Explorer error.  NOTE: a third-party researcher has stated that the options are \"a convenience to users\" and were not intended to restrict execution of arbitrary code"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Microsoft Terminal Server, al ejecutar una sesión de aplicación con las opciones \"Ejecutar programa al iniciar\" y \"Sobreescribir configuración desde el perfil de usuario y el asistente de manejo de conexiones de cliente\", permite a usuarios locales ejecutar código de su elección forzando un error de Explorer. NOTA: un investigador de una tercera parte ha afirmado que las opciones son \"una conveniencia para los usuarios\" y que no están destinadas a restringir la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40242161-D5AD-4314-AB95-E61292C49DF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wklpc.blogspot.com/2006/08/easy-ms-terminal-server-desktop-hack.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443364/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443428/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wklpc.blogspot.com/2006/08/easy-ms-terminal-server-desktop-hack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443364/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443428/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Joomla! before 1.0.11 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to have an unspecified impact.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Joomla!."
      }, {
        "lang" : "es",
        "value" : "Joomla! anterior a 1.0.11 no desestablece variables adecuadamente cuando la información de entrada incluye un parámetro numérico con un valor correspondiente a una valor hash de un parámetro alfanumérico, lo cual permite a atacantes remotos tener impacto desconocido. NOTA: se puede argumentar que esta vulnerabilidad es debido a un fallo en el comando PHP unset (CVE-2006-3017) y la solución apropiada debería estar en PHP; si es así, entonces esta no debe ser tratada como una vulnerabilidad en Joomla!."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10",
            "matchCriteriaId" : "04E1FF2D-21A9-4953-A133-472C92812859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4467",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Machines Forum (SMF) 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read arbitrary local files, lock topics, and possibly have other security impacts.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Simple Machines Forum."
      }, {
        "lang" : "es",
        "value" : "Simple Machines Forum (SMF) 1.1RCx anterior a 1.1RC3, y 1.0.x anterior a 1.0.8, no asigna correctamente variables cuando los datos de entrada incluyen un parámetro numérico con un valor que empareja el valor del hash de un parámetro alfanumérico, lo cual permite a un atacante remoto llevar a cabo ataques de directorio transversal para leer archivos locales de su elección, bloquear asuntos, y tener posiblemente otros impactos de seguridad. NOTA: podría ser discutido que esta vulnerabilidad es debida a un fallo en el comando unset de PHP (CVE-2006-3017) y la solución apropiada debe estar en el PHP; si es así entonces esto no se debe tratar como vulnerabilidad en Simple Machines Forum."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "254BAB86-EF6D-4EE1-830B-11CEB96583C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1_rc2",
            "matchCriteriaId" : "2661792B-CA6F-4A81-AEE2-FFA7B8E42FDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/smf_11rc2_local_incl.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/smf_11rc2_lock.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444053/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.simplemachines.org/community/index.php?topic=107112.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.simplemachines.org/community/index.php?topic=107135.0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/smf_11rc2_local_incl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/smf_11rc2_lock.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444053/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.simplemachines.org/community/index.php?topic=107112.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.simplemachines.org/community/index.php?topic=107135.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the (1) mosMail, (2) JosIsValidEmail, and (3) josSpoofValue functions; (4) the lack of inclusion of globals.php in administrator/index.php; (5) the Admin User Manager; and (6) the poll module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Joomla! anterior a 1.0.11, relacionado con la invalidez de la entrada, permite a un atacante remoto tener un impacto desconocido a través de vectores no especificados que abarcan las funciones (1) mosMail, (2) JosIsValidEmail y(3) josSpoofValue; (4) la carencia de la inclusión de globals.php en administrator/index.php; el Admin User Manager; y el (6) módulo poll."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11",
            "matchCriteriaId" : "078081E2-DEA6-4D89-91A5-16F89708F016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28628",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PEAR.php in Joomla! before 1.0.11 allows remote attackers to perform \"remote execution,\" related to \"Injection Flaws.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificado en PEAR.php in Joomla! anterior a 1.0.11 permite a un atacante remoto realizar \"ejecuciones remotas\", relacionado con \"defectos de inyección\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11",
            "matchCriteriaId" : "078081E2-DEA6-4D89-91A5-16F89708F016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28629",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown impact, possibly resulting in PHP remote file inclusion."
      }, {
        "lang" : "es",
        "value" : "Joomla! anterior a 1.0.11 omite algunas comprobaciones para si _VALID_MOS está definido, lo que permite que los atacantes tengan un impacto desconocido, posiblemente dando por resultado la inclusión remota de archivos PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11",
            "matchCriteriaId" : "078081E2-DEA6-4D89-91A5-16F89708F016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28631",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad Admin Upload Image en Joomla! anterior a 1.0.11 oernute a un usuario validaddo actualizar archivos fuera del diretorio /images/stories/ a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11",
            "matchCriteriaId" : "078081E2-DEA6-4D89-91A5-16F89708F016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28630",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Joomla! before 1.0.11 allow attackers to bypass user authentication via unknown vectors involving the (1) do_pdf command and the (2) emailform com_content task."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Joomla! anterior 1.0.11 permite a un atacante evitar la validación de usuario a través de vectores desconocidos que envuelven el comando (1)do_pdf y la tarea (2)emailform com_content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11",
            "matchCriteriaId" : "078081E2-DEA6-4D89-91A5-16F89708F016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28632",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in com_content in Joomla! before 1.0.11, when $mosConfig_hideEmail is set, allows attackers to perform the emailform and emailsend tasks."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en com_content en Joomla! anterior 1.0.11, cuando esta asignado $mosConfig_hideEmail, permite a un atacante realizar tareas emailform y emailsend."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10",
            "matchCriteriaId" : "04E1FF2D-21A9-4953-A133-472C92812859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) Admin Module Manager, (2) Admin Help, and (3) Search."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Joomla! anterior a 1.0.11 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante parámetros no especificados en (1) Módulo de Administración, (2) Ayuda de Administración y (3) Búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10",
            "matchCriteriaId" : "04E1FF2D-21A9-4953-A133-472C92812859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Joomla! anterior a 1.0.11 no limita el acceso a la funcionabilidad Admin Popups, lo cual tiene un impacto desconocido y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10",
            "matchCriteriaId" : "04E1FF2D-21A9-4953-A133-472C92812859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to \"Injection Flaws,\" allow attackers to have an unknown impact via (1) globals.php, which uses include_once() instead of require(); (2) the $options variable; (3) Admin Upload Image; (4) ->load(); (5) content submissions when frontpage is selected; (6) the mosPageNav constructor; (7) saveOrder functions; (8) the absence of \"exploit blocking rules\" in htaccess; and (9) the ACL."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Joomla! 1.0.11, relacionados con \"defectos de inyección,\" permite a un atacante tener un impacto deconocido a través de (1) globals.php, el cual usa include_once() en vez de require(); (2) la variable $options; (3) Admin Upload Image; (4) ->load(); (5) contienen presentación de contenidos cuando el se selecciona frontpage (6)el constructor mosPageNav; (7)la función saveOrder; (8) la ausencia de “reglas de bloqueo de exploits” en htaccess; y (9) el ACL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10",
            "matchCriteriaId" : "04E1FF2D-21A9-4953-A133-472C92812859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4007FCB-589A-413D-8009-64404926CA7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1841/78/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.joomla.org/content/view/1843/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3125",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in tetrinet.c in gtetrinet 0.7.8 and earlier allows remote attackers to execute arbitrary code via a packet specifying a negative number of players, which is used as an array index."
      }, {
        "lang" : "es",
        "value" : "Error de índice de array en tetrinet.c en gtetrinet 0.7.8 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un paquete especificando un número negativo de jugadores, el cual es usado como índice de un array."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtetrinet:gtetrinet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.8",
            "matchCriteriaId" : "728A70D4-EC56-4EDC-8801-0B2D4798C222"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21691",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21704",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21800",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-02.xml",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1163",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.osvdb.org/28269",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19766",
        "source" : "security@debian.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28683",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_21_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute arbitrary PHP code via an empty GLOBALS[rootdp] parameter and an ftps URL in the (1) GLOBALS[admin_home] parameter in (a) diary/event_list.php, (b) gallery/gallery_summary.php, (c) guestbook/showguestbook.php, (d) links/showlinks.php, and (e) reviews/review_summary.php; and the (2) GLOBALS[language_home] parameter in (f) calendar/calendar.php, (g) news/shownews.php, (h) poll/showpoll.php, (i) search/search.php, (j) toprated/toprated.php, and (k) whatsnew/whatsnew.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Visual Shapers ezContents 2.0.3 permite a atacantes remotos ejecutar código PHP de su elección mediante un parámetro GLOBALS[rootdp] vacío y una URL ftps en el (1)  parámetro GLOBALS[admin_home] en (a) diary/event_list.php, (b) gallery/gallery_summary.php, (c) guestbook/showguestbook.php, (d) links/showlinks.php, y (e) reviews/review_summary.php; y el (2) parámetro GLOBALS[language_home] en (f) calendar/calendar.php, (g) news/shownews.php, (h) poll/showpoll.php, (i) search/search.php, (j) toprated/toprated.php, y (k) whatsnew/whatsnew.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visualshapers:ezcontents:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCD2322-56E6-4626-AA65-A6F88AFAD775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21703",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28321",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28322",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28323",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28324",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28326",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28327",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28328",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28329",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28330",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28331",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444779/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19776",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444779/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in headeruserdata.php in Visual Shapers ezContents 2.0.3 allows remote attackers to execute arbitrary SQL commands via the groupname parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en headeruserdata.php en Visual Shapers ezContents 2.0.3 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro groupname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visualshapers:ezcontents:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCD2322-56E6-4626-AA65-A6F88AFAD775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444779/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19777",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444779/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in loginreq2.php in Visual Shapers ezContents 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the subgroupname parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en loginreq2.php en Visual Shapers ezContents 2.0.3 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro subgroupname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visualshapers:ezcontents:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCD2322-56E6-4626-AA65-A6F88AFAD775"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444779/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444779/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in the nk_CSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote attackers to bypass anti-XSS features and inject arbitrary web script or HTML via JavaScript in an attribute value that is not in the blacklist, as demonstrated using the STYLE attribute of a B element."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lista negra incompleta en la función k_CSS en nuked.php en Nuked-Klan 1.7 SP4.3 permite a un atacante remoto evitar las medidas anti-XSS e inyectar secuencias de comandos web o HTML a través de JavaScript en un atributo value que no está en la lista negra, como se demostró usando el atributo STYLE de un elemento B."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuked-klan:nuked-klan:1.7_sp4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093859C7-AA7A-4AEB-8B1E-6E3A3EFF8A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444749/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444749/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings.  NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by CVE-2006-1017."
      }, {
        "lang" : "es",
        "value" : "Las funciones (1) file_exists y (2) imap_reopen en PHP before 5.1.5 no validan para las configuraciones safe_mode y open_basedir, lo cual permite a un usuario local evitar las configuraciones. NOTA: la función error_log está cubierta por CVE-2006-3011, y la función imap_open está cubierta por CVE-2006-1017."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21768",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21842",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-342-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-342-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues.  For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php\n",
        "lastModified" : "2006-09-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de desbordamiento de búfer en las funciones (1) str_repeat y (2) wordwrap en ext/standard/string.c en PHP anterior a 5.1.5, cuando se uso sobre sistemas de 64-bit, tiene un impacto desconocido y ataque a vectores, una vulnerabilidad diferente que la CVE-2006-1990."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.5",
            "matchCriteriaId" : "6A48AD4D-30B8-4263-85CB-BEDB618524FB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.10&r2=1.445.2.14.2.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21768",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22004",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22713",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1206",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0669.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0682.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-342-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10121",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.10&r2=1.445.2.14.2.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/22713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0669.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0682.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-342-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOLLOWLOCATION option when open_basedir or safe_mode is enabled, which allows attackers to perform unauthorized actions, possibly related to the realpath cache."
      }, {
        "lang" : "es",
        "value" : "Los ficheros con extensión cURL (1) ext/curl/interface.c y(2) ext/curl/streams.c en PHP anterior a 5.1.5 permite la opción CURLOPT_FOLLOWLOCATION cuando open_basedir o safe_mode está habilitado, lo cual permite a un atacante realizar acciones no autorizadas, posiblemente relacionado con la caché realpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.5",
            "matchCriteriaId" : "6A48AD4D-30B8-4263-85CB-BEDB618524FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/curl/interface.c?r1=1.62.2.14.2.6&r2=1.62.2.14.2.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/curl/interface.c?view=log",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/curl/streams.c?r1=1.14.2.2.2.3&r2=1.14.2.2.2.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/30411",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/492671/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/curl/interface.c?r1=1.62.2.14.2.6&r2=1.62.2.14.2.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://cvs.php.net/viewcvs.cgi/php-src/ext/curl/interface.c?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/curl/streams.c?r1=1.14.2.2.2.3&r2=1.14.2.2.2.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://secunia.com/advisories/30411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/492671/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función LWZReadByte_ en ext/gd/libgd/gd_gif_in.c en la extensión GD en PHP anterior a 5.1.5 permite a atacantes remotos tener un impacto desconocido mediante un fichero GIF con input_code_size mayor que MAX_LWZ_BITS, lo cual dispara un desbordamiento al inicializar el array tabla."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=38112",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?r1=1.10&r2=1.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?view=log",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21768",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21842",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/30717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2008-0046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2008_13_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0146.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/487683/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/488008/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-342-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=431568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00502.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.php.net/bug.php?id=38112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?r1=1.10&r2=1.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/Advisories:rPSA-2008-0046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2008_13_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0146.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/487683/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/488008/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-342-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=431568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-2218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00502.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read."
      }, {
        "lang" : "es",
        "value" : "La función stripos en PHP anterior a 5.1.5 tiene impacto desconocido y vectores de ataque relacionados con una lectura fuera de rango."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-362-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_5.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-362-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en rutinas de asignación de memoria en PHP anterior a 5.1.6, cuando se ejecuta en sistemas de 64 bits, permite a atacantes dependientes de contexto evitar la restricción memory_limit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22331",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25945",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/release_5_1_6.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0669.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0682.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-362-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_52_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/ChangeLog-5.php#5.1.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/release_5_1_6.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0669.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0682.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-362-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el código de depuración (1) DWARF (dwarfread.c) y (2) DWARF2 (dwarf2read.c) en GNU Debugger (GDB) 6.5 permite a atacantes con la intervención del usuario, o a usuarios restringidos, ejecutar código de su elección mediante un archivo creado artesanalmente con un bloque de posición (DW_FORM_block) que contenga un gran número de operaciones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gdb:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF78BF4-DAE9-4BA2-8146-0DAABEBFB9B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Oct/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21713",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22205",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22662",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25894",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25934",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26909",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27706",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200711-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-253.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0229.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0469.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-356-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4283",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204841",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Oct/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200711-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-253.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0229.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0469.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-356-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Updates to address this issue are available for Red Hat Enterprise Linux 3 and 4:\nhttps://rhn.redhat.com/cve/CVE-2006-4146.html\n\nRed Hat Enterprise Linux 5 was not vulnerable to this issue as it contained a backported patch.",
        "lastModified" : "2009-06-01T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords."
      }, {
        "lang" : "es",
        "value" : "DUware DUpoll 3.0 y 3.1 almacena _private/Dupoll.mdb en la raíz de documentos web con insuficiente control de acceso, lo cual permite a atacantes remotos obtener información sensible como nombres de usuario y contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dupoll:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AF6505-5CC2-4C01-BE68-E123F3A5ACC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duware:dupoll:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C044018B-D54E-4F57-AD35-BF561373A9B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21670",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444682/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444682/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the exbb[home_path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en modules/userstop/userstop.php en xBB Italia 0.2 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro exbb[home_path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exbb:exbb_italia:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2",
            "matchCriteriaId" : "40F8C89C-B980-4DE5-B6A3-9BF55260B828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exbb.clans.it/forum/announcements.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19753",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3412",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exbb.clans.it/forum/announcements.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (1) a URL in the config[include_dir] parameter in actions/ipn.php or (2) an FTP path in the config[plugin_dir] parameter in include/initPlugins.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en MiniBill 2006-07-14 (1.2.2) permite a atacantes remotos ejecutar código PHP de su elección mediante (1) una URL en el parámetro config[include_dir] en actions/ipn.php o (2) una ruta FTP en el parámetro config[plugin_dir] en include/initPlugins.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultrize:minibill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "C762519A-0DC8-4A5B-AF31-0C9736154C55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21688",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001115.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ultrize.com/minibill/index.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ultrize.com/minibill/index.php?page=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001115.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ultrize.com/minibill/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ultrize.com/minibill/index.php?page=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. (dot dot) sequence via the id parameter in (1) scripts/cbag/ag.exe or (2) scripts/s360v2/s360.exe."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de atravesamiento de directorios en Cybozu Office anterior a 6.6 Build 1.3 y Share 360 anterior a 2.5 Build 0.3 permiten a usuarios remotos autenticados leer archivos de su elección mediante una secuencia .. (punto punto) vía el parámetro id en (1) scripts/cbag/ag.exe o (2) scripts/s360v2/s360.exe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:cybozu_office:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.6_build_1.2",
            "matchCriteriaId" : "14B64813-7187-4F0B-9C40-FCBB62F8E5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:share_360:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5_build_0.2",
            "matchCriteriaId" : "8B2FFC5B-7EF1-4A43-86FC-92CCC633D3EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybozu.co.jp/products/dl/notice_060825/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2390420168/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21618",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21623",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://vuln.sg/cybozu-en.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cybozu.co.jp/products/dl/notice_060825/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2390420168/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://vuln.sg/cybozu-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en Cybozu Collaborex, AG anterior a 1.2(1.5), AG Pocket anterior a 5.2(0.8), Mailwise anterior a 3.0(0.3), y Garoon 1 anterior a 1.5(4.1) permite a usuarios remotos autenticados leer archivos de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:collaborex:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED5BAA4-1DD1-4DC3-A777-1402E55ED4CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:cybozu_ag:1.2\\(1.4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE1109F-8CB8-4844-AAEA-00C28DA8A495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:cybozu_pocket:5.2\\(0.7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A8DF13-14FD-4BF2-BF6A-B931C319DA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon_1:1.5\\(4.0\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD557756-9B60-4983-AE38-74EF6C2B3C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:mailwise:3.0\\(0.2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB86035-A71A-4198-BADF-CA6723F2209E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cybozu.co.jp/products/dl/notice_060825/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2390420168/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21638",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21656",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016759",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cybozu.co.jp/products/dl/notice_060825/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2390420168/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/28262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cybozu Office 6.5 Build 1.2 for Windows allows remote attackers to obtain sensitive information, including users and groups, via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Cybozu Office 6.5 Build 1.2 para Windows permite a atacantes remotos obtener información sensible, incluyendo usuarios y grupos, mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:cybozu_office:6.5_build_1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8B7365-2E15-4E91-8A86-B4C284A64E15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2331125599/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21623",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2331125599/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "xbiff2 1.9 crea $HOME/.xbiff2rc en el directorio base de los usuarios con permisos de archivo inseguros, lo cual permite a usuarios locales obtener información sensible como credenciales de acceso. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xbiff2:xbiff2:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D102CAE-3E24-401D-8756-2514FD2E2449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, and (5) vi30aut.dll."
      }, {
        "lang" : "es",
        "value" : "Microsoft Visual Studio 6.0 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) y posiblemente ejecutar código arbitrario instanciando objetos Visual Studio 6.0 ActiveX COM en Internet Explorer, incluyendo (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, y (5) vi30aut.dll."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CDA0E2-DFBD-4EE0-80DC-76AA55ADFEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "00ACB96E-1B59-46F5-855F-2091DDB26BA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443499/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443499/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=1&id=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) y posiblemente ejecutar código de su elección instanciando ciertos objetos Windows 2000 ActiveX COM incluyendo (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, y (4) creator.dll."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:2000_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "553C7040-9ECE-49E6-BDCC-0332245A7A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:2000_server:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FA294E0D-311B-40E8-8466-63FBDD8FCB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:2000_server:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EB69D534-6038-4547-B7E2-5FA840C59854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:2000_server:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A35703F-52A0-4D81-8807-4DDA0525A221"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:2000_server:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9437E8-5174-443D-8B63-ECDBFC5210F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:advanced_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2E683F-73A6-4A6E-8397-33723DD7D2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:advanced_server:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "69D0C8BE-7D47-4D00-97E0-B6DC592869E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:advanced_server:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE05474-2770-41D5-837D-F3C82339117C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:advanced_server:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "C47A03EA-E084-4B88-8773-D1983A1D7461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:advanced_server:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D1B206-AF93-4FF2-BF5A-E4200461F3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_server:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C0007B-BA9C-4F09-87EF-6FF1467EB0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_server:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "674BF239-9A20-4DE0-AE16-35AFA53F02A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_server:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "85F8C7B3-E5F8-4A48-A5E7-D8E9326B6D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_server:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "D340FE0B-4A20-4DF6-B4D2-C2E61EC2802E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_server:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "29DAB69E-096D-44BB-9B21-DD95CE9DFB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:professional:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810F8F74-4E89-409D-9D40-318B3590EC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:professional:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "842FBB47-E16D-452E-A3C7-FEAD9977F017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:professional:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "B94E5DAA-0970-460D-94A9-5C407E34C4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:professional:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F07665-1C59-438C-AFF8-58C76681CB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:professional:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "E14908DD-3C61-4F33-BCB4-6C2E57C87DA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443896/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443896/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script or HTML via the comment parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en comments.php en IwebNegar 1.1 permite a atacantes remotos inyectar secuencias de comandos o HTML de su elección mediante el parámetro comment."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwebnegar:iwebnegar:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7A1ED5-273A-4EB1-BD7C-E5CD05381C23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444744/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444744/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en comments.php en IwebNegar 1.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iwebnegar:iwebnegar:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7A1ED5-273A-4EB1-BD7C-E5CD05381C23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444744/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19757",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444744/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en sommaire_admin.php en PhpAlbum (mod_phpalbum) 2.15 para PortailPHP permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro chemin, un vector diferente que CVE-2006-3922."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpalbum.net:phpalbum:0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72467AA9-001F-489F-ACE8-41D9E0C67E3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444684/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444684/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ModernBill 5.0.4 and earlier uses cURL with insecure settings for CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST that do not verify SSL certificates, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack."
      }, {
        "lang" : "es",
        "value" : "ModernBill 5.0.4 y anteriores usan cURL con configuración insegura para CURLOPT_SSL_VERIFYPEER y CURLOPT_SSL_VERIFYHOST que no verifica certificados SSL, lo cual permite a atacantes remotos leer el tráfico de la red mediante una ataque man-in-the-middle (MITM)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moderngigabyte:modernbill:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.4",
            "matchCriteriaId" : "E9D63A58-01C4-4D7A-BA7B-D38B75ACA53C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.justinsamuel.com/security-vulnerabilities/12/vulnerability-modernbill-insecure-curl-settings",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.justinsamuel.com/security-vulnerabilities/12/vulnerability-modernbill-insecure-curl-settings",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) about, (2) again, (3) lastname, (4) email, (5) password, (6) album, (7) id, (8) table, (9) desc, (10) doc, (11) mname, (12) max, (13) htpl, (14) pheader, and possibly other parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en ezPortal/ztml CMS 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) about, (2) again, (3) lastname, (4) email, (5) password, (6) album, (7) id, (8) table, (9) desc, (10) doc, (11) mname, (12) max, (13) htpl, (14) pheader, y posiblemente otros parámetros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ztml:ezportal_ztml_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED5F38B-0185-4313-8941-E2E649A5BBC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) about, (2) album, (3) id, (4) use, (5) desc, (6) doc, (7) mname, (8) max, and possibly other parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en ezPortal/ztml CMS 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) about, (2) album, (3) id, (4) use, (5) desc, (6) doc, (7) mname, (8) max, y posiblemente otros parámetros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ztml:ezportal_ztml_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED5F38B-0185-4313-8941-E2E649A5BBC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19759",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ezPortal/ztml CMS 1.0 allows remote attackers to bypass authentication controls via a direct request to the \"Administration Area\" script."
      }, {
        "lang" : "es",
        "value" : "ezPortal/ztml CMS 1.0 permite a atacantes remotos evitar controles de autenticación mediante una petición directa a la secuencia de comandos \"Área de Administración\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ztml:ezportal_ztml_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED5F38B-0185-4313-8941-E2E649A5BBC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19759",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in link.php in NX5Linx 1.0 allows remote attackers to read arbitrary files via the logo parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en link.php en NX5Linx 1.0 permite a atacantes remotos leer ficheros de su elección mediante el parámetro logo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nx5:nx5linx:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FAD204-082A-49F7-965D-3BFEDAE742A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/138/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445916/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/138/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445916/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c and (2) l parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en NX5Linx 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) c y (2) l."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nx5:nx5linx:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FAD204-082A-49F7-965D-3BFEDAE742A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/138/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445916/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/138/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445916/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en links.php en NX5Linx 1.0 permite a atacantes remotos inyectar cabeceras HTTP de su elección y dirigir ataques de división de respuestas HTTP mediante una secuencia CRLF en el parámetro url."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nx5:nx5linx:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FAD204-082A-49F7-965D-3BFEDAE742A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.evuln.com/vulns/138/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445916/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.evuln.com/vulns/138/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445916/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the \" (quote) and \\ (backslash) characters and eval injection."
      }, {
        "lang" : "es",
        "value" : "idmlib.sh en nxdrv en Novell Identity Manager (IDM) 3.0.1 permite a usuarios locales ejecutar órdenes de su elección mediante vectores no especificados, posiblemente implicando los caractéres \" (comillas) y \\ (contrabarra) en una inyección de 'eval'."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97268D6-952C-4D63-A34E-18583925718B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016741",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974299.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19688",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1016741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974299.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "evaluatorSolution" : "The vendor has released a patch to address this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the TIFF viewer (possibly libTIFF) in the Photo Viewer in the Sony PlaystationPortable (PSP) 2.00 through 2.80 allows local users to execute arbitrary code via crafted TIFF images. NOTE: due to lack of details, it is not clear whether this is related to other issues such as CVE-2006-3464 or CVE-2006-3465."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el visor RIFF (posiblemente libTIFF) en el Visor de Fotografías en la Sony Playstation Portable (PSP) 2.00 a 2.80 permite a usuarios locales ejecutar código de su elección mediante imágenes TIFF creadas artesanalmente. NOTA: debido a la falta de detalles, no está claro si está relacionada con otras vulnerabilidades como CVE-2006-3464 o CVE-2006-3465."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B7B3CA-BC2C-4EE5-85D4-DEF315AE4C1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B71982B-0217-4E9C-A6BF-2414EC874FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F0F385-EFD5-4CA7-B81A-9D9E35D47B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD8A169-63E6-48F4-AADD-87AC8EA4504D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC11E59-9FF4-49F9-AE27-37664C2D5EF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C06FD4-8C74-4CBD-8A68-924097A0803C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464F161B-2525-4F2F-8987-F52C1490E16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87397BDF-FDB9-4627-A246-B364EEAF867B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sony:playstation_portable:2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E4947F-B049-4F81-A0EF-CFC2AB907712"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://noobz.eu/content/home.html#280806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21672",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://noobz.eu/content/home.html#280806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-08-31T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service (flood) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en (1) Tor 0.1.0.x anteriores a 0.1.0.18 y 0.1.1.x anteriores a 0.1.1.23, y (2) ScatterChat anterior a 1.0.2, permite a atacantes remotos operando un \"nodo de entrada\" en la red Tor encaminar tráfico Tor de su elección a través de clientes o causar una denegación de acceso (inundación) mediante vectores no especificados.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scatterchat:scatterchat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "5A31047A-47A2-4D8D-B5C3-ABBB213FB0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B8A291-E1F7-444F-8C5B-C3C38541B3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24581D9F-02AF-42E6-A3D7-9CAD43E26477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B978E3E-69D7-46BD-BD88-1409A546FF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FED829-128A-4F87-9838-AD0C9C11E458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A39B543-5978-46FC-AF85-D635D87E3B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803498D9-C750-4D16-8ADF-2F98E71888A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04309D4-FEA8-47EA-BB9A-8CBD341B475F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8607F3C9-F185-4B87-8A1B-B9495A4F244D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667201BB-5FDA-4E51-B865-0AF8507DBCDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5662F3D8-754D-43E3-8EE0-3DF4B0180E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F0F837E-12E5-4332-9823-8B1F764042E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF80379-BD68-4E3B-A7CC-57B51619A0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DAA48C-4B3B-4665-87AB-38ACFD6C757C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CF2822-88B6-41F2-B10A-A8B09B27245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B300C56E-7DF5-4B24-84D1-A4732515325E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13846571-C84A-43D6-9970-444E6B4DB0C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EB5E0E-EAF1-41C1-808D-BD1ABDE8110D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D881C4-0302-44E9-A3C5-A23EFD681B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8219F1A-D6F5-4D6E-B10D-4C455073520C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB37BCB-63F0-4CC7-B98D-7048D3E18BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB701014-7980-4BBE-8BD9-3FD2A0AF6941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68C31D4-9478-4EB6-B160-E9970ADA785D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "872F7B10-30EA-4945-99BC-9EC1C09D6D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBC3EFD-7F03-4DC1-988C-22007216F9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7898C5-9450-41FD-B45D-7504D97B4CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A247E8-F22B-4639-96D2-9BC01C904D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1233504-041A-454E-9F2E-6E2A4207879D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C113-6A7B-4152-8EBA-87A2B64D0F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342D2B8A-A832-4CAB-9389-93764B0DE241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D44F099-7BC3-45C4-9DB3-03A7E40BC548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A79A0CD-7B81-417E-8DE3-0D61006003FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.seul.org/or/announce/Aug-2006/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21708",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21725",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scatterchat.com/advisories/2006-02_tech.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19785",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.seul.org/or/announce/Aug-2006/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.scatterchat.com/advisories/2006-02_tech.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulenrability is addressed in the following product release:\r\nTor, Tor, 0.1.1.23, and later\r\nScatterchat, Scatterchat, 1.0.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en dtterm en IBM AIX 5.2 y 5.3 permite a usuarios locales ejecutar código de su elección con privilegios de root a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17EECCCB-D7D1-439A-9985-8FAE8B44487B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21673",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service (crash) via a CRLF sequence in a GET request."
      }, {
        "lang" : "es",
        "value" : "La interfaz de administración basada en web en los modems y routers de la serie HomePortal y OfficePortal de 2Wire, Inc. permite a atacantes remotos provocar una denegación de servicio (caída) mediante una secuencia CRLF en una petición GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:homeportal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6F6F3D-8169-4D9C-B8F9-C138CD6F9641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:homeportal:100s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF922E0-B557-4DF8-8FAF-46D8D47933E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:homeportal:100w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179376AD-7DF3-4741-8644-C2B0B4AD7601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:homeportal:1000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F85FA3-744D-4197-AB65-75E0E25B5435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:homeportal:1000s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D13D75-7211-48C9-9EFB-4094812CC299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:homeportal:1000sw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C28D41-480D-484C-91A8-59CBF20FA960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:homeportal:1000w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "958F3933-5DD6-45EB-BFC9-AC2DB09E3ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:homeportal:1500w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EE4B91-334E-4122-9158-0041A6F1E7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:2wire_inc:officeportal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D456BF0C-B2F6-471D-9698-698167319400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21583",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mexhackteam.org/prethoonker/DoS_ADV_2Wire.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443906/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mexhackteam.org/prethoonker/DoS_ADV_2Wire.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443906/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameters.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en login_verif.asp en Digiappz Freekot 1.01 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) login o (2) password. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digiappz:freekot:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC70578-9513-4F15-AB77-79FCBECAA317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digiappz:freekot:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DCBADE-91ED-4F29-A7A9-5EFB6A590C13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21669",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-410.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/attach-1996-xpl_freekot.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444752/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-410.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kapda.ir/attach-1996-xpl_freekot.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444752/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CubeCart 3.0.12 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el array links."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "747E056E-91B2-4381-AEBE-C0F148FA0449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cubecart.com/site/forums/index.php?showtopic=21540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00111-08282006&",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cubecart.com/site/forums/index.php?showtopic=21540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00111-08282006&",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray[] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en includes/content/viewCat.inc.php en CubeCart 3.0.12 y anteriores, cuando register_globales está activado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro searchArray[]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "747E056E-91B2-4381-AEBE-C0F148FA0449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cubecart.com/site/forums/index.php?showtopic=21540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00111-08282006&",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cubecart.com/site/forums/index.php?showtopic=21540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00111-08282006&",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is disabled, uses an insufficiently restrictive regular expression to validate the gateway parameter, which allows remote attackers to conduct PHP remote file inclusion attacks."
      }, {
        "lang" : "es",
        "value" : "includes/content/gateway.inc.php en CubeCart 3.0.12 y anteriores, cuando magic_quites_gpc está desactivado, usa una expresión regular insuficientemente restrictiav para validar el parámetro gateway, lo que permite a atacantes remotos llevar a cabo ataques de inclusión remota de archivos en PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:3.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCEA31F-1A28-4254-B749-38226F448696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cubecart.com/site/forums/index.php?showtopic=21540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21659",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00111-08282006&",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cubecart.com/site/forums/index.php?showtopic=21540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00111-08282006&",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in test.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en membrepass 1.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML mediante (1) el parámetro recherche en recherchemembre.php y (2) el parámetro email en test.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:membrepass:membrepass:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA51B36E-7DE7-4137-ACA7-AD0DC22B2238"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/advisories/09290806.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21715",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444845/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/advisories/09290806.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444845/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL commands via the recherche parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en recherchemembre.php en membrepass 1.5 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro recherche."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:membrepass:membrepass:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA51B36E-7DE7-4137-ACA7-AD0DC22B2238"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/advisories/09290806.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21715",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444845/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/advisories/09290806.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444845/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección directa de código estático en include/change.php en membrepass 1.5 permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro aifon, el cual es inyectado en include/variable.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:membrepass:membrepass:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA51B36E-7DE7-4137-ACA7-AD0DC22B2238"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21715",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444845/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444845/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en lib/config.php en Pheap CMS 1.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro lpref."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bare_concept_media:pheap_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "E143E2E3-7586-49EA-A726-9C893E8E6153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://pheap.barekoncept.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444882/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19775",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pheap.barekoncept.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444882/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The vendor has released version 1.3 to address this issue."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en articles/article.php en Yet Another Community System (YACS) CMS 6.6.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro context[path_to_root]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bernard_pacques:yet_another_community_system_cms:6.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F899D4D-34FE-4CE5-8204-E29DD786DFA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21680",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016775",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.yetanothercommunitysystem.com/yacs/articles/view.php/1664",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.yetanothercommunitysystem.com/yacs/articles/view.php/1664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-01T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the _PX_config[manager_path] parameter to (1) articles.php, (2) categories.php, (3) news.php, (4) prefs.php, (5) sites.php, (6) subtypes.php, (7) users.php, (8) xmedia.php, (9) frontinc/class.template.php, (10) inc/lib.text.php, (11) install/index.php, (12) install/upgrade.php, and (13) tools/htaccess/index.php.  NOTE: other vectors are covered by CVE-2006-3562, CVE-2006-2645, and CVE-2006-0725."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión de fichero PHP en Plume CMS 1.0.6 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante el parámetro  _PX_config[manager_path] en (1) articles.php, (2) categories.php, (3) news.php, (4) prefs.php, (5) sites.php, (6) subtypes.php, (7) users.php, (8) xmedia.php, (9) frontinc/class.template.php, (10) inc/lib.text.php, (11) install/index.php, (12) install/upgrade.php, and (13) tools/htaccess/index.php. NOTA: otros vectores se tratan en CVE-2006-3562, CVE-2006-2645, y CVE-2006-0725.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plume-cms:plume_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "B3381BC6-FBBA-4A8A-A695-716FA41B1017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plume-cms:plume_cms:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39A16986-E49C-438B-8773-170FB4BFD8DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0608-exploits/plume-1.0.6.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0608-exploits/plume-1.0.6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4339",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-05T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1."
      }, {
        "lang" : "es",
        "value" : "OpenSSL en versiones anteriores a 0.9.7, 0.9.7 en versiones anteriores a 0.9.7k y 0.9.8 en versiones anteriores a 0.9.8c, cuando usa una clave RSA con exponente 3, elimina relleno PKCS-1 antes de generar un hash, lo que permite a atacantes remotos falsificar una firma PKCS #1 v1.5 que está firmada por dicha clave RSA e impide a OpenSSL verificar correctamente los certificados X.509 y otros que utilizan PKCS #1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.7",
            "matchCriteriaId" : "118A4D99-B8CC-4276-BB72-4C384B16585D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D983EC-61B0-4FD9-89B5-9878E4CE4405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4C5F05-BC0B-478D-9A6F-7C804777BA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F417A1-5D97-4BC4-8B97-5AC40236DA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDB5A09-BE86-4352-9799-A875649EDB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6231CAA-00A8-41CE-8436-B84518014CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A70AD93B-E876-4EAB-9970-752D42E15E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03FA9C0-24C7-46AC-92EC-7834BC34C79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "716ADA01-38B8-4C15-A3BB-D9688DA30599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73326F7-7DCE-4EDE-95D7-AE7AED263A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4742C-A983-4F00-B24F-AB280C0E876D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2D251C-9C45-4EFE-8262-E88AB7CE713A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6D81E175-E698-40EF-9601-425893FFB1FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0F25B7-A172-4300-8718-112E817A6165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0628DF-3A4C-4078-B615-22260671EABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "52B1BE89-BAE0-4656-943B-B9B81D9B54B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D097222B-ED20-459C-9167-55751FA2C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "86DDC8F2-7920-4A73-927E-562C89806972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962FCB86-15AD-4399-8B7D-EC1DEA919C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180D07AE-C571-4DD6-837C-43E2A946007A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90789533-C741-4B1C-A24B-2C77B9E4DE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1520065B-46D7-48A4-B9D0-5B49F690C5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494E48E7-EF86-4860-9A53-94F6C313746E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2636B92E-47D5-42EA-9585-A2B84FBE71CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E79A05-64F3-4397-952C-A5BB950C967D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98693865-2E79-4BD6-9F89-1994BC9A3E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6476506-EC37-4726-82DC-D0E8254A8CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C81EF3D-4DB7-4799-9670-8D79E28CA184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8116A66-175C-4E6D-9A9B-D54C1D97D213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382C1679-DA1D-4FA4-9D5E-B86CC5052D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4EA988-FC80-4170-8933-7C6663731981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F53B-24A1-4877-B16E-F1917C4E4E81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/238",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN51615542/index.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bind-announce&m=116253119512445&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21709",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21767",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21776",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21778",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21785",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21812",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21846",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21870",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21930",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21982",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22161",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22226",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22232",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22325",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22446",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22509",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22513",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22545",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22585",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22689",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22711",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22733",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22932",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22934",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22938",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22948",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22949",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23455",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24099",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25284",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25399",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/26893",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/28115",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38567",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/38568",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/41818",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/60799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-05.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-18.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2127.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2128.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2137.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845620",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_55_ssl.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_61_opera.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openbsd.org/errata.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2006-4339.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060905.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/search/supsearch.dml?index=845",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/28549",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0661.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0062.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0072.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0073.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445231/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445822/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450327/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19849",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/28276",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.sybase.com/detail?id=1047991",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-339-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1173",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/player/doc/releasenotes_player.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/server/doc/releasenotes_server.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3453",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3730",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3793",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4205",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4206",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4216",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4586",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4744",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/5146",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0254",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1815",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1945",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2163",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2315",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4224",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0905/references",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28755",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1633",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-616",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dev2dev.bea.com/pub/advisory/238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=307177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvn.jp/en/jp/JVN51615542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bind-announce&m=116253119512445&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/38568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/41818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/60799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-18.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2127.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2128.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2137.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_55_ssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_61_opera.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openoffice.org/security/cves/CVE-2006-4339.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060905.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.opera.com/support/search/supsearch.dml?index=845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0661.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0062.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0072.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445231/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445822/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450327/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/28276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sybase.com/detail?id=1047991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-339-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/player/doc/releasenotes_player.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/server/doc/releasenotes_server.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/5146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/4224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0905/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2010/0366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Vulnerable.  This issue affects OpenSSL and OpenSSL compatibility packages in Red Hat Enterprise Linux 2.1, 3, and 4.  Updates, along with our advisory are available at the URL below.\nhttp://rhn.redhat.com/errata/RHSA-2006-0661.html\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-05T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Word 2000, 2002 y Office 2003 permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario a través de vectores no especificados involucrando un archivo manipulado que resulta de una pila mal formada, como explotado por malware con nombres que incluyen Trojan.Mdropper.Q, Mofei y Femo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "716DDA05-D094-4837-852C-0511CDDD5ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B3099E-DFA0-4C7E-B016-370028BF8387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "43AE142C-E7AD-418E-BA9B-887285EE9620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:sr1:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "23E6544C-3695-45E6-A8AD-2F3A3B574915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.securiteam.com/?p=586",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21735",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016787",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.microsoft.com/kb/925059",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vil.mcafeesecurity.com/vil/content/v_119055.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/806548",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/925059.mspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28539",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445162/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445285/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445381/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19835",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-090219-2855-99",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3448",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28775",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A578",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://blogs.securiteam.com/?p=586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.microsoft.com/kb/925059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vil.mcafeesecurity.com/vil/content/v_119055.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/806548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/925059.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445162/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445285/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445381/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-090219-2855-99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-05T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the podpis parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de inyección SQL en module/rejestracja.php en CMS Frogss 0.4 y anteriores permite a un atacante remoto ejecutar comandos SQL a través del parámetro podpis."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms_frogss:cms_frogss:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC542E0C-6497-437B-9A71-BDDAF92A25C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secwatch.org/advisories/1015206/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19727",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secwatch.org/advisories/1015206/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-05T18:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a \"network breakin\" event, which allows local users to obtain passwords by reading the file."
      }, {
        "lang" : "es",
        "value" : "NET$SESSION_CONTROL.EXE en DECnet-Plus en OpenVMS ALPHA 7.3-2 y Alpha 8.2 escribe una contraseña a un fichero de registro de monitorización cuando hay una conexión con éxito tras un evento de \"interrupción de red\", lo cual permite a usuarios locales obtener contraseñas mediante la lectura del archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dec:dec_openvms_alpha:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74606F90-96BE-4F12-8427-322A3109ACB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dec:dec_openvms_alpha:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBD176E-D8F5-46F9-835C-75588C9B6A24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/AXP_DNVOSIECO02-V82.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21705",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19783",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3423",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/AXP_DNVOSIECO02-V82.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-05T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries."
      }, {
        "lang" : "es",
        "value" : "Linux kernel 2.6.17 y anteriores, cuando se ejecuta sobre plataformas IA64 or SPARC, permite a un usuario local provocar denegación de servico (caida) a través de un archivo mal formado ELF que dispara mapas de memoria que limita esa región de cruzada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2006/9/4/116",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/33280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=8833ebaa3f4325820fe3338ccf6fae04f6669254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-1049.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0787.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-347-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lkml.org/lkml/2006/9/4/116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/33280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=8833ebaa3f4325820fe3338ccf6fae04f6669254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-1049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0787.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-347-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-05T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "(1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attackers to bypass security restrictions and obtain sensitive information via the ticket parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "(1) includes/widgets/module_company_tickets.php y(2) includes/widgets/module_track_tickets.php Client Support Center en Cerberus Helpdesk 3.2 Build 317, y posiblemente anteriores, permite a atacantes remotos evitar restricciones de seguridad y obtener información sensible a través del parámetro ticket. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814FB7BA-3759-49E4-ACAC-10F2ABC8F20B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cerberusweb.com/cvsweb.pl/support-center/cerberus-support-center/includes/widgets/module_company_tickets.php.diff?r1=1.6%3Br2=1.7%3Bf=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cerberusweb.com/cvsweb.pl/support-center/cerberus-support-center/includes/widgets/module_track_tickets.php.diff?r1=1.17%3Br2=1.18%3Bf=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.cerberusweb.com/showthread.php?t=7671",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21706",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cerberusweb.com/cvsweb.pl/support-center/cerberus-support-center/includes/widgets/module_company_tickets.php.diff?r1=1.6%3Br2=1.7%3Bf=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://cerberusweb.com/cvsweb.pl/support-center/cerberus-support-center/includes/widgets/module_track_tickets.php.diff?r1=1.17%3Br2=1.18%3Bf=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.cerberusweb.com/showthread.php?t=7671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-05T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de secuencias de comandos en sitios cruzados (XSS) en learncenter.asp en Learn.com LearnCenter permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:learn.com:learncenter:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA75B85-3775-487F-9322-A668B9726A32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21716",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001093.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444842",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19781",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001093.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-05T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected."
      }, {
        "lang" : "es",
        "value" : "RapDrv.sys en BlackICE PC Protection 3.6.cpn, cpj, cpiE, y posiblemente 3.6 y anteriores, permite a usuarios locales provocar denegación de servicio (caida) a través de un tercer argumento NULL a la función NtOpenSection API. NOTA: Posteriormente fue notificado que 3.6.cqn también se ve afectado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "AE107755-B119-44F9-BADD-A929C7B6CC73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:3.6cpie:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57807099-784E-4CA8-BA6C-BC4BF15DEDC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA7FE32-A0F1-47DD-A306-E0369093083C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iss:blackice_pc_protection:3.6cpn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B74290-75EE-48DF-8BC5-B09AD3221BDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21710",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28332",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444958/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/479830/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444958/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/479830/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-05T23:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null (\"%00\") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs."
      }, {
        "lang" : "es",
        "value" : "Webmin anterior a 1.296 y Usermin anterior a  1.226 no dirigidas adecuadamente una URL con un caracter nulo (\"%00\"), lo cual permite a un atacante remoto dirigir una secuencia de comandos de sitios cruzados (XSS), leer el código fuente del programa CGI, lista de directorios, y posiblemente ejecutar programas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.220",
            "matchCriteriaId" : "876EE957-11A6-4B93-9EE5-820FD954324F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD41B8B-72C0-411F-83E7-A82E1642FA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A99166-28DF-4651-985F-922DBB06687E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9EACC7-1464-4476-9AA1-50DD902A3489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD343610-8BE2-4916-AF30-66B21330D84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D54B4D9-5218-41F9-A701-F960199EE520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B352FF6B-989C-4540-B434-9452851F745C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83F9841-49C7-410A-891F-365BBA043D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711485C5-F16A-4481-AEE3-E2AF1BAA09DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5B9395-DCEA-4615-825E-1C4B42F25E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7162DD-DFE1-478D-B87C-28C393E20941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01D1150-FCDE-47F5-BFE6-F06A294D7B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D673B88-A9D9-4D22-9531-7F06791BC551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538021A3-2A6E-446F-B14D-4DCC7A470E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1A2A26-1187-46BE-8EFC-F3C325679245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E70B0A6-31C9-4D78-B4B9-E75B45B6368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70274C3-7CA0-49A2-B63C-7DAF492CCD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C4A319-0EA6-47E0-831A-27530DCF714E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1009D90-9851-441B-A2E2-FA5B676E8182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A3D3F-CF10-478C-9206-DB468BCA4702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B42570-F094-4C25-B246-6439D3FF4B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A30BB5-2C3F-4C39-8CDC-CC0CC280384C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753BF8DE-D225-4301-A6A6-50CD60B34234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC37A972-11D7-4C85-A8DC-5EDE808629F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7131C0-4FE1-4D69-9B21-8A9BFADE2A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.090:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499BF74-CA64-4192-A45F-0D8B30C1FF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E9BC53-C2EC-43B8-9B5D-40675CF4C335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4702AEBE-E774-4015-974C-761901D50697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC9875A-3D23-4E4B-9A18-F8F86A62E5DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AED1941-33C5-4C29-BC85-F43B0BE3920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED34F-0D69-4A4F-B59B-15437E991075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B443FCF7-5949-4084-BA55-74F45A8ADB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42C312D-82DE-48A5-9FDE-00D547A57416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.90",
            "matchCriteriaId" : "63F9D04D-D42B-47E1-B63A-BD7C943EB03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E3CF12-D0B7-4C7F-96C8-36A3FAFA8EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C808C470-F0A1-4338-A988-3968EABE78E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16685C0-94E9-4AE6-8221-1D32112808F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDACA626-1687-4192-A2E8-C74823B715A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9641C23-B30A-4CB2-A348-BD708F68F90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0852A462-22ED-422D-A454-0A6E026D9AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FEF73D-767D-4BF2-AA12-67268719A404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B5A02C-96AB-46FD-A958-86AC0DFD1F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1B8073-C512-4ACA-8E3F-92D46D63FBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B368FAD0-39A7-4115-9327-1D32BECF2F7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3D7B7A-0426-4176-A759-E96024DC492D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3EFDEE-A99B-4D0E-B6A7-E7C285A5DFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C3D4D4-246A-4287-AA42-CFDD0C1AE22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F05CF0BA-0606-42E5-A631-D302FF1D59F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A79B7B3-708A-42E4-B4EF-7746F6292DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.78:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F06BC0-0418-4A1C-BD4A-B7429A6CEA39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.79:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1817FDA9-31F4-4D4A-A867-386D2F1CDB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23522A64-FD03-4C5B-9A8A-5E7CDDC65CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD94AA9-CABA-4FC8-8367-D5D9D8B4F623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B136CA-47BF-46DE-885A-9E74EBDE5306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A3F522-6E6D-446C-8694-7AE91F19F1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB86BC7-4A99-4C5B-9460-CDDA7C4E4041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957C7CA1-DD36-409C-B7E5-01B719B4695E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0813F3-1886-481E-8822-4BD199C4934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D25A7CA-ED9D-4562-8965-D4906D1BE5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.92.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C38C77-246F-41A9-A3D5-99C2DDA1DAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F2D028-F2F9-4CE0-A24B-7DB44D488D4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EE7A9B-5688-4933-95B9-476873D44A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A57D7A-B989-4D82-B667-029A245AA6D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C664186B-DD40-490B-B2DE-4279B00102F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E1D6C5-20FE-4514-B618-312BB19E5F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5017EA5-7188-4293-9FDF-5D23DCB40B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6C5F07-330D-46C5-8A8B-8DF734F4640F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4A574A-5B2A-4769-B932-E1736564160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C644D728-1DD4-48E0-9E42-35E836006F41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9425C1F-5E6A-489A-9A8B-9156E79FEAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8347DA-13F8-40E9-B9EA-2703C049AFA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD9C3443-526E-4D68-9C7E-F3432BECE6C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C968FBE9-191A-40B1-9A69-BF24511E40B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC77E1B6-E368-4ECD-8459-69C718CE5409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89047FD-39F0-4614-B1EC-D13BAF57405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDF2120-F341-4C2E-88C1-A6C76626BFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DFC15C-3513-4E94-B46D-94FEA0D627FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E068D3-F6B5-4102-B9FA-949E2FAA33D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6BD551-EC6A-4C77-B9E7-B9CF3DC21021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B0FE2D-02BC-4081-B172-64A74389C5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43433ECE-8225-43EE-9F5E-FBB170B60CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1615ACA2-32CC-48B7-AB5A-0BB0FDA7F190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ABAE43-0EEF-44D5-AB36-44DA54290122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD33CE40-DFC9-4BDC-BF4F-9E0B268B8503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8608F5A2-B6FA-43C6-9862-43DBAF01EB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E815171B-B054-450F-A9B3-2D522161DD02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD941A62-A41E-41CB-80C0-8B780AC39FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786287DD-2565-4931-BBA0-2CACD7671352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4784DC04-D2C5-46C6-831F-23D69B4B0513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C219DAB-C13C-4232-8B98-2D7A9ED16E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88507A8-6143-4FB7-8027-EFB0C981ED8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E35C0772-8265-415F-A390-530640DB9599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2399776858/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21690",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://webmin.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/89_e.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:170",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3424",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2399776858/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://webmin.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/89_e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nWebmin, Webmin, 1.296\r\nUsermin, Usermin, 1.226"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2941",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving \"standards-breaking RFC 2231 formatted headers\"."
      }, {
        "lang" : "es",
        "value" : "Mailman anterior a 2.1.9rc1 permite a un atacante remoto provocar denegación de servicio a través de vectores no especificados que envuelven \"cabeceras formadas de estándar-rotos  RFC 2231\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D6A976-FFEA-4DB6-B002-8036E778C78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8894855-E303-4B55-B3BC-DCBE3A0AB703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3AFFFD-1BDC-4511-9DA0-56ACD337F56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1500D8-952A-46C6-920C-096760C36A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503D7346-4891-40B1-A0CD-0FACC5359431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643610C6-99A9-43C9-A8FC-463A244C08DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C53260-503F-4934-B1FE-9FACD8E0EE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C670F583-6B60-4D80-A75F-CD53FDDF27D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CBFC5-CB18-4FE4-9B4D-F3280CBCCD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA788EB3-E162-4752-984D-5601A8C6C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2571330-3239-469E-883D-8994257D0C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085C333C-E2E7-4ACD-9CC8-C37C67725954"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0600.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21732",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21792",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21837",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21879",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22011",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22020",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016808",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewvc/mailman/trunk/mailman/Mailman/Utils.py?r1=7859&r2=7923",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:165",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-345-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3446",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28732",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9912",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewvc/mailman/trunk/mailman/Mailman/Utils.py?r1=7859&r2=7923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-345-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3126",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number."
      }, {
        "lang" : "es",
        "value" : "c2faxrecv en capi4hylafax 01.02.03 permite a un atacante remoto ejecutar comandos de su elección  a través metacaracteres null(/0) y el interprete de comandos en la cadena TSU, como se demostró con un fax desde un número anónimo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:julian_pawlowski:capi4hylafax:01.02.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC3ECC6-A87A-47AC-97CF-485453207176"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=382474",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21722",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21726",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22450",
        "source" : "security@debian.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-05.xml",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1165",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_4_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19801",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3430",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=382474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-05.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_4_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3636",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Mailman anterior a 2.1.9rc1 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D6A976-FFEA-4DB6-B002-8036E778C78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8894855-E303-4B55-B3BC-DCBE3A0AB703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.1:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3AFFFD-1BDC-4511-9DA0-56ACD337F56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1500D8-952A-46C6-920C-096760C36A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503D7346-4891-40B1-A0CD-0FACC5359431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643610C6-99A9-43C9-A8FC-463A244C08DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C53260-503F-4934-B1FE-9FACD8E0EE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C670F583-6B60-4D80-A75F-CD53FDDF27D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34CBFC5-CB18-4FE4-9B4D-F3280CBCCD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA788EB3-E162-4752-984D-5601A8C6C770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2571330-3239-469E-883D-8994257D0C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085C333C-E2E7-4ACD-9CC8-C37C67725954"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0600.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21732",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21792",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21879",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22020",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22227",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-12.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016808",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1188",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:165",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445992/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20021",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-345-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3446",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28731",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10553",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445992/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-345-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned."
      }, {
        "lang" : "es",
        "value" : "BIND anterior a 9.2.6-P1 y 9.3.x anterior a  9.3.2-P1 permite a un atacante remoto provocar denegación de servicio (caida) a través de ciertas consultas SIG, lo cual provoca una falta de aserción cuando múltiples RRsets se devuelven."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2.6",
            "matchCriteriaId" : "862B3924-FB12-4851-A647-74F563ED2DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndIncluding" : "9.3.2",
            "matchCriteriaId" : "E4696610-EF54-47D8-AC5E-D7251EA40DD5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.9",
            "matchCriteriaId" : "6CE37418-3D19-483A-9ADE-2E38272A4ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0",
            "versionEndExcluding" : "10.4.9",
            "matchCriteriaId" : "C2B4D4BA-89EB-4D02-AC3E-D451CC45395F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.9",
            "matchCriteriaId" : "3E9A9D63-EEA1-4289-8382-6CC91D2241A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0",
            "versionEndExcluding" : "10.4.9",
            "matchCriteriaId" : "AD69D222-8B01-4944-A459-D3FFDCA6BBC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/21752",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21786",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21816",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21818",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21828",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21835",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21838",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21912",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21926",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-11.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016794",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/915404",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:163",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445600/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19859",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-343-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1172",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3473",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28745",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-626",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://secunia.com/advisories/21752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/21926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/915404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445600/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-343-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not Vulnerable.  The version of BIND that ships with Red Hat Enterprise Linux is not vulnerable to this issue as it does not handle signed RR records.",
        "lastModified" : "2006-09-06T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty."
      }, {
        "lang" : "es",
        "value" : "BIND anterior a 9.2.6-P1 y 9.3.x anterior a 9.3.2-P1 permite a un atacante remoto provocar denegación de servicio (caida) a través de una inundación de preguntas recurrentes, que causan una fallo de INSIST cuando se recibe la respuesta después de que la cola recursiva esté vacía."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6520F4-B203-400A-8629-8A40B739DB11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF07E87-B109-4B15-A358-7A454502E077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C9459-D526-4880-AE03-4A1558CB941F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFA05CD-0BE4-4E85-A3DE-8B3E2622159F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D43375C5-0736-43DE-99B5-B75719D0AD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4360536-0BA6-41DB-AA87-45AFB51562CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438AEC8C-DD71-4A25-9E9D-A89415F7EC83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA93166-513D-40AA-9855-FC89060BA03C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847C1017-F964-4A33-BEA8-DDB202DD0FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0D8854-64B6-42C9-B4D2-B2AF16AC0F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F95086-3107-4C38-BB3B-7BABA9BD15C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=141879471518471&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/697164",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openbsd.org/errata.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445600/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-343-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=141879471518471&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/697164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445600/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-343-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not Vulnerable.  This issue was found and fixed as part of Red Hat Enterprise Linux 4 update 4:\nhttp://rhn.redhat.com/errata/RHBA-2006-0288.html\n\nand Red Hat Enterprise Linux 3 update 8:\nhttp://rhn.redhat.com/errata/RHBA-2006-0287.html\n\nThis issue does not affect Red Hat Enterprise Linux 2.1",
        "lastModified" : "2006-09-08T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in AnywhereUSB/5 1.80.00 allows local users to cause a denial of service (crash) via a 1 byte header size specified in the USB string descriptor."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en AnywhereUSB/5 1.80.00 permite a un usuario local provocar denegación de servicio (caida) a través de una cabecera de tamaño de 1 byte especificada en el descriptor de cadena de USB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:digi_international_inc:anywhere_usb5:1.80.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A4AB1F-6C06-42A3-84C8-C91715B2E494"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21739",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.safend.com/advisories/digi_anywhereusb5_intoverflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445088/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.safend.com/advisories/digi_anywhereusb5_intoverflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445088/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the (1) game parameter in players mode, the (2) weapon parameter in weaponinfo mode, the (3) st parameter in search mode, the (4) action parameter in actioninfo mode, and the (5) map parameter in mapinfo mode."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en HLStats 1.34 permite a un atacante remoto inyectar secuencias de comandos web o HTML a tra´ves del parámetro (1) game en modo juego, (2)el parámetro st en modo búsqueda, el parámetro (3) action en el modo actioninfo, y el parámetro (5) map en modo mapinfo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hlstats:hlstats:1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7998CDD1-22DA-4591-8516-8E221CD6B9A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21635",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19771",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the exbb[home_path] parameter in files in the modules directory including (1) birstday/birst.php (2) birstday/select.php, (3) birstday/profile_show.php, (4) newusergreatings/pm_newreg.php, (5) punish/p_error.php, (6) punish/profile.php, and (7) threadstop/threadstop.php.  NOTE: the (8) modules/userstop/userstop.php vector might overlap CVE-2006-4488, although it is for a slightly different product from the same vendor."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en ExBB 1.9.1, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro exbb[home_path] en ficheros en módulos de directorio incluyendo (1) birstday/birst.php (2) birstday/select.php, (3) birstday/profile_show.php, (4) newusergreatings/pm_newreg.php, (5) punish/p_error.php, (6) punish/profile.php, y (7) threadstop/threadstop.php. NOTA: el (8) vector modules/userstop/userstop.php podría solaparse con CVE-2006-4488, aunque está solamente para un producto levemente diferente del mismo vendedor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exbb:exbb:1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A762E217-C3E8-4E68-8A1B-35B6C85FEDE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv46-matdhule-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016773",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444825/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv46-matdhule-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444825/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the _SERVER parameter in (1) admin/avatar.php, (2) libs/archive.class.php, (3) libs/login.php, (4) libs/profiles.class.php, and (5) libs/profile/proccess.php.  NOTE: CVE disputes this claim, as the _SERVER array and the _SERVER[DOCUMENT_ROOT] index are controlled by PHP and cannot be manipulated by an attacker"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDO ** Vulnerabilidad PHP de inclusión remota de archivo en ModuleBased CMS Pre-Alpha permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro _SERVER en (1) admin/avatar.php, (2) libs/archive.class.php, (3) libs/login.php, (4) libs/profiles.class.php, y (5) libs/profile/proccess.php. NOTA: CVE discute esta demanda, como el array _SERVER y el indice _SERVER[DOCUMENT_ROOT] son controlados por PHP y no pueden ser manipulados por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modulebased_cms:modulebased_cms:pre-alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7409E05-B569-4A6B-8CEC-EE72C4CBBF12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/29872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444897/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445006/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19754",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/29872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444897/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445006/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on the server, to add new administrators to any list via a modified MEMBERS_.List_ parameter."
      }, {
        "lang" : "es",
        "value" : "Lyris ListManager 8.95 permite a un usuario validado, quien tiene permisos administrativos para al menos una lista sober el servidor, para añadir nuevos administradores a cualquier lista a través del parámetro modificado MEMBERS_.List_"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73133FFC-F2D6-44FB-A0EB-B8032BE1E45D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0817.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444844/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0817.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444844/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection."
      }, {
        "lang" : "es",
        "value" : "Lyris ListManager 8.95 permite a usuarios remotos validados obtener información sensible intentando añadir usuarios con el caracter ' (comilla simple) en el nombre, lo cual revelar los detalles de la consulta SQL subrayada, posiblemente a causa de un error SQL forzado o inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73133FFC-F2D6-44FB-A0EB-B8032BE1E45D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0817.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444844/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0817.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444844/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "e107 0.75 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code via the tinyMCE_imglib_include image/jpeg parameter in e107_handlers/tiny_mce/plugins/ibrowser/ibrowser.php, as demonstrated by a multipart/form-data request.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in e107."
      }, {
        "lang" : "es",
        "value" : "e107 0.75 y anteriores no se asignan correctamente variables cuando los datos de entrada incluyen un parámetro numérico con un valor que empareja el valor del hash de un parámetro alfanumérico, lo que permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro tinyMCE_imglib_include image/jpeg en e107_handlers/tiny_mce/plugins/ibrowser/ibrowser como se demostró por una petición a multipart/form-data. NOTA: podría ser discutido que esta vulnerabilidad se deba a un fallo en la desasignación del comando de PHP (CVE-2006-3017) y el arreglo apropiado debe estar en PHP; si es así entonces esto no se debe tratar como vulnerabilidad en e107."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AB914E-D616-45D2-A451-1C247B8B6E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA03C1AC-97EA-47ED-9558-A7CA48420AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32695A82-B042-46B7-9CB4-20F3446E0C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716A040-0CBE-4402-AB2A-1621B1240B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81627355-AB45-4D47-8DD2-4087E6971EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DAAA4F-B893-4914-8538-E68DDA211225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/e107_075_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444644/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/e107_075_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444644/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php via the showsource function.  NOTE: this issue is not a vulnerability in standard distributions, but could be an issue if the source has been modified."
      }, {
        "lang" : "es",
        "value" : "CHXO Feedsplitter 2006-01-21 permite a un atacante remoto leer el código fuente de feedsplitter.php a través de la función showsource. NOTA: este asunto no es una vulnerabilidad en distribuciones estandar, pero podria ser un tema si la fuente ha sido modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chxo:feedsplitter:2006-01-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F3C2D0-D3F1-4FB1-95A8-A75D2FFC1887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444805/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444805/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading \".\", which bypasses a security check."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en CHXO Feedsplitter 21/01/2006 permite a un atacante remoto leer archivos XML de su elección a través de la secuencia .. (punto punto) en el parámetro format con una cabecera \".\", con lo que evitamos una comprobación de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chxo:feedsplitter:2006-01-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F3C2D0-D3F1-4FB1-95A8-A75D2FFC1887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444805/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444805/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to execute arbitrary PHP code via (1) the file specified as the value of the format parameter, and possibly (2) the RSS feed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección Eval en CHXO Feedsplitter 21/02/2006 permite a un atacante remoto ejecutar código PHP de su elección a través de (1) el fichero especificado como el valor del parametro de formato, y posiblemente (2) el alimentador RSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chxo:feedsplitter:2006-01-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F3C2D0-D3F1-4FB1-95A8-A75D2FFC1887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444805/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444805/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to inject arbitrary web script or HTML via the RSS feed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CHXO Feedsplitter 21/01/2006 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del alimentador RSS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chxo:feedsplitter:2006-01-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F3C2D0-D3F1-4FB1-95A8-A75D2FFC1887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444805/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444805/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en plugin.class.php en com_comprofiler Components 1.0 RC2 para Mambo y Joomla! permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_comprofiler_component:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5264CA6A-B4C3-4E48-9E88-F48B0A2C1E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:com_comprofiler_component:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE4915-9665-41AC-B089-7FC1813D46B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444425/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444425/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including (1) Tumbleweed EMF, (2) VCOM/Ontrack PowerDesk Pro, (3) Canyon Drag and Zip, (4) Canyon Power File, and (5) Canyon Power File Gold, allow context-dependent attackers to execute arbitrary code via an inconsistent size parameter in a ZOO file header."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en la función ReadFIle en la exportación ZOO-processing en BeCubed Compression Plus before 5.0.1.28, al igual que en sus productos incluidos (1) Tumbleweed EMF, (2) VCOM/Ontrack PowerDesk Pro, (3) Canyon Drag and Zip, (4) Canyon Power File, y (5) Canyon Power File Gold, permite a un atacante dependiente del contexto ejecutar código de su elección a través de un parámetro de tamaño inconsistente en una cabecera del fichero ZOO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:becubed:compression_plus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "5E698CC9-888E-40BD-A15D-58DE53D020AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.becubed.com/downloads/compfix.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.mnin.org/advisories/2006_cp5_tweed.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444881/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.becubed.com/downloads/compfix.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.mnin.org/advisories/2006_cp5_tweed.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444881/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nBeCubed, Compression Plus, 5.0.1.28"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of the control."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el control Retro64 / Miniclip CR64Loader ActiveX permite a un atacante remoto ejecutar código de su elección a través de vectores no especificados que influyen en un documento HTML que se refiere a CLSID del control."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:retro64:cr64loader_activex_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD228CA4-4B6D-47C9-B02C-0FAF79D98CE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/649289",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/649289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has stated that the product distribution does not include an index.php file.  Also, this might be related to CVE-2006-4242"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDA ** Vulnerabilidad PHP de inclusión remota de archivo en index.php en el componente JIM para Mambo and Joomla! permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path. NOTA: otro investigador ha indicado que la distribución del producto no incluye un fichero index.php. También, esto podría estar relacionado con CVE-2006-4242."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:jim_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C0C71D-0894-42AA-BFC9-69EDFB56FC2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:jim_component:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2EA807-3A5F-4D58-952D-8E569DF7FBBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/28097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443674/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444216/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443674/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444216/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter.  NOTE: another researcher has stated that an attacker cannot control the type parameter.  As of 20060901, CVE analysis concurs with the dispute"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDO ** Vulnerabilidad PHP de inclusión remota de archivo en plugins/plugins.php en Bob Jewell Discloser 0.0.4 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en parámetro type. NOTA: otro investigador ha señalado que un atacante no puede controlar el parámetro tye. En fecha 01/09/2006, el análisis de CVE concurre con el conflicto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:robert_jewell:discloser:0.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538F1192-CD09-4EAB-9FC8-A511572391AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/443466/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443522/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443710/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444074/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443466/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443522/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443710/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444074/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php."
      }, {
        "lang" : "es",
        "value" : "DeluxeBB 1.06 y anteriores, cuando trabaja sober un servidor HTTP Apache con el módulo mod_mime, permite a un atacante remoto ejecutar código PHP  de su elección a través de la actualización de archivos con extensiones dobles a través del parámetro fileupload en una acción newthread en newpost.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.06",
            "matchCriteriaId" : "D782EB87-A258-4834-BE2A-CBD140802EC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0318.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/deluxebb_106_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20135",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1492",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1843",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26485",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0318.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://retrogod.altervista.org/deluxebb_106_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/20135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/1843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter in (1) articles/populate.php, (2) categories/category.php, (3) categories/populate.php, (4) comments/populate.php, (5) files/file.php, (6) sections/section.php, (7) sections/populate.php, (8) tables/populate.php, (9) users/user.php, and (10) users/populate.php.  The articles/article.php vector is covered by CVE-2006-4532."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Yet Another Community System (YACS) CMS 6.6.1 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro context[path_to_root] en (1)articles/populate.php, (2) categories/category.php, (3) categories/populate.php, (4) comments/populate.php, (5) files/file.php, (6) sections/section.php, (7) sections/populate.php, (8) tables/populate.php, (9) users/user.php, and (10) users/populate.php.  El vector articles/article.php está cubierto por CVE-2006-4532."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bernard_pacques:yet_another_community_system_cms:6.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F899D4D-34FE-4CE5-8204-E29DD786DFA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21680",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/31301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.yetanothercommunitysystem.com/yacs/articles/view.php/1664",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/21680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/31301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.yetanothercommunitysystem.com/yacs/articles/view.php/1664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running."
      }, {
        "lang" : "es",
        "value" : "Internet Explorer 6 sobre Windows XP SP2 permite a un atacante remoto ejecutar código JavaScript de su elección en el contexto de una sesión del navegador con un servidor web intranet de su elección, a través de una secuencia de comandos de alojamiento de una web sobre un servidor web de Internet puede el atacante puede hacerlo inaccesibley tener un dominio bajo el control del atacante, lo cual puede forzar al navegador disminuir DNS que fija y realizar una nueva pregunta al DNS para el nombre de dominio después de que la secuencia de comandos esté ya funcionando."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80088A3-2AA4-44A2-98DF-359E15F8E18B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://polyboy.net/xss/dnsslurp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://shampoo.antville.org/stories/1451301/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443209/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://polyboy.net/xss/dnsslurp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://shampoo.antville.org/stories/1451301/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443209/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox 1.5.0.6 permite a un atacante remoto ejecutar código JavaScript de su elección  en el contexto de una sesión del navegador con un servidor web de intranet de su elección, a través de la secuencia de comandos del alojamiento sobre un servidor web de Internet que puede hace inaccesible a través del ataque y que tiene un nombre de dominio bajo el cotrol del atacante, lo cuál puede forzar al navegador reducir el DNS que fija y realizar una nueva pregunta al DNS para el nombre de dominio después de que la secuencia de comandos esté ya funcionando."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/31834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://polyboy.net/xss/dnsslurp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://shampoo.antville.org/stories/1451301/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443209/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/31834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://polyboy.net/xss/dnsslurp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://shampoo.antville.org/stories/1451301/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/443209/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker.  NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDO ** El servicio proxy DNS en Symantec Gateway Security (SGS) permite a un atacante remoto hacer consultas DNS de su elección a los servidores DNS de terceras personas, mientras se ocultan la dirección IP de origen del atacante. NOTA: otro investigador ha señalado que la configuración por defecto no recibe consultas proxy DNS sobre una interfaz externa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAE17C6-FD3E-4846-A706-78246B37BFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:320:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFC0BF4-56EE-414C-8D45-3D2ACCBDC03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:360:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B786C20-6C40-4DBE-AC24-D8B8E98FD6F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:360r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F65C12-9866-423F-8E59-FE905FE79043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5000_series_2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00163129-F72A-4C56-A4E4-D254ED71FB63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5000_series_3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BE5E88-1DA6-48A7-9811-97EE6582A627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E42EDB2-616D-4915-9E41-7D80F32E4901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5110_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B647CBE-35DA-404C-BC71-0C378CC5CA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1175AC-9310-4804-8FB3-2F988F55BD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5200_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB8A732-3D37-4B96-8674-E03CC3826967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF09575E-83D3-4772-816B-7D639B1C32A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5300_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F702A853-EE1C-4937-AED9-FF11EE442F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5310_1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0043B75-B1FA-48F7-B0B8-DF25CE5CED1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5400_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B413854B-9D67-4FFA-81A7-884D3F473D06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:symantec:gateway_security:5400_2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5838D7A8-80F3-4571-80BE-D4AF0AA7F4C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/444114/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444134/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444135/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444330/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444114/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444134/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444135/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444330/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the myh_op parameter to modules.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo MyHeadlines anterior a 4.3.2 para PHP-Nuke permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a trave´s del parámetro myh_op en module.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:myheadlines:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.1",
            "matchCriteriaId" : "A1FA4338-A34F-44FA-B4CC-76CBC9D715EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21653",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.jmagar.com/index.php?y=0&myh=user&myh_op=showLink&myh_link=8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28463",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19825",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.jmagar.com/index.php?y=0&myh=user&myh_op=showLink&myh_link=8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T01:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the cur_cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Sources/ManageBoards.php en Simple Machines Forum 1.1 RC3 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro cur_cat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplemachines:smf:1.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "920956A5-C343-4FCF-9BF3-F4E8C79F9993"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-09/0009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21740",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3435",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-09/0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires privileges to add a new board."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3742",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-06T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times."
      }, {
        "lang" : "es",
        "value" : "La configuración KDE PAM transportada con KDE Fedora Core 5 provoca que las contraseñas KDM se depositen, lo cual permite a un atacante remoto validarse sin una contraseña procurando abrir una sesión en múltiples tiempos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:kdebase:3.5.4_0.4.fc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7F76D4-233C-48D2-BAD4-604FFE85D3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lwn.net/Alerts/197302/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lwn.net/Alerts/197302/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/cmses/aedatingCMS.php, (2) inc/cmses/aedatingCMS2.php, or (3) inc/cmses/aedating4CMS.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en FlashChat anterior a 4.6.2 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro dir[inc] en (1) inc/cmses/aedatingCMS, (2) inc/cmses/aedatingCMS2.php, o (3) inc/cmses/aedating4CMS.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:darrens_5-dollar_script_archive:flashchat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.1_beta",
            "matchCriteriaId" : "52C43B2C-E7B6-4190-A78C-52D9DBCEEDA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21756",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445219/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tufat.com/changeLog2.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3449",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445219/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tufat.com/changeLog2.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php."
      }, {
        "lang" : "es",
        "value" : "Tr Forum 2.0 permite a un atacante remoto evitar la validación y añadir una cuenta de administrador a través de los parámetros login y password a admin/insert_admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tr_forum:tr_forum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E83DC88-E354-46FF-83EE-B6ADB2D60328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/10060903.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445079/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/10060903.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445079/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4585",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter.  NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/editer.php en Tr Forum 2.0 permite a un usuario remoto validado ejecutar comandos SQL de su elección a través del parámtro id2. NOTA: esto puede ser apalancado con otras vulnerabilidades del foro Tr permitiendo que atacantes no validados puedan ganar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tr_forum:tr_forum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E83DC88-E354-46FF-83EE-B6ADB2D60328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/10060903.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21754",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445079/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/10060903.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445079/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modif_profil.php, and changing a password via /membres/change_mdp.php.  NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges."
      }, {
        "lang" : "es",
        "value" : "El panel de administración en Tr Forum 2.0 acepta un hash para el nombre de usuario y contraseña para su validación, lo cual permite que un usurio remoto validado realizar acciones para las que no estaba autorizado, según lo demostrado en la modificación de los ajustes del usuario a través del parámetro id a /membres/modif_profil.php, y cambiando la contraseña /membres/change_mdp.php. NOTA: esto puede ser acoplado con otras vulnerabilidades de Tr Forum que permiten a atacantes no validados escalar privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tr_forum:tr_forum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E83DC88-E354-46FF-83EE-B6ADB2D60328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/10060903.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445079/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/10060903.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445079/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) description parameter in unspecified modules or the (2) solution parameter in the HelpDesk module."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en vtiger CRM 4.2.4, y posiblemente anteriores, permitem a un atacante remoto inyectar secuencias de comandos web o HTML a través del (1) parámetro description en modulos no especificados o el (2) parámetro solution en el modulo HelpDesk."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B3F151-0398-42C7-B194-FF528696D1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57840915-C75E-4D62-A017-E60DD1396D34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-net.biz/adv/D3906a.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-net.biz/adv/D3906a.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modules via a direct request to index.php with a modified module parameter, as demonstrated using the Settings module."
      }, {
        "lang" : "es",
        "value" : "vtiger CRM 4.2.4, y posiblemente anteriores, permiten a un atacante remoto evitar la validación y acceder a modulos de administración a través de una pregunta directa a index.php con un parámetro modificado de modulo, como se demostró con el uso del módulo Settings."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B3F151-0398-42C7-B194-FF528696D1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57840915-C75E-4D62-A017-E60DD1396D34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21728",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-net.biz/adv/D3906a.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19829",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-net.biz/adv/D3906a.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the x_admindir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en 0_admin/modules/Wochenkarte/frontend/index.php en DynCMS 6 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro x_admindir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dyncms:dyncms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "5A8611FB-C7C1-4F54-846E-9F6F6F85ABBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21729",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445264/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19846",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445264/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2006-4463.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/default.asp en Jetstat.com JS ASP Faq Manager 1.10 y anteriores, permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro uid, un vector diferente que CVE-2006-4463. NOTA: el origen de esta información es desconocida; los detalles se obtuvieron a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetstat.com:js_asp_faq_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10",
            "matchCriteriaId" : "DC60B0CF-5AE2-4FFF-ACF9-CF559797AB06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21674",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28266",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP code via a URL in the config[template_path] parameter to (1) payment/payment_result.php or (2) /payment/spuser_result.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en AlstraSoft Template Seller, y posiblemente AltraSoft Template Seller Pro 3.25, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro config[template_path] a (1) payment/payment_result.php o (2) /payment/spuser_result.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:template_seller:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2E4E67C-0DC0-461A-B90C-B736DE9A47DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:template_seller:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "0787BDCE-97DE-4D4A-B985-8854774A71BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:template_seller:3.25:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "77E3C762-3CFC-402A-AEC6-B6FCE85DEDB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445156/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445156/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via \">\" characters in the id parameter, which are not filtered by the protection mechanism."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lista negra incompleta en default.asp en 8pixel.net Simple Blog 2.3 y anteriores permite a un atacante remoto dirigir ataques de inyección SQL a través de los caracteres \">\" en el parámetro id, lo cual no está filtrado por un mecanismo de protección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:8pixel.net:simple_blog:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C72878-B103-4D23-83E2-AD084E9397B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:8pixel.net:simple_blog:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E89355-BE7C-4E40-946C-83CECED23DB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:8pixel.net:simple_blog:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8D5F63-A259-49B9-94E0-BBB4432AB63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:8pixel.net:simple_blog:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "907F1976-EA33-418C-AD70-9184C8BA8A0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21755",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19848",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en SoftBB 0.1 y anteriores permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbb:softbb:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05110C80-F435-4922-BA23-F2D84ACED87D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445157/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19847",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445157/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-06T22:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the include_location parameter in (1) confirm.php or (2) login.php.  NOTE: the include_location parameter to index.php is already covered by CVE-2005-1681."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en PHP Advanced Transfer Manager (phpAtm) 1.21 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro include_location en (1)onfirm.php o (2) login.php. NOTA: el parámetro include_location a index.php está actualmente cubierta por CVE-2005-1681."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "D608692D-18F4-40DB-8F0A-6F359825B7D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8587D302-C1C5-4C47-A1F4-87F1B344D0D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "muforum (µforum) 0.4c stores membres/members.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes."
      }, {
        "lang" : "es",
        "value" : "muforum (?forum) 0.4c almacena membres/members.dat bajo el root del documento web con un control de acceso insuficiente, lo que permite que los atacantes remotos obtengan información sensible como nombres de usuario y hashes de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muforum:muforum:0.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE33BE13-09C0-475E-AB5B-B891075D5614"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/08060901.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21742",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445001/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3445",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://acid-root.new.fr/poc/08060901.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445001/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion in MyBace Light Skrip, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) hauptverzeichniss parameter in includes/login_check.php and the (2) template_back parameter in admin/login/content/user_daten.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en MyBace Light Skrip, cuando register_globals esté activo, permite a un atacante remoto ejecutar código PHP de su elección a través de parámetro (1) hauptverzeichniss en includes/login_check.php y el parámetro (2) template_back en admin/login/content/user_daten.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybace_light:mybace_light:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771A0D0C-63CB-49A5-B2B6-EB2A1BEE32EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21746",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/384/org/MyBace_Light_%28hauptverzeichniss%29_Remote_File_Inclusion.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445185/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/384/org/MyBace_Light_%28hauptverzeichniss%29_Remote_File_Inclusion.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445185/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the YID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en devam.asp en ICBlogger 2.0 y anterores permite a un atacante remoto ejecutar comandos SQL de su elección través del parámetro YID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icblogger:icblogger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "D8CF275A-903F-4566-8FC4-59A2FB5EC4F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21741",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445002/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445002/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) go parameter and (2) id parameter in a rate action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en links.php en ssLinks 1.22 permite a un atacante remoto ejecutar comandos SQL de su elección a través de (1) el parámetro go y (2) el parámetro id en un tipo de acción."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sslinks:sslinks:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5944BC7-B43E-4236-AC55-24773F1B3227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21736",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447319/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19815",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in aut_verifica.inc.php in Autentificator 2.01 allows remote attackers to execute arbitrary SQL commands via the user parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en aut_verifica.inc.php en Autentificator 2.01 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autentificator:autentificator:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992245C1-9FBF-4502-AF88-518EF38B044C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21737",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445008/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19813",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445008/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN)."
      }, {
        "lang" : "es",
        "value" : "slapd en OpenLDAP anterior a 2.3.25 permite a un atacante remoto validar a usuarios con privilegios del Access Control List del selfwrite (ACL) para modificar los Distinguished Names (DN) de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28E643F8-005A-4170-8275-8E4AB5C25209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A34C63-C17D-4026-B409-AA9A56529B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA863B0-A6AB-44BD-84E8-B6C885EFFE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24BFAEC7-6256-4B8F-83F5-60FBD1571936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83227371-ACC3-4217-BFF9-0A3AAADD50DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21721",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/27706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200711-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-232.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4587",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openldap.org/lists/openldap-announce/200608/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openldap.org/software/release/changes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0310.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0430.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447395/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19832",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200711-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-232.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openldap.org/lists/openldap-announce/200608/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openldap.org/software/release/changes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0310.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0430.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447395/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205826\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThe risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 which is in maintenance mode.",
        "lastModified" : "2007-09-05T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Annuaire 1Two 2.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:annuaire:1two:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB25ECB-AF17-430F-9A30-50266735D3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/09060902.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21734",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19817",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/09060902.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath parameter that contains a filename with a .php extension, which is uploaded to the img/wiki/ directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de actualización de fichero no restringida en jhot.php en TikiWiki 1.9.4 Sirius y anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro filepath que contiene un nombre de fichero con una extensión .php, lo cual es actualizado en el directorio img/wiki/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175D43FD-450F-443E-831B-B8091BE7054F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.php?storyid=1672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21733",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22100",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-16.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tikiwiki.org/tiki-read_article.php?articleId=136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19819",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3450",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-16.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tikiwiki.org/tiki-read_article.php?articleId=136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorComment" : "Per: http://cwe.mitre.org/data/definitions/434.html\r\n'CWE-434: Unrestricted Upload of File with Dangerous Type'"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NCH Swift Sound Web Dictate 1.02 allows remote attackers to bypass authentication via a null password."
      }, {
        "lang" : "es",
        "value" : "NCH Swift Sound Web Dictate 1.02 permite a atacantes remotos evitar la autenticación mediante una contraseña nula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nch_software:swift_sound_web_dictate:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F689693C-3E2C-42FE-9648-60EC4A322443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001086.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445085/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001086.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445085/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in LFXlib/access_manager.php in Lanifex Database of Managed Objects (DMO) 2.3 Beta and earlier allows remote attackers to execute arbitrary PHP code via the _incMgr parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en LFXlib/access_manager.php en Lanifex Database of Managed Objects (DMO) 2.3 Beta y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro _incMgr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lanifex:lanifex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3_beta",
            "matchCriteriaId" : "8A6DF15B-761E-4DE7-982F-EE05DD38BBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lanifex:lanifex:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A60F2BE-89F0-4798-A7C0-529DA4AC4B98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19773",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to execute arbitrary PHP code via the adodb parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en Longino Jacome php-Revista 1.1.2 permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro adodb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:longino:jacome_php-revista:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E9B7DB-DA58-4192-8F92-F555247FABB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-April/002167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502637/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-April/002167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502637/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) id_temas parameter in busqueda_tema.php, the (2) cadena parameter in busqueda.php, the (3) id_autor parameter in autor.php, the (4) email parameter in lista.php, and the (5) id_articulo parameter in articulo.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Longino Jacome php-Revista 1.1.2 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro (1) id_temas en busqueda_tema.php, el parámetro (2) cadena en busqueda.php, el parámetro (3) id_autor en autor.php, el parámetro(4) email en lista.php, y el parámetro (5) id_articulo en articulo.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:longino:jacome_php-revista:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E9B7DB-DA58-4192-8F92-F555247FABB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21738",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-April/002167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502637/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/23079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-April/002167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502637/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/23079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting the ID_ADMIN and SUPER_ADMIN parameters to 1."
      }, {
        "lang" : "es",
        "value" : "admin/index.php en Longino Jacome php-Revista 1.1.2 permite a atacantes remotos evitar controles de autenticación estableciendo los parámetros ID_ADMIN y SUPER_ADMIN a 1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:longino:jacome_php-revista:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E9B7DB-DA58-4192-8F92-F555247FABB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-April/002167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502637/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-April/002167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502637/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cadena parameter in busqueda.php and the (2) email parameter in lista.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Longino Jacome php-Revista 1.1.2 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro (1)cadena en busqueda.php y el parámetro(2) email en lista.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:longino:jacome_php-revista:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E9B7DB-DA58-4192-8F92-F555247FABB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-April/002167.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445007/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502637/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2009-April/002167.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/502637/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/8425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in the Content Management module (\"Content manager\") for PHProjekt 0.6.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the path_pre parameter in (1) cm_lib.inc.php, (2) doc/br.edithelp.php, (3) doc/de.edithelp.php, (4) doc/ct.edithelp.php, (5) userrating.php, and (6) listing.php, a different set of vectors than CVE-2006-4204.  NOTE: a third-party researcher has disputed the impact of the cm_lib.inc.php vector, stating that it is limited to local file inclusion. CVE analysis as of 20060905 concurs, although use of ftp URLs is also possible. The remaining five vectors have also been disputed by the same third party, stating that the path_pre variable is initialized before it is used"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDA ** Múltiples vulnerabilidades PHP de inclusión remota de archivo en el Content Management module (\"Content manager\") para PHProjekt 0.6.1, cuando register_globals está habilitado, permie a un atacante remoto ejecutar código PHP de su elección a través del parámetro  path_pre en  (1) cm_lib.inc.php, (2) doc/br.edithelp.php, (3) doc/de.edithelp.php, (4) doc/ct.edithelp.php, (5) userrating.php, y (6) listing.php, un grupo diferente de vectores que CVE-2006-4204. NOTA: un tercer investigador ha discutido sobre el impacto del vector de cm_lib.inc.php, indicando que está limitado a la inclusión local del archivo. El análisis de CVE en fecha 05/09/2006 concurre que: aunque el uso de ftp URLs es también posible. Los cinco vectores restantes también han sido discutidos por terceros, indicando que la variable del path_pre está inicializada antes de que se utilice."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpprojekt:phpprojekt:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30064CE0-50EA-4881-B34F-FA6774102096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444076/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444220/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444076/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444220/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en GrapAgenda 0.11 y anteriores, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphiks:grapagenda:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11",
            "matchCriteriaId" : "E02CA266-EAAB-42CC-8689-6667DC1349A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21775",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445176/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445176/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long node name."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función _tor_resolve en dsocks.c en dsocks anterior a 1.4 permite a un atacante remoto ejecutar código a través de vectores no especificados, posiblemente cubra un nombre largo de nodo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dsocks:dsocks:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "FD3B7795-9F6F-4E1F-94AB-B4F5657B04A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049258.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21771",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.monkey.org/~dugsong/dsocks/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445200/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19852",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049258.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.monkey.org/~dugsong/dsocks/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445200/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nDsocks, Dsocks, 1.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ReplyNew.asp en ZIXForum 1.12 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro RepId."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_andersson:zixforum:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA289DF-AFAB-4782-BCAF-C5E10423F046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445204/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445204/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving (1) IPSec replay windows and (2) the use of vulnerable versions of ClamAV before 0.88.4.  NOTE: it is possible that vector 2 is related to CVE-2006-4018."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no específicas en SnapGear anterior a 3.1.4u1 permite a un atacante remoto provocar denegación de servicio a través de vectores no especificados que influyen en (1) la repitición de ventana de IPSec y (2) el uso de versiones vulnerables de ClamAV anterior a 0.88.4. NOTA: es posible que el vector 2 está relacionado con CVE-2006-4018."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:securecomputing:snapgear_sg560:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2686D62B-1275-4078-99B6-E4D7DBB95604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:securecomputing:snapgear_sg565:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A594424-2D52-494A-8084-C3E0D82F7C82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:securecomputing:snapgear_sg580:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2951C4B-85E7-4357-A676-0BAADF726A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:securecomputing:snapgear_sg710:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CDE6D0-70C2-4460-92F6-6D85E981E865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21707",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cyberguard.info/snapgear/releases.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19805",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.cyberguard.info/snapgear/releases.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nSecure Computing, SnapGear, 3.1.4u1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which allows local users to obtain sensitive information via keys under \\HKEY_CURRENT_USER\\Software\\PDAapps\\VeriChat."
      }, {
        "lang" : "es",
        "value" : "PDAapps Verichat para Pocket PC 1.30bh almacena nombres de usuario y contraseñas en texto plano en el registro Windows Mobile, lo cual permite a un usuario local obtener información sensible a través de llaves bajo \\HKEY_CURRENT_USER\\Software\\PDAapps\\VeriChat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pocket_pc:pocket_pc:1.30bh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "877E09F3-055F-41E6-A3B4-8E7F69C899CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://airscanner.com/security/05081201_verichat.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445086/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://airscanner.com/security/05081201_verichat.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445086/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\\IMPlus\\implus.cfg, which allows local users to obtain sensitive information by reading the file."
      }, {
        "lang" : "es",
        "value" : "Shape Services IM+ Mobile Instant Messenger para Pocket PC 3.10 almacena nombres de usuario y contraseñas en texto plano en %PROGRAMFILES%\\IMPlus\\implus.cfg, lo cual permite a un usuario local obtener información sensible a través de la lectura del fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shape_services:im\\+_mobile_instant_messenger:3.10_for_pocket_pc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979A7EE4-B55B-4801-B6E2-FD9D3DDA6970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://airscanner.com/security/05081701_implus.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445082/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://airscanner.com/security/05081701_implus.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445082/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception."
      }, {
        "lang" : "es",
        "value" : "El servicio SMTP en MailEnable Standard, Professional, y Enterprise anterior a ME-10014 (04/09/2006) permite a un atacante remoto provocar denegación de servicio a través de una búsqueda SPF para un dominio con un gran número de registros, lo cual dispara una excepción de puntero nulo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794B82C8-E0B2-4B79-BF36-3FB9E09AE5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99747EE-1CD0-4DD1-93BD-ACA95EC5B2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_standard:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B924438E-5E77-43D5-873C-70F1B2FE4191"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016792",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/MESMTPC.ZIP",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/MESMTPC.ZIP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows remote attackers to upload and execute arbitrary files with executable extensions in the /cashe/mails folder."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de actualización de archivo no restrictiva en fileupload.html en vtiger CRM 4.2.4, y posiblemente versiones anteriores, permite a un atacante remoto actualizar y ejecutar ficheros de su elección con extensiones ejecutables en la carpeta /cashe/mails."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.4",
            "matchCriteriaId" : "3E26BF3B-7A7B-48FB-802E-648AD3FE7F2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/28459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-net.biz/adv/D3906a.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-net.biz/adv/D3906a.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-link 2.3.4, allows remote attackers to execute arbitrary PHP code via a URL in the ADODB_DIR parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en adodb-postgres7.inc.php en John Lim ADOdb, posiblemente 4.01 y anteriores, según lo usado en Intechnic In-link 2.3.4, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro ADODB_DIR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.01",
            "matchCriteriaId" : "A46CDC61-EC20-4419-8AC0-B4C0B483C852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://adodb.cvs.sourceforge.net/adodb/adodb_official/adodb-postgres7.inc.php?revision=1.1&view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://prdownloads.sourceforge.net/adodb/adodb492.tgz?download",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445259/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://adodb.cvs.sourceforge.net/adodb/adodb_official/adodb-postgres7.inc.php?revision=1.1&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://prdownloads.sourceforge.net/adodb/adodb492.tgz?download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445259/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a \"Shatter\" style attack on the (1) IParam parameter, and the (2) PBM_GETRANGE and (3) PBM_SETRANGE messages in an unspecified progress bar.  NOTE: some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "La ventana de inicio de actualización en update.exe en  Avira AntiVir PersonalEdition Classic 7.0 construcción 151 permite a un usuario local conseguir privilegios de sistema a través del tipo de ataque \"Shatter\" sobre el parámetro (1)IParam, y los mensajes (2) PBM_GETRANGE y (3) PBM_SETRANGE en una barra de progreso no especifica. NOTA: algunos detalles se obtuvieron a partir de una información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivir_personal:*:*:classic:*:*:*:*:*",
            "matchCriteriaId" : "5DB520B5-36E8-4F4B-99FF-0FF3F708CC8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445205/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445263/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445205/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445263/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox of another account."
      }, {
        "lang" : "es",
        "value" : "El módulo useredit_account.wdm en Alt-N WebAdmin 3.2.5 que funciona con MDaemon 9.0.6, y posiblemente versiones anteriores, permite a un administrador de dominio remoto validado conseguir privilegios y obtener acceso a la cola del sistema de correo a través de la modificación de la bandeja de entrada de la cuenta de usuario de MDaemon para usar la bandeja de entrada de otra cuenta de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "D746906B-E5DF-4246-AAE9-AC7396E41848"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC237046-3404-4D84-8008-0E15D1075B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F411993-6855-43FB-A090-210263CBD9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035509D1-3AA0-450C-8C0D-08A5DE381B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:webadmin:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841461CB-11A6-4672-A060-1AB6C8C62B3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://files.altn.com/WebAdmin/Release/RelNotes_en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21727",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445153/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.teklow.com/advisories/TTG0602.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://files.altn.com/WebAdmin/Release/RelNotes_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445153/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.teklow.com/advisories/TTG0602.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the attacker is already a Domain administrator within the default domain of a MDaemon server.\r\nThis vulnerability is addressed in the following product release:\r\nAlt-N, WebAdmin, 3.2.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information. The lib/config.php vector is already covered by CVE-2006-4531."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en settings.php en Pheap 1.2, y posiblemente anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro lpref. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de información de terceros. El vector lib/config.php esta cubierto por CVE-2006-4531."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bare_concept_media:pheap_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "0777526B-C55D-422D-8A92-0EA2A1D625B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bare_concept_media:pheap_cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7752C6F8-0653-4D34-B2A5-2B60622E1A74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in annonce.php in AnnonceV (aka annoncesV) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en annonce.php en AnnonceV (también conocido como annoncesV) 1.1 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:annoncev:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43328728-A735-4641-9C0A-72B489CFB457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-26-annoncev-news.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445199/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-26-annoncev-news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445199/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T19:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en Utils.py de Mailman anterior a 2.1.9rc1 permite a atacantes remotos suplantar mensajes en el log de errores y posiblemente engañar al administrador para que visite URLs maliciosas mediante secuencias CLRF en la URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.8",
            "matchCriteriaId" : "42856677-9290-4B21-AE1F-0F217B0D80AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21732",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22011",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22227",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27669",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewvc/mailman/trunk/mailman/Mailman/Utils.py?r1=7859&r2=7923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0779.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445992/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewvc/mailman/trunk/mailman/Mailman/Utils.py?r1=7859&r2=7923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0779.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445992/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205651\n\nThe Red Hat Security Response Team has rated this issue as having low security impact and expects to release a future update to address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThe risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 and 3 which are in maintenance mode.\n\nThis bug will be addressed in a future update of Red Hat Enterprise Linux 4.",
        "lastModified" : "2007-09-05T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en alwil avast! Anti-virus Engine anterior a 4.7.869 permite a atacantes remotos ejecutar código de su elección mediante un archivo LHA artesanal que contiene cabeceras extendidas con nombres de archivos y directorios cuya concatenación dispara el desbordamiento."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:*:*:server:*:*:*:*:*",
            "versionEndIncluding" : "4.6.460",
            "matchCriteriaId" : "B5CC8119-CBC9-4122-B9F4-8DD4C8B08776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.763",
            "matchCriteriaId" : "247FC548-9B8F-4365-8292-F8AC4441A2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.168:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C40879-2EA4-459C-8B09-7BD7B08CE746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026ABB4A-ABB0-4EAB-80AA-D0904AADD499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.183:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10EE0F87-3F43-4539-A6C0-6093137988AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3608831-EDD7-4DC9-B22C-20A49C58C3DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010D3CD8-6E19-4A3C-AF3A-891A773E8A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC9FA41-C6B7-47D0-B087-424C1EB33C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.0.235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AB0737-7E86-40E3-B356-F364817F3881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.260:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2E6379-791B-4220-827D-833F23252CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.268:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE89970-5A5C-4F12-9191-7E9609ED0D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.278:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831FC302-4DF5-4C6B-8458-A6DC94B4ABD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.287:*:*:*:*:*:*:*",
            "matchCriteriaId" : "074B74D5-1F16-484A-9E26-6EEB6027B5EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.289:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66598B99-1426-4326-AE5C-27ACCE2BADBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA7C524-30C1-442A-BC36-58CC88400A93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.319:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4E7BB2-9513-4367-821D-51F79B3CCBBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.335:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DEC005-1F28-4227-9A7B-1244560769F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.342:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E4EB75-746A-4C9C-83F2-46CF3BC6C70B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.357:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96927EC7-346F-4BB7-A0B8-FFDB95912A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.389:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B12B74-07D2-410E-99BB-0E9EBF3B51A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.396:*:*:*:*:*:*:*",
            "matchCriteriaId" : "319673EC-3F80-4AA2-9598-B6BA3CA0EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.412:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0C74DD-7735-4C18-975B-B47CAFD96FD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9EEA66-3313-4FB1-9342-304162A92366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.1.501:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FED369-86BA-4C6A-AB16-F3974F84D56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.518:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95C92A34-E4D8-4BA3-B01E-8743719D00EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.549:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3253D43C-1325-4A3E-8442-1D432E98EFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.5.561:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FEB250C-87AB-422D-AE85-C473974FA160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C26411-1364-49CB-8715-4E5F9D07119F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alwil:avast_antivirus:4.6.623:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71EC304A-2729-4B91-9B87-2DCB3B975DD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hustlelabs.com/advisories/04072006_alwil.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hustlelabs.com/advisories/04072006_alwil.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nALWIL, avast! antivirus, 4.7.869 (for Desktops)\r\nALWIL, avast! antivirus, Server 4.7.660 (for Servers)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-07T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument."
      }, {
        "lang" : "es",
        "value" : "El control de ActiveX de la información del sistema (msinfo.dll), cuando se tiene acceso a través de Microsoft Internet Explorer, permite que los atacantes remotos causen una negación del servicio (caida) a través de la función SaveFile con (1) un equipo informático y posiblemente (2) el nombre del fichero y (3)el argumento de la categoría."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_information_activex_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED6547F-BD18-48DA-BAE2-FE170F47CE18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "when accessed via Microsoft Internet Explorer"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en VCD-db anteriores a 0.983  permite a un atacante remoto inyectar secuencias de comandos web o HTML de sue elección a travñes de vectores no especificados cuando se maneja los comentarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vcd-db:vcd-db:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.982",
            "matchCriteriaId" : "516065C5-A751-4BDD-94D1-2B5149D09F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21781",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=445066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=445066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en affichage/commentaires.php en C-News.fr C-News 1.0.1 y anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-news.fr:c-news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "6B0E76E9-D33D-4CB2-B5E9-613684DC1A6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21758",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the my_ms[root] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en jscript.php en Sky GUNNING MySpeach 3.0.2 y anteriores, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro my_ms[root]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sky_gunning:myspeach:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "DDEF40AC-8552-4713-8441-9B3E82E08261"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21777",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.myspeach.1386.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.myspeach.1386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php, which is accessible via a direct request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código directo estático en admin/save_opt.php en SoftBB 0.1, y posiblemente anteriores, permite a un usuario validado actualizar y ejecutar código PHP de su elección a través del parámetro cache_forum, lo cual guarda el código en info_options.php, el cual es accesible a través de una respuesta directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbb:softbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "9A724851-3F12-4838-8C39-712CFD472E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/advisories/10060904.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016785",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445087/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/advisories/10060904.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445087/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabildiades de inyección SQL en oftBB 0.1, y posiblemente anteriores, permite a un atacante remoto ejecutar comandos SQL de su elección a través del (1) parámetro groupe en addmembre.php y el (2) parámetro select en moveto.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbb:softbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "9A724851-3F12-4838-8C39-712CFD472E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/advisories/10060904.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445087/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/advisories/10060904.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445087/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page[] parameter."
      }, {
        "lang" : "es",
        "value" : "index.php en SoftBB 0.1, y posiblemente anteriores, permite a atacantes remotos obtener la ruta de instalación mediante un parámetro page[] nulo o inválido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softbb:softbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "9A724851-3F12-4838-8C39-712CFD472E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/advisories/10060904.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445087/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/advisories/10060904.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445087/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en VBZooM permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro UserID, un vector diferente que CVE-2006-1133 y CVE-2005-2441."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbzoom:vbzoom:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BC647F-88F4-4DCB-89F5-73E5D3123BE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/16220",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445000/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19803",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/16220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445000/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in Web_Extensions - Notitia (I/II).  NOTE: due to lack of details, it is not clear whether this issue is file inclusion, static code injection, or another type of issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en MySource Classic 2.14.6, y posiblemente anteriores, permite a usuarios remotos autenticados, con privilegios de superusuario, inyectar código PHP de su elección mediante vectores no especificados relacionados con el atributo Equation en Web_Extensions - Notitia (I/II). NOTA: debido a la falta de detalles, no está claro si este asunto es inclusión de fichero, inyección de código estático, u otro tipo de asunto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_classic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.14.6",
            "matchCriteriaId" : "313927D5-4A89-4704-AD70-B9731B25F701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://classic.squiz.net/download/changelogs/change_log_2.14.8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21757",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://classic.squiz.net/download/changelogs/change_log_2.14.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Directory parameter, as demonstrated by parameter values naming Apache HTTP Server log files that apparently contain PHP code."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en SZEWO PhpCommander 3.0 y anteriores permite a un atacante remoto añadir y ejecutar archivos locales de su elección a través de secuencias de atravesamiento de directorios en el parámetro Directory, según lo demostrado por los valores de parámetro que nombran ficheros de registro del servidor Apache HTTP que contienen aparentemente código PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szewo:phpcommander:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "2957663A-9AD2-46EB-B362-2066B541A463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21753",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19867",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter in (1) header.php or (2) news.php.  NOTE: portions of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en ACGV News 0.9.1 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro PathNews en (1) header.php o (2) news.php. NOTA: parte de estos detalles están obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acgv_news:acgv_news:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA47B12-62B1-489D-82FD-6DFB1A9278BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3475",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en article.php en ACGV News 0.9.1 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro PathNews."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acgv_news:acgv_news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.1",
            "matchCriteriaId" : "3AAA6417-F8C0-442A-A9F4-FD8600246414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T20:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in (1) formulaire_commentaires.php, (2) affichage/liste_news.php, (3) affichage/news_complete.php, or (4) affichage/pagination.php.  NOTE: the provenance of some of this information is unknown; some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en C-News.fr C-News 1.0.1 y anteriores, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro path en (1) formulaire_commentaires.php, (2) affichage/liste_news.php, (3) affichage/news_complete.php, o (4) affichage/pagination.php. NOTA: el origen de alguna de esta información es desconocida; algunos detalles se obtuvieron a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c-news.fr:c-news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "6B0E76E9-D33D-4CB2-B5E9-613684DC1A6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21758",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445781/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3471",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445781/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2482",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE: the ACE archive vector is covered by CVE-2005-2856."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en el componente ZipTV en (1) ZipTV para Delphi 7 26/01/2006 y para C++ Builder 16/01/2006, (2) PentaZip 8.5.1.190 y PentaSuite-PRO 8.5.1.221,y posiblemente otros productos, permite a un atacante remoto con la complicidad del usuario ejecutar código de su elección a través de un archivo ARJ con una gran cabecera. NOTA: el archivo vector ACE está cubierto por CVE-2005-2856."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip_data_systems:ziptv_for_c\\+\\+_builder:2006.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BA19C4-046F-4C11-B113-236D82333338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip_data_systems:ziptv_for_delphi_7:2006.1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962152E9-7CE0-43E7-8295-E851636F3EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pentaware:pentasuite-pro:8.5.1.221:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46374F90-EAB3-42E8-B285-7ECC127FB06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pentaware:pentazip:8.5.1.190:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C26D49-BDA7-4E5A-8380-117C34D093D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20270",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21458",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-50/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-72/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19884",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3495",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0235",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28785",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/20270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-50/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-72/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en SMTP Daemon en Ipswitch Collaboration 2006 Suite Premium y Standard Editions, IMail, IMail Plus, e IMail Secure, permite a un atacante remoto ejecutar código de su elección a través de una cadena larga situada después del caracter “@” y antes del carácter “: ”."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_plus:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C6A165-8B6B-4D0F-B2F7-3A5CDA4BA072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:imail_secure_server:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01A5A7C-A405-4A3A-860C-7B954011A9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2006_premium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4031612D-7151-45DF-9AF6-7DEA14FA13B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2006_standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95104B1C-0B67-43FF-A93C-9296707B3DA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21795",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipswitch.com/support/ics/updates/ics20061.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/im20061.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445521/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19885",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ipswitch.com/support/ics/updates/ics20061.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ipswitch.com/support/imail/releases/im20061.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445521/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in kategori.asp in Muratsoft Haber Portal 3.6 allows remote attackers to execute arbitrary SQL commands via the kat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en kategori.asp en Muratsoft Haber Portal 3.6 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro kat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muratsoft:haber_portal:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA556D7-4611-44C4-93C6-63486273E4A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AuditWizard 6.3.2, when using \"Remote Audit,\" logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file."
      }, {
        "lang" : "es",
        "value" : "AuditWizard 6.3.2, cuando usa \"Remote Audit,\" registra la contraseña del administrador en texto plano al fichero LaytonCmdSvc.log, lo cual permite a un usuario local obtener información sensible a través de la lectura del fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auditwizard:auditwizard:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8461AC-9BBF-4220-AC82-CC738B486011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21773",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016795",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445220/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445220/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in consult/joueurs.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to execute arbitrary SQL commands via the id_joueur parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en consult/joueurs.php en Uni-Vert PhpLeague 0.82 y anteriores permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro id_joueur. NOTA: el origen de esta información es desconocida; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uni-vert:phpleague:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0C592A-CA65-42A1-8A9A-415AC8E93608"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21789",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19880",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4644",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the repmod parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en modules/home.module.php en phpFullAnnu 5.1 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en parámetro repmod."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfullannu:phpfullannu:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17E5005-CA42-4716-8B94-620F5BFF9FB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21805",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19875",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in akarru.gui/main_content.php in Akarru Social BookMarking Engine 0.4.3.34 and earlier, and possibly 0.4.4.120, allows remote attackers to execute arbitrary PHP code via a URL in the bm_content parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en akarru.gui/main_content.php en Akarru Social BookMarking Engine 0.4.3.34 y anteriores, y posiblemente 0.4.4.120, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámerto bm_content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akarru:social_bookmarking_engine:0.4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DEB0C8-15E2-41BE-82CF-5A05F139803E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akarru:social_bookmarking_engine:0.4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87084932-707D-4665-BCE8-516522903ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akarru:social_bookmarking_engine:0.4.3.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5180BF3-861F-4A62-8219-5265BE53CBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akarru:social_bookmarking_engine:0.4.4.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3524780A-79D7-4281-BD85-37D6D9B97DC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21784",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445605/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19870",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445605/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Pathauto module before pathauto_node.inc 1.17.2.1 and the Drupal 4.6 Pathauto module before pathauto_node.inc 1.14.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en el módulo Drupal 4.7 Pathauto anterior a pathauto_node.inc 1.17.2.1 y el módulo Drupal 4.6 Pathauto anterior a pathauto_node.inc 1.14.2.1, permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_pathauto_module:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B000D0-EE5C-49A7-8A98-DAD7843C6EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_pathauto_module:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F62DE06-9F6E-4CCA-A026-717A9917FA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/82527",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21779",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19876",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/82527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sndir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en news.php en Sponge News 2.2 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro sndir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sponge_news:sponge_news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "4670A2DB-8E38-4634-91C2-4F17D0FEEA10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21760",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19862",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en bp_ncom.php en BinGo News (BP News) 3.01 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro bnrep."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bingo_news:bingo_news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.01",
            "matchCriteriaId" : "29709876-926E-41C8-8779-4C23BC37B251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445506/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19877",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445506/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-08T21:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in bp_news.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en bp_news.php en BinGo News (BP News) 3.01 y anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro bnrep."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bingo_news:bingo_news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.01",
            "matchCriteriaId" : "29709876-926E-41C8-8779-4C23BC37B251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445506/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3494",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445506/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de directorio transversal en viewfile en TWiki 4.0.0 hasta 4.0.4 permiet a un atacante remoto leer ficheros de su elección a través de la secuencia .. (punto punto) en el parámetro filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F893E121-82FA-41C8-9BA4-606E6DA01408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620356EA-F106-41DF-AADA-C1EF5A5A0829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979D8BC8-0032-496F-9503-F3BBBC8FA7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0804FF93-6554-4F56-9974-017198ED5F44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2006-4294",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19907",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2006-4294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers to inject crafted packets into the routing queue, possibly bypassing intended router ACLs."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS 12.0, 12.1, y 12.2, cuando la tunelación GRE IP esta siendo usada y falta la conformidad RFC2784, no verifica el campo offset de un paquete GRE durante su encapsulación, lo cauls lleva a un desbordamiento de enteros que referencia datos desde localizaciones de memoria incorrectas, lo cual permite a un atacante remoto inyectar paquetes artesanales dentro de la cola de enrutamiento, posiblemente evitando la ACLs del router previsto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F86F790-6247-42F2-9487-3D60A2842F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/tech/tk827/tk369/tsd_technology_security_response09186a008072cd7b.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phenoelit.de/stuff/CiscoGRE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445322/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/tech/tk827/tk369/tsd_technology_security_response09186a008072cd7b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phenoelit.de/stuff/CiscoGRE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445322/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net (aka Ben Speakman) Php download allows remote attackers to overwrite arbitrary local files via .. (dot dot) sequence in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en download/index.php, y posiblemente download.php, en threesquared.net (también conocido como Ben Speakman)la descarga Php permite a un atacante remoto sobre escribir ficheros locales de su elección a través de la secuencia ..(punto punto) in el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:threesquared.net:php_download_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D639D1F7-F381-4939-8629-666E93390A3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21774",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445269/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445269/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "(1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of \"dsapoll\", which allows remote attackers to create a new poll by entering default credentials via lp_admin.php."
      }, {
        "lang" : "es",
        "value" : "(1) Amazing Little Poll y (2) Amazing Little Picture Poll tiene una contraseña por defecto de \"dsapoll\", lo cual permite a un atacante remoto crear un nuevo sondeo (pool) a través de las credenciales de entrara por defecto a través de lp_admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazing_little_picture_poll:amazing_little_picture_poll:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF963F31-0ABF-4663-A49A-309AC74CC0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazing_little_poll:amazing_little_poll:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CB1290-0882-43F7-8370-43708F0A4914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445081/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445081/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php)."
      }, {
        "lang" : "es",
        "value" : "(1) Amazing Little Poll y (2) Amazing Little Picture Poll almacenan información sensible bajo la raiz web con insuficiente control de acceso, lo cual permite a un atacante remoto leer la contraseña del admin a través de respuestas directas del archivo lp_settings (lp_settings.inc o lp_settings.php)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazing_little_picture_poll:amazing_little_picture_poll:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF963F31-0ABF-4663-A49A-309AC74CC0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazing_little_poll:amazing_little_poll:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28CB1290-0882-43F7-8370-43708F0A4914"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445081/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445081/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (crash) or \"compromise the server\" via encoded format string specifiers in the query string."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en Easy Address Book Web Server 1.2 permite a un atacante remoto provocad denegación de servicio (caida) o \"compromenter el servidor\" a través del formato de codificación de las especificaciones de la cadena en la consulta cadena."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efs_software:easy_address_book_web_server:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F893D5F-B029-47AC-87B9-BB6CED3E6F5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445262/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445262/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en función Strcmp en la extensión XKEYBOARD en Window System X11R6.4 y anteriores, según lo utilizado en SCO UnixWare 7.1.3 y Sun Solaris 8 hasta la 10, permite a un usuario local subir privilegios a través del valor de la larga variable de entorno _XKB_CHARSET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "32CF7469-6D2F-4E34-8013-7F0D3433D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102570-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-195.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.risesecurity.org/advisory/RISE-2006001.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445579/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3525",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102570-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-195.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.risesecurity.org/advisory/RISE-2006001.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445579/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.  NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PHP Edition."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en admin/editeur/spaw_control.class.php en Web Provence SL_Site 1.0 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro spaw_root. NOTA: el análisis de CVE sugiere que este problema está realmente en un producto de una tercera parte, SPAW Editor PHP Edition."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-provence:sl_site:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "E1DC4705-394F-44DC-886F-CB96D43328D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/docs/ChangeLog.txt?view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.19&r2=1.20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.25&r2=1.26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445520/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/docs/ChangeLog.txt?view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.19&r2=1.20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.25&r2=1.26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445520/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE."
      }, {
        "lang" : "es",
        "value" : "Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 almacena executables del servicio bajo el directorio de instalación del producto con permisos débiles, que permiten a usuarios locales obtener los privilegios de LocalSystem modificando (1) WebProxy.exe o (2) PAVSRV51.EXE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_platinum_internet_security:2006_10.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C229CED-468A-40C3-B444-2E8BBA8335B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_platinum_internet_security:2007_11.00.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746F88AC-995B-4197-B8DB-105C0CCFF49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21769",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/advisories/pandais.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445479/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445889/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/advisories/pandais.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445479/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445889/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns."
      }, {
        "lang" : "es",
        "value" : "Panda Platinum Internet Security 2006 10.02.01 y 2007 11.00.00 utiliza los números de mensaje secuenciales en URLs generadas que no se filtran si el usuario contestó a un mensaje, lo cual permite a atacante remotos determinen patrones de uso del correo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_platinum_internet_security:2006_10.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C229CED-468A-40C3-B444-2E8BBA8335B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_platinum_internet_security:2007_11.00.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746F88AC-995B-4197-B8DB-105C0CCFF49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21769",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/advisories/pandais.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445479/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/advisories/pandais.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445479/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs.  NOTE: this issue could also be regarded as a cross-site request forgery (CSRF) vulnerability."
      }, {
        "lang" : "es",
        "value" : "The Panda Platinum Internet Security 2006 10.02.01 y 2007 11.00.00 utiliza URLs fiables para la clasificación de spam de cada mensaje, lo cual permite que atacantes remotos hagan que el Panda clasificar mensajes de su elección como Spam a través de una página web que contenga etiquetas de IMG con las URLs fiables. NOTA: esta edición se podría también mirarse como una vulnerabilidad de falsificación de petición de un sitio cruzado (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_platinum_internet_security:2006_10.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C229CED-468A-40C3-B444-2E8BBA8335B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panda:panda_platinum_internet_security:2007_11.00.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746F88AC-995B-4197-B8DB-105C0CCFF49F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1524",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/advisories/pandais.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445479/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/advisories/pandais.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445479/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and (2) description elements within an item element in an RSS feed."
      }, {
        "lang" : "es",
        "value" : "Múltilples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el módulo RSS Feed en AOL ICQ Toolbar 1.3 para Internet Explorer (toolbaru.dll)permite a un atacante remoto procesar secuencias de comandos web o HTML de su elección en el contexto del interfaz del Feed a través del (1) título y (2) descripción de elementos dentro de un campo elemento en el RSS feed."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icq_inc:icq_toolbar:1.3_for_internet_explorer:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B074A0-C0A0-48F5-88CD-80EF81E57AD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445515/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445515/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of the configuration web page (options2.html), which allows user-assisted remote attackers to provide a web page that contains disguised checkboxes that trick the user into reconfiguring the toolbar."
      }, {
        "lang" : "es",
        "value" : "AOL ICQ Toolbar 1.3 para Internet Explorer (toolbaru.dll)no valida adecuadamente el origen de la configuración de la página web (options2.html), lo cual permite que un atacante remoto con la complicidad del usuario proveer una página web que contengan botones de chequeo disfrazados que engañan al usuario en la configuración de nuevo de la barra de herramientas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icq_inc:icq_toolbar:1.3_for_internet_explorer:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B074A0-C0A0-48F5-88CD-80EF81E57AD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445515/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445515/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en la función MCRegEx__Search en AOL ICQ Pro 2003b Build 3916 y anteriores permiten a un atacanet remoto ejecutar código de su elección a través de un campo grnde inconsistente de un mensaje en un tipo 0x2711 Type-Length-Value (TLV)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:0.99b_1.1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55BF15F6-FFF7-4A0D-A2FF-8160AB3D70C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:0.99b_v.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A5D8068-55DF-4008-98CC-4ABEED68260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:98.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CBBD4E-4E3D-4441-88B0-24A6566CCB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:99a_2.15build1701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CB6B89-E3B1-4096-AF07-C9E74BFCABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:99a_2.21build1800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7181BF12-E9B6-4F8E-B1D0-3251007389D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2000.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7B95B0-8CCB-4561-B354-80925B9769D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2000.0b_build3278:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C1E49E4-1BB4-40BF-AB6F-829ACAEDC581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2001a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA5FE1-267D-41B3-AA41-794DA021C4A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2001b_build3636:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10F3133-2D77-4A16-9F16-766EB4B3C5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2001b_build3638:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E03F3686-071C-48E4-ABDD-BF68162CDC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2001b_build3659:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC70672D-FE67-42C2-83D2-D1E554BF2C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2002a_build3722:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28ABA292-10F6-447A-9494-CA716B9F47FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2002a_build3727:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0228FD42-8E98-472C-9C8A-D8396DF4E30E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E4B06D-8C2B-499A-A3B4-B1B9660AC4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003a_build3777:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1884958-DBAB-4999-9EBF-96D363FF26D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003a_build3799:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A65FB3-ECB5-45EF-9B53-9F55E55B2DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003a_build3800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0A9C10-A685-4D02-A9FF-6689441AF598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA30DD6-C47C-495A-9BFE-B9989168090E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003b_build3096:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "CA7C3EB4-21B6-42FE-B94F-C0089B277196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1509",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/400780",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445513/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19897",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/400780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445513/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissions (0666 and 0777) for certain files and directories, which might allow local users to insert Trojan horse source code that would be used during the next kernel compilation.  NOTE: another researcher disputes the vulnerability, stating that he finds \"Not a single world-writable file or directory.\" CVE analysis as of 20060908 indicates that permissions will only be weak under certain unusual or insecure scenarios"
      }, {
        "lang" : "es",
        "value" : "** DISCUSION ** El código fuente del archivo tar del Linux kernel 2.6.16, 2.6.17.11, y posiblemente otras versiones especifican la debilidad de permisos (0666 and 0777) para ciertos archivos y directorios, lo cual permite a un usuario local insertan el código fuente de un caballo de troya que podría ser usado en la siguiente compilación del kernel. NOTA: otro investigador discutió esta vulnerabilidad, indicando que él encuentra “no un simple archivo o directorio de escritura mundial.” El análisis de CVE en fecha 08/09/2006 indica que los permisos serán solamente débiles bajo ciertos escenarios inusuales o inseguros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/445539/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445540/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445539/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445540/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabildiad PHP de inclusión remota de archivo en includes/functions_portal.php en Premod Shadow 2.7.1 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:premod_shadow:premod_shadow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "5EA9C494-3FF6-49A2-BEB3-18DFA4757C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rst-crew.net/premodshadow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/21803",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445519/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rst-crew.net/premodshadow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/21803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445519/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHP_SELF variable.  NOTE: Some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en index.php en MKPortal M1.1 Rc1 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro ind, posiblemente relacionado con la variable PHP_SELF. NOTA: Algunos detalles se obtuvieron a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mkportal:mkportal:1.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D48A2C-A60A-4200-B091-3E90F0AECC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445511/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445511/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via a URL in the (1) ide parameter in (a) article.php; or the (2) pwfile parameter in (b) delete.php, (c) modify.php, (d) admin.php, or (e) modify_go.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivos en Stefan Ernst Newsscript (también conocido como WM-News) 0.5 beta permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el (1) parámetro ide en (a)article.php; o (2) el parámetro pwfile en (b) delete.php, (c) modify,.php, (d) admin.php, o (e) modify_go.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ernst:newsscript:0.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "80130E31-78D1-4941-92B3-47427C63EFA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445523/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19886",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3558",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445523/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in (a) class/sessions.class.php, and the (2) timezone_offset and (3) umode parameters in (b) class/xoopsuser.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en RunCMS 1.4.1 permiten a un atacante remoto ejecutar comandos SQL de su elección a través del (1) parámetro uid en (a) class/sessiones.class.php, y el (2) timezone_offset y (3) umode parameters en (b) class/xoopsuser.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runcms:runcms:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47797391-CA6F-4EB8-A9A3-6E457C688F3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackers.ir/advisories/runcms.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.runcms.org/modules/mydownloads/viewcat.php?cid=5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445524/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackers.ir/advisories/runcms.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.runcms.org/modules/mydownloads/viewcat.php?cid=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Rob Hensley AckerTodo 4.0 allows remote attackers to inject arbitrary web script or HTML via the task_id parameter in an edit_task command."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados en index.php en Rob Hensley AckerTodo 4.0 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro task_id en un comando edit_task."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_hensley:ackertodo:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA24A81-0FE6-4725-8144-152B8B621FD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21810",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1531",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445465/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447071/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19894",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445465/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447071/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en admin/system/include.php en Somery 0.4.6 y anteriores, cuando register_globals está habilitado, un atacante remoto podría ejecutar código PHP de su elección a través de una URL en el parámetro skindir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:somery:somery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.6",
            "matchCriteriaId" : "8150EC7D-16F8-4772-991F-490B4D39A9B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21825",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2329",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-09T00:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) includes/cart.inc.php or (2) extras/ext_cats.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivos en PhotoKorn Gallery 1.52 y anteriores permiten a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro dir_path en (1)includes/cart.inc.php o (2) extras/ext_cats.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtasoft:photokorn_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.52",
            "matchCriteriaId" : "B2D5B66C-F4A2-467E-8859-1C3A3C5F22D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-09/0119.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21796",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445582/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2327",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-09/0119.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445582/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter, a different vector than CVE-2006-1154."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en headlines.php de Fantastic News 2.1.4, y posiblemente anteriores, permite a un atacante remoto ejecutar código PHP de su elección mediante un URL en el parámetro CONFIG[script_path], un vector diferente que el CVE-2006-1154."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "E528845D-7299-4F32-B65A-42E0AE81DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B557345B-5A7F-43EC-9401-F355E5A2FF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F8C834-8E31-4A54-BD85-64D808A38007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fscripts:fantastic_news:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D2DEBA-A626-4BC4-A836-844EE74CD8D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21807",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23519",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3513",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/31121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the (1) proMod parameter to (a) index.php, or the (2) docroot parameter to (b) index.php or (c) mainpage.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en profitCode ppalCart 2.5 EE, posiblemente un componente de PayProCart, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el (1) parámetro proMOd a (a) index.php, o el (2) parámetro docroot a (b) index.php o (c) mainpage.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:profitcode:ppalcart:2.5_ee:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167B785D-6FA8-4455-8BC4-F950A3F373D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21868",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445748/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446076/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19881",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3557",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445748/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446076/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T16:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de sobre escritura de variable global en maincore.php en PHP-Fusion 6.01.4 y anteriores utiliza la función extract sobre super globales, lo que permite a un atacante remoto conducir a ataques de inyección SQL a través del parámetro _SERVER[REMOTE_ADDR] a news.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.01.4",
            "matchCriteriaId" : "DDF0AE45-FE0B-44D8-8EC6-BDDFDFBAB7C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F2384D-1E17-4DA8-A797-7E4729C2720F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21F2030-F535-49A4-8E6E-FD1CBE689AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06B0846-7C58-44D0-AAF9-E3CAA4050EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7A3A5D-3863-4035-9F70-7B07B5D5C2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40D2A89-07E9-4773-99F1-CD73637D3568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA7C1CE-F03D-47BF-B896-514A868B6BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BDCC14-859F-4FE4-A357-E1661C0C19A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.303:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22116688-E0EA-4E14-8A31-F622B87C23F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E5008E9-570B-4CD4-915B-11C4AC5A07AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.306:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A5EA0C-2668-4D53-A688-82E36CF7B220"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_fusion:php_fusion:6.0.307:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C553493-E8D3-4C43-83E7-2DE0A5A7465C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115765187519458&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/phpfusion_6-01-4_xpl.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21830",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19908",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115765187519458&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/phpfusion_6-01-4_xpl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.php-fusion.co.uk/news.php?readmore=353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" and \"magic_quotes_gpc\" are disabled.\r\nThis vulnerability is addressed in the following product release:\r\nPHP-Fusion, PHP_Fusion, 6.01.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service (crash) via an SNDU length of 0 in a ULE packet."
      }, {
        "lang" : "es",
        "value" : "EL componente de desencapsulación Unidirectional Lightweight Encapsulation (ULE) en dvb-core/dvb_net.c en el controlador dvb en el Kernel 2.6.17.8 de Linux permite a un atacante remoto provocar una denegación de servicio (caida) a través de la longitud SNDU de 0 en un paquete ULE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lkml.org/lkml/2006/8/20/278",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21820",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/26139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448998/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19939",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-489-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2006/8/20/278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448998/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-489-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "There is a patch available for the affected product release.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug for Red Hat Enterprise Linux 4:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204912\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 or 3.",
        "lastModified" : "2006-09-21T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header, which is stored in config.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático directo en doku.php en DokuWiki anterior a 30/09/2006 permite a un atacante remoto ejecutar código PHP de su elección a través de la cabecera X-FORWARDED-FOR HTTP, la cual está almancenada en config.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "release_2006-03-09",
            "matchCriteriaId" : "CC7FA4BC-8AAC-401E-AAF9-AD82A846DDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EDDA58-22F6-456A-986D-6A58FD818F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C907D889-8DD7-4542-A74E-C318271E5812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E98CDA-E813-427A-944A-2A768F075021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E589DA1C-7428-48A3-A115-3168F99584E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B197CF8-3729-414F-8BAA-BC709DEAA140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5470BA9-F1F1-484B-B4D2-328D98483D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D11132-69EC-40DD-9D62-CC2B7DF7C344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFDB3E-AB07-4E4C-A065-617A39505EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-10-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD529E-86A6-43A0-AF97-ADD7C8C2BAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2330E8-22BA-45AD-841B-4230CEED6A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD67EB1-A54F-44CC-ACE6-3D5ADA3F473F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47324B2B-AA17-4714-9DFC-FC5C0CF9D452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14882F1-2073-4DF4-8ECD-D4B9C39EAA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE154F-A880-4053-AA65-C02DD9AA1BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151742B9-2357-4A12-B839-09ADDF30E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0296920B-64B6-4492-8B54-D11F8CFA7F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E00178-D993-479A-BBC8-8AD9BDF69129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-05-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFB944D-FA24-4B9C-8543-656CFDB6163A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11872728-EE8D-4E4B-9E2F-C658905B5045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F542C2-7808-42AD-9A20-85BBBFD27DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4277D9B-E1FF-4285-A766-993B1C38CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A781BA-0949-456E-A529-9CA157CD3F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EE1AA-8C74-48F7-8E7D-9668933C7D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.splitbrain.org/index.php?do=details&id=906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21819",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445516/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.splitbrain.org/index.php?do=details&id=906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_argc_argv\" is enabled, which is the default setting.\r\nThis vulnerability is addressed in the following product release:\r\nAndreas Gohr, DokuWiki, 2006-03-09c"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de actualización de archivo no restringida en lib/exe/media.php en DokuWiki anterior a 09/03/2006 permite a un atacante remoto actualizar archivos ejecutables dentro de la carpeta data/media a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "release_2006-03-09",
            "matchCriteriaId" : "CC7FA4BC-8AAC-401E-AAF9-AD82A846DDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EDDA58-22F6-456A-986D-6A58FD818F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C907D889-8DD7-4542-A74E-C318271E5812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E98CDA-E813-427A-944A-2A768F075021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E589DA1C-7428-48A3-A115-3168F99584E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B197CF8-3729-414F-8BAA-BC709DEAA140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5470BA9-F1F1-484B-B4D2-328D98483D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D11132-69EC-40DD-9D62-CC2B7DF7C344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFDB3E-AB07-4E4C-A065-617A39505EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-10-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD529E-86A6-43A0-AF97-ADD7C8C2BAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2330E8-22BA-45AD-841B-4230CEED6A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD67EB1-A54F-44CC-ACE6-3D5ADA3F473F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47324B2B-AA17-4714-9DFC-FC5C0CF9D452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14882F1-2073-4DF4-8ECD-D4B9C39EAA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE154F-A880-4053-AA65-C02DD9AA1BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151742B9-2357-4A12-B839-09ADDF30E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0296920B-64B6-4492-8B54-D11F8CFA7F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E00178-D993-479A-BBC8-8AD9BDF69129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-05-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFB944D-FA24-4B9C-8543-656CFDB6163A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11872728-EE8D-4E4B-9E2F-C658905B5045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F542C2-7808-42AD-9A20-85BBBFD27DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4277D9B-E1FF-4285-A766-993B1C38CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A781BA-0949-456E-A529-9CA157CD3F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EE1AA-8C74-48F7-8E7D-9668933C7D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21819",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445516/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_argc_argv\" is enabled, which is the default setting.\r\nThis vulnerability is addressed in the following product release:\r\nAndreas Gohr, DokuWiki, Release 2006-03-09c"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file."
      }, {
        "lang" : "es",
        "value" : "Los registros de TIBCO RendezVous 7.4.11 y anteriores de los nombres de usuarios y contraseñas codificados en base64 en rvrd.db, el cual permite a un usuario local obtener informaciòn sensible a través de la decodificación del archvio de registro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.11",
            "matchCriteriaId" : "C57053D5-9533-4F04-AC71-552437A2CCA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21748",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19883",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter.  NOTE: this issue was disputed by a third-party researcher who stated that the _REQUEST parameters were dynamically unset at the beginning of the file.  Another researcher noted, and CVE agrees, that the unset PHP function can be bypassed (CVE-2006-3017).  If this issue is due to a vulnerability in PHP, then it should be excluded from CVE"
      }, {
        "lang" : "es",
        "value" : "** RECHAZADO ** Vulnerabilidad PHP de inclusión remota de archivo en contrib/yabbse/poc.php en phpopenchat anterior a 3.0.2 permite un atacante remoto ejecutar código PHP de su elección a través del parámetro sourcedir. NOTA: este tema fue discutido por una tercera persona investigador que indicó que eran los parámetros del _REQUEST estaba dinámicamente desactivada al principio del archivo.  Otro investigador conocido, y con el que CVE esta de acuerdo, indico que la función PHP desactivada puede evitarse (CVE-2006-3017).  Si este tema es debido a una vulnerabilidad en PHP, entonces  debe ser excluida del CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "37C634AB-40CB-4622-95E9-18BAD8811C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89F50264-0D15-4545-ADBC-EA5661353D8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpopenchat:phpopenchat:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8893B82A-AA71-45BA-8C50-7D8085C407FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://phpopenchat.org/index.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445384/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445522/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445580/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://phpopenchat.org/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445384/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445522/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445580/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the _NE[AbsPath] parameter in (1) install.php and (2) migrateNE2toNE3.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusion remota de archivo, en News Evolution 3.0.3 permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro _NE[AbsPath] en (1) install.php y(2) migrateNE2toNE3.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:news_evolution:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281DA723-4170-4825-B962-15C18CD4CA60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445576/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to \"debug\"."
      }, {
        "lang" : "es",
        "value" : "DokuWiki anterior al 9/03/2006 habilita la característica de depuración, lo cual permite a un atacante remoto obtener información sensible a través de la llamada a doku.php con la cabecera X-DOKUWIKI-DO HTTP fija el \"depurador\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "release_2006-03-09",
            "matchCriteriaId" : "CC7FA4BC-8AAC-401E-AAF9-AD82A846DDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EDDA58-22F6-456A-986D-6A58FD818F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C907D889-8DD7-4542-A74E-C318271E5812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E98CDA-E813-427A-944A-2A768F075021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E589DA1C-7428-48A3-A115-3168F99584E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B197CF8-3729-414F-8BAA-BC709DEAA140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5470BA9-F1F1-484B-B4D2-328D98483D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D11132-69EC-40DD-9D62-CC2B7DF7C344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFDB3E-AB07-4E4C-A065-617A39505EB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-10-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFD529E-86A6-43A0-AF97-ADD7C8C2BAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2330E8-22BA-45AD-841B-4230CEED6A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DD67EB1-A54F-44CC-ACE6-3D5ADA3F473F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47324B2B-AA17-4714-9DFC-FC5C0CF9D452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14882F1-2073-4DF4-8ECD-D4B9C39EAA03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE154F-A880-4053-AA65-C02DD9AA1BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151742B9-2357-4A12-B839-09ADDF30E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0296920B-64B6-4492-8B54-D11F8CFA7F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E00178-D993-479A-BBC8-8AD9BDF69129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-05-07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFB944D-FA24-4B9C-8543-656CFDB6163A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11872728-EE8D-4E4B-9E2F-C658905B5045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F542C2-7808-42AD-9A20-85BBBFD27DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4277D9B-E1FF-4285-A766-993B1C38CB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A781BA-0949-456E-A529-9CA157CD3F33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EE1AA-8C74-48F7-8E7D-9668933C7D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445516/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_argc_argv\" is enabled, which is the default setting.\r\nThis vulnerability is addressed in the following product release:\r\nAndreas Gohr, DokuWiki, Release 2006-03-09c"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "El interfaz de usuario remoto de Canon imageRUNNER incluye nombres de usuario y contraseñas cuando se exportan una libreta de direcciones, lo que permite a un atacante dependiente del contexto obtener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canon:imagerunner_2620:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4C7D11-EE90-4E10-9BBB-9CDC55467A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canon:imagerunner_5020:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E411CEEF-8615-47B3-AC1F-F907ECD8C725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canon:imagerunner_6870:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B994ED-E476-43EE-BD7D-FA3158AA66F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canon:imagerunner_8500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5C108F-F89B-457D-9EDA-A5096AA01363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canon:imagerunner_9070:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C40ED96-C1D9-4C2F-B90A-BEF0B36BAF17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canon:imagerunner_c3220:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66DACE20-FDA4-4633-9755-95F72257F6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canon:imagerunner_c6800:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1542430-BAEB-4A4E-B617-AFC303614E0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21788",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445302/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445532/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445302/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445532/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en Redirect.bat de IBM Director anterior a 5.10 permite a un atacante remoto leer ficheros de sue elección a través de la secuencia ..(punto punto) en el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "B0FB4EE8-23D1-461B-8F74-A5C45BBB85D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016815",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19898",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nIBM, Director, 5.10"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests and (2) malformed packets."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en IMB Director anterior a 5.10 permite a un atacante remoto provocar denegación de servicio (caida) a través de vectores no especificados implicando a (1) las respuestas de servidor mal formadas del WMI CIM y (2) paquetes mal formados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "B0FB4EE8-23D1-461B-8F74-A5C45BBB85D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21802",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19915",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nIBM, Director, 5.10"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4683",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-11T17:04:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE."
      }, {
        "lang" : "es",
        "value" : "IBM Director anterior a 5.10 permite a un atacante remoto obtener información sensible de cabeceras HTTP a través de HTTP TRACE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:director:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "B0FB4EE8-23D1-461B-8F74-A5C45BBB85D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21802",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19915",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4341",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-11T19:04:00.000",
      "lastModified" : "2023-11-07T01:59:16.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4340.  Reason: This candidate was withdrawn by its CNA.  It is a reservation duplicate of CVE-2006-4340.  Notes: All CVE users should reference CVE-2006-4340 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidenta"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an HTTP request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en el componente xsp en mod_mono en Mono/C# web server, es usado en SUSE Open-Enterprise-Server 1 y SUSE Linux 9.2 hasta la 10.0, permite a un atacante remoto leer ficheros de su elección a través de la secuencia ..(punto punto)en una respueta HTTP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono:xsp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95770E3-8DE5-4696-80D1-F66DE86AEDB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:suse_open_enterprise_server:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2148F79-301B-41DF-B062-7996FCBDFDFD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C89BA3B6-370B-4911-A363-935A9C9EACF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*",
            "matchCriteriaId" : "16915004-1006-41D6-9E42-D1A5041E442D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.1:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "6A8AC384-D568-46AA-8B4C-4CCCE472BAA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "397B7AE2-248A-4D89-A562-CAA3AD66C862"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Sep/0005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21840",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Sep/0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets the values to their php.ini (Master Value) defaults."
      }, {
        "lang" : "es",
        "value" : "PHP 4.x up a 4.4.4 y PHP 5 up a 5.1.6, permite a un usuario local evitar las opciones httpd.conf del Apache HTTP Server, al igual que safe_mode y open_basedir, a través de la función ini_restore, lo cual restaura los valores de su php.ini (valor Master) por defecto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2937B3-D034-400E-84F5-33833CE3764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BF34B5-F74C-4D56-9841-42452D60CB87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25850",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445712/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445882/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448953/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19933",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-362-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/achievement_securityalert/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445712/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445882/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448953/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-362-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues.  For more details see\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php\n",
        "lastModified" : "2006-09-20T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en dwayner79 y Dominic Gamble Timesheet (también conocido como Timesheet.php) 1.2.1 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro de nombre de usuario."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dominic_gamble:timesheet.php:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D2FD93-4953-4E1C-986C-D33E2B92EA6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secaware.blogspot.com/2006/09/timesheet-121-blind-sql-injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445603/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secaware.blogspot.com/2006/09/timesheet-121-blind-sql-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445603/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.1.7 allows remote attackers to inject arbitrary web script or HTML via a url BBCode tag that contains a javascript URI with an SGML numeric character reference and an embedded space, as demonstrated using \"java& #115;cript,\" a different vulnerability than CVE-2006-3761."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en inc/functions_post.php en MyBB (también conocido como MyBulletinBoard) 1.1.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una URL con una etiqueta BBCode que contiene una URI javascript con una referencia al caracter numérico SGML y un espacio embebido, como se demuestra usando \"java& #115;cript,\" una vulnerabilidad diferente que la CVE-2006-3761."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-08-15/mybb-117-htmlspeacialchar_uni-fixjavascript-functions_postphp-urlxss-attack.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1541",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=18",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444807/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-08-15/mybb-117-htmlspeacialchar_uni-fixjavascript-functions_postphp-urlxss-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444807/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMyBB, MyBB, 1.1.8"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin/global.php (aka the Admin CP login form) in MyBB (aka MyBulletinBoard) 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the query string ($_SERVER[PHP_SELF])."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/global.php (también conocido como the Admin CP login form) en MyBB (también conocido como MyBulletinBoard) 1.1.7 permite a un atacante remoto inyectar un secuencia de comandos web o HTML de su elección a través de una consulta de cadena ($_SERVER[PHP_SELF])."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://myimei.com/security/2006-08-17/mybb-117-adminglobalphp-xss-attack.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=18",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444782/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://myimei.com/security/2006-08-17/mybb-117-adminglobalphp-xss-attack.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mybboard.com/archive.php?nid=18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/444782/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMyBB, MyBB, 1.1.8"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Vikingboard 0.1b permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del (1) parámetro act en (a)help.php y (b)search.php, y el (2) parámetro p en report.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikingboard:vikingboard:0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050529C9-2872-4B4E-B638-FEBD99101FD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445719/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19916",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445719/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en topic.php en Vikingboard 0.1b permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro s."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikingboard:vikingboard:0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050529C9-2872-4B4E-B638-FEBD99101FD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1539",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445719/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19919",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445719/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en NewsGator FeedDemon anteriores a 2.0.0.25 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del alimentador Atom 1.0, según lo demostrado en ciertos casos de prueba de la suite de prueba del alimentador James M. Snell Atom 1.0"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newsgator:feeddemon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0.24",
            "matchCriteriaId" : "B74B9E91-F694-4ACE-B127-0FFE2CA8CCF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nick.typepad.com/blog/2006/08/ann_feeddemon_2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nick.typepad.com/blog/2006/08/feed_security_a_1.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cgisecurity.com/papers/RSS-Security.ppt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.snellspace.com/wp/?p=426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.snellspace.com/wp/?p=448",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nick.typepad.com/blog/2006/08/ann_feeddemon_2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://nick.typepad.com/blog/2006/08/feed_security_a_1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cgisecurity.com/papers/RSS-Security.ppt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.snellspace.com/wp/?p=426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.snellspace.com/wp/?p=448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nNewsGator, FeedDemon, 2.0.0.25"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sage permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del alimentador Atom 1.0, según lo demostrado por en cierto casos deprueba de la suite de prueba del lector James M. Snell Atom 1.0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sage:sage:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB12631D-489F-45BC-AC38-625E26668C45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mozdev.org/bugs/show_bug.cgi?id=15101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snellspace.com/wp/?p=410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.snellspace.com/wp/?p=448",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://mozdev.org/bugs/show_bug.cgi?id=15101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snellspace.com/wp/?p=410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.snellspace.com/wp/?p=448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka \"Cross Context Scripting.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sage 1.3.6 permite a un atacante remoto inyectar secuencias de comandos web o HTMl de su elección a través de JavaScript en un contenido: elemento codificado dentro de un elemento del artículo en un alimentador RSS, como quedo demostrado por cuatrp ejemplos: elementos codificados que utilizaban XMLHttpRequest para leer archivos locales arbitrarios, también conocidos como “secuencia de comandos de sitios cruzados” ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sage:sage:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396044E4-866F-455F-87BE-0D14BF7960E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/sage-inputvalidation.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21839",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/blog/cross-context-scripting-with-sage",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.intertwingly.net/blog/2006/08/09/Attack-Delivery-TestSuite",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445648/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19928",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snellspace.com/wp/?p=410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.snellspace.com/wp/?p=448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3553",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/sage-inputvalidation.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gnucitizen.org/blog/cross-context-scripting-with-sage",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.intertwingly.net/blog/2006/08/09/Attack-Delivery-TestSuite",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445648/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.snellspace.com/wp/?p=410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.snellspace.com/wp/?p=448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en config.php en PSYWERKS PUMA 1.0 RC2 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro fpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psywerks:puma:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FBB4D7-6FD1-4516-84C7-98F0066F9B1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA_1.0_RC_2_%28config.php%29_R%20FI.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445723/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19940",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA_1.0_RC_2_%28config.php%29_R%20FI.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445723/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en SpoonLabs Vivvo Article Management CMS (también conocido como phpWordPress) 3.2 y anteriores, cuando register_globals es habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro classified_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spoonlabs:vivvo_article_management_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.25",
            "matchCriteriaId" : "3ACD0FAC-4398-44C1-B587-16044F09E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spoonlabs:vivvo_article_management_cms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362C3128-27B5-4E04-A855-97B0837A7FA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21855",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1467/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1467/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled.\r\nThis vulnerability is addressed in a patch for version 3.25 of the product."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en pdf_version.php en SpoonLabs Vivvo Article Management CMS (también conocido como phpWordPress) 3.2 y anteriores, permitea un atacante remoto ejecutar comandos SQL a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spoonlabs:vivvo_article_management_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.25",
            "matchCriteriaId" : "3ACD0FAC-4398-44C1-B587-16044F09E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spoonlabs:vivvo_article_management_cms:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362C3128-27B5-4E04-A855-97B0837A7FA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21855",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1464/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19934",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1464/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in a patch for version 3.25 of this product."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en demarrage.php en Fire Soft Board (FSB) RC3 y anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro racine."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fire_soft_board:fire_soft_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rc3",
            "matchCriteriaId" : "C57F491C-A403-40CD-94FB-E7CC784A116E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1446/exploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19899",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1446/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "El mecanismo de redirección de entrada en el módulo Drupal 4.7 Pubcookie anterior a 1.2.2.4 06/09/2006 y el módulo Drupal 4.6 Pubcookie anterior a 1.6.2.1 07/09/2006, permite a un atacante remoto evitar los requisitos de validación y suplanta las identidades de usuarios arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_pubcookie_module:1.2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4CB352-ACF8-46FF-B54E-91C19CC36983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_pubcookie_module:1.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B8CE74-9966-4B3B-9781-B2F101BC102D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/83064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21811",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19920",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/83064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Drupal core is not affected. If you do not use the pubcookie module, no action is necessary."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in livre_or.php in KorviBlog 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) prenom, (2) emailFrom, or (3) body parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en livre_or.php en KorviBlog 1.3.0, permite a un atacante remoto inyectar secuencia de comandos web o HTML a través de los parámetros (1) prenom, (2) emailFrom, o (3) body."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:korviblog:korviblog:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F119E19-A058-4804-88C3-071E747006AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115796637230932&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21853",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115796637230932&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) index.php or (2) pop.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivos en MyABraCaDaWeb 1.0.3, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro base a (1)index.php p (2)pop.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myabracadaweb:myabracadaweb:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22201A4A-1B56-4997-ADCA-3A70BD83D816"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-September/001027.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21817",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-September/001027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en random2.php en mcGalleryPRO 2006 permite a un atacante remoto ejecutar código PHP a través ed una URL en el parámetro path_to_folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6205CB-2B7E-4A77-A3BB-04FD69199C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgallery:mcgallery_pro:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3D5CCA3-F061-44DB-BFCD-E4789479CCEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21850",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-06.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445783/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19936",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2342",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-06.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445783/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the language Cookie parameter, as demonstrated by executing PHP code via a log file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorio en admin.php en CCleague Pro Sports CMS 1.0.1 RC1 permite a un atacante remoto leer y ejecutar ficheros locales de su elección a través de la secuencia ..(punto punto) y el byte de arrastre nulo (%00) en el parámetro de lenguaje Cookie, según lo demostrado ejecutando código de PHP a rtavés de un fichero log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ccleague:pro_sports_cms:1.0.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B61455-2B6B-45F7-80E8-C3E47501610A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21843",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sn4k3.persiangig.com/Expl0it/CCleaguePro_V1.0.1RC1%20Directory%20Traversal%20Vulnerability.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://unkn0wn.awardspace.com/Blog/?p=46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/463191/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/463217/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://sn4k3.persiangig.com/Expl0it/CCleaguePro_V1.0.1RC1%20Directory%20Traversal%20Vulnerability.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://unkn0wn.awardspace.com/Blog/?p=46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/463191/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/463217/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled and that \"magic quotes\" is disabled.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) index.php and possibly (2) collector.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en Open Bulletin Board (OpenBB) 1.0.8 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro root_path a (1)index.php y posiblemente (2) collector.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "37C9A24E-8AEB-4908-94EF-AFCB13B0B0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E8D8D0-D96F-411D-8611-3381C576AE1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:1.0.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE48C90-79EA-4333-97BF-8ABD0789D625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:1.0.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F986CB-1C64-4ED2-A3B6-6BA69D2B13CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:1.0.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1713141D-40B0-4338-B697-3A077A080438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F50BB6B-34DD-4AA4-9361-7EF4FFB07122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbb:openbb:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "265F9C9B-388B-49EE-9655-D9AB93B91A5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19937",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28838",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T16:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en raidenhttpd-admin/slice/check.php en RaidenHTTPD 1.1.49, cuando register_globals y WebAdmin están habilitadas, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro SoftParserFileXml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raidenhttpd:raidenhttpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.49",
            "matchCriteriaId" : "29265B98-A7C2-4904-BA72-3A162E6FEB9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raidenhttpd:raidenhttpd:1.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7074E50F-79BB-4923-AAA3-4500B757505F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raidenhttpd:raidenhttpd:1.1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395EF3CA-E60E-406F-B852-099345C346F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21833",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19918",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" and \"WebAdmin\" are enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T21:07:00.000",
      "lastModified" : "2023-11-07T01:59:14.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate is a reservation duplicate of another identifier and was never published.  Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0001",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en Microsoft Publisher 2000 hasta 2003, permite a los atacantes con la complicidad del usuario ejecutar código de su elección a través de un fichero PUB artesanal, el cual provoca un desbordamiento cuando analiza sintacticamente las fuentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:publisher:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95648599-D3B3-4043-821C-D385FB7A77CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99ED878A-CFC5-4FD5-A403-EB16CC4F8BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617E8BE3-8AD0-42FC-BDEE-6B1F120AE512"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21863",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1548",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016825",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.computerterrorism.com/research/ct12-09-2006-2.htm",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/406236",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445824/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446630/100/100/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19951",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-255A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3565",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-054",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28648",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A590",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.computerterrorism.com/research/ct12-09-2006-2.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/406236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445824/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446630/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-255A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-0032",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el Indexing Service dentro de Microsoft Windows 2000, XP, y Server 2003, cuando la opción Encoding está asiganado a Auto Select, permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de una URL codificada UTF-7, el cual es inyectado dentro de un mensaje de error cuyo conjunto de caracteres está asignado a UTF-7."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:resource_kit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78BF2C4-417B-4EF8-B77C-90305C1D2AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D8321-EB2F-4626-A16B-F3C2B771EDB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E3538DA2-B040-426D-9ADC-7C5BE9C2D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "54836D69-7BBE-4B91-9548-ECDF8AA02901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAFE013-D614-4C4B-BD62-2C58302C5115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_itanium:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E659E8-642B-4B83-9B08-0D936576B440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_itanium:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "19002473-CCAC-4F14-9176-7F08C637AB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3EB90-92C9-4B69-B58C-087D382DC579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "24FD136F-8064-44C4-A9B0-1E793EB6FB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A76783D-078D-4D68-B6DA-EE2096639881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_itanium:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED6C754-BE0E-41CA-B674-90C43494A8AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_itanium:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "80EB9AF9-B2D1-4B90-8BB4-E63484289CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "4E9E190B-A109-4177-A5B5-7BD32573762E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*",
            "matchCriteriaId" : "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "394F16B8-C29F-445A-AA47-AA82F78CFA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A2852D-64BE-40B1-8811-02EBDC1E044E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21861",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016826",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.geocities.jp/ptrs_sec/advisory09e.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/108884",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446630/100/100/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447509/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447511/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19927",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-255A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3564",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-053",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28651",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A535",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.geocities.jp/ptrs_sec/advisory09e.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/108884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446630/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447509/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447511/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-255A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the Indexing service is accessible through IIS."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Adobe Flash Player 8.0.24.0 y anteriores, Flash Professional 8, Flash MX 2004, y Flex 1.5 permite a un atacante con la complicidad del usuario ejecutar código de su elección a través de una cadena grande y creada dinamicamente en una película SWF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.24.0",
            "matchCriteriaId" : "8D18545D-9EE5-4AC5-9A44-0C548AFA691A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:mx_2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33446303-71A3-4676-8D1D-E1E6EEF46BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flex_sdk:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF76C783-F118-4421-97D9-836172CE812A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-02.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.computerterrorism.com/research/ct12-09-2006.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/451380",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0674.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445825/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.computerterrorism.com/research/ct12-09-2006.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/451380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0674.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445825/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3442",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Pragmatic General Multicast (PGM) en Microsoft Windows XP SP2 y anteriores, permite a un atacante remoto ejecutar código de su elección a través de un mensaje multicast artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21851",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016827",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/455516",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446630/100/100/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19922",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-255A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3563",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-052",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28643",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A457",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/21851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/455516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446630/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-255A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the MSMQ (Microsoft Message Queuing) service is installed, which is not a default service.\r\n\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3873",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en URLMON.DLL en Microsoft Internet Explorer 6 SP1 sobre Windows 2000 y XP SP1, con versiones del parche MS06-042 anterior a 12/09/2006, permite a  un atacante remoto provocar denegación de servicio(caida) o ejecutar código de su elección a través de una URL grande en un sitio web GZIP-codificado que fue el objetivo de una redirección HTTP, debido a un arreglo incompleto del CVE-2006-3869."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.eeye.com/html/advisories/published/AD20060912.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securityreason.com/securityalert/1555",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1016839",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://weblog.infoworld.com/techwatch/archives/007870.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/30834",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445835/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19987",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28893",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://research.eeye.com/html/advisories/published/AD20060912.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://weblog.infoworld.com/techwatch/archives/007870.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/30834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445835/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Apple QuickTime anterior a 7.1.3 permite a un atacante con la complicidad del usuario ejecutar código de su elección a través de una película artesanal H.624"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "6C66A47A-7A0A-4D11-9FE8-E42A07D6E18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secway.org/advisory/AD20060912.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445830/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20060912.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445830/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, QuickTime Player, 7.1.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted QuickTime movie."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en Apple QuickTime anterior a 7.1.3 permite a atacantes con la complicidad del usuario ejecutar código de su elección a través de una película QuickTime modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "6C66A47A-7A0A-4D11-9FE8-E42A07D6E18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/683700",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-256A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/683700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-256A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, QuickTime Player, 7.1.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en Apple QuickTime anterior a 7.1.3 permite a un atacante con la complicidad del usuario ejecutar código de su elección a través de un trozo de COLOR_64 en una película FLIC(FLC)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "6C66A47A-7A0A-4D11-9FE8-E42A07D6E18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=413",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/489836",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=24",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=25",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446134/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/489836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446134/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, QuickTime Player, 7.1.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Apple QuickTime anterior a 7.1.3 permite a un atacante con la complicidad del usuario ejecutar código de su elección a rtavés de una imagen artesanal SGI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/308204",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/308204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, QuickTime Player, 7.1.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en Apple QuickTime anterior a 7.1.3 permite a un atacante con la complicidad del usuario ejecutar código de su elección a través de una película H.624 artesanal, una cuestión diferente a CVE-2006-4381."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "6C66A47A-7A0A-4D11-9FE8-E42A07D6E18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://piotrbania.com/all/adv/quicktime-integer-overflow-h264-adv-7.1.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/554252",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445823/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-256A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://piotrbania.com/all/adv/quicktime-integer-overflow-h264-adv-7.1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/554252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445823/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-256A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, QuickTime Player, 7.1.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en Apple QuickTime anterior a 7.1.3 permite a un atacante con la complicidad del usuario ejecutar código de su elección a través de un fichero artesanal FlashPix."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.2",
            "matchCriteriaId" : "6C66A47A-7A0A-4D11-9FE8-E42A07D6E18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41473E1D-B988-4312-B16B-D340508DD473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCC2EBC0-F2A6-4709-9A27-CF63BC578744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*",
            "matchCriteriaId" : "B821AA3F-98E4-4AF2-8E7F-52D5FF8F5000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "D8239EEC-A7FA-45FC-8AE8-793A1F46B34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "BC1B46A6-E032-4E24-B367-F5A94E770FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*",
            "matchCriteriaId" : "3195F233-6E2E-47CD-A882-4F01BECC40FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*",
            "matchCriteriaId" : "CCD74F99-E8DD-4DF6-91AF-5AA443DB1921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/200316",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/200316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nApple, QuickTime Player, 7.1.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object."
      }, {
        "lang" : "es",
        "value" : "Apple QuickTime anterior 7.1.3 permite a un atacante con la complicidad de un usuario ejecutar código de su elección a través de un fichero artesanal FlashPix (FPX), los cuales dispararán una excepción que conduce a una operación sobre un objeto no inicializado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E1B14-A13A-47F1-9C82-02EAEED1A911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80747BDD-70E9-4E74-896F-C79D014F1B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CE0B67-0794-472D-A2C0-CC5CA0E36370"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8692B488-129A-49EA-AF84-6077FCDBB898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758610B-3789-489E-A751-386D605E5A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B535737C-BF32-471C-B26A-588632FCC427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C61F8-B376-40F9-8677-CADCC3295915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6254BB56-5A25-49DC-A851-3CCA249BD71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795E3354-7824-4EF4-A788-3CFEB75734E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9419A1E9-A0DA-4846-8959-BE50B53736E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/540348",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-256A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/540348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445888/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-256A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-12T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Adobe Flash Player anterior 9.0.16.0 permite a un atacante remoto con la complicidad del usuario puentear la protección de allowScriptAccess a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:basic:*:*:*:*:*",
            "matchCriteriaId" : "C6B3AAA3-9C91-4093-A480-5B6BD2EACF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.24.0",
            "matchCriteriaId" : "8D18545D-9EE5-4AC5-9A44-0C548AFA691A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:mx_2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33446303-71A3-4676-8D1D-E1E6EEF46BA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22054",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/168372",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/168372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en (1) login.pl y (2) admin.pl en (a) SQL-Ledger anterior a 2.6.19 y (b) LedgerSMB anterior a 1.0.0p1 , permite a un atacante remoto ejecutar código Perl de su elección a través de un valor de parámetro terminal no especificado que contiene ../ (punto punto barra)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB9C66B-1984-4947-909B-E3F54DF06909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F0D5853-2982-48B7-B269-481C4144E213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1353122-B4C2-4153-AD4C-9B6D9CD2B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48CFD8FA-F9E4-48BF-A9BA-9C32153A68BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9C0C77-B7F3-4532-8A5C-6DCFEB449F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83ECB29-1821-4ED3-A9BD-3E4FF4693407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A2DCBE-6D0F-4BE5-8554-31119A33B9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038721B9-C41E-4F5B-824E-7C0FB45B5C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFD4D31-1454-47DC-BFB5-8BE12F81A055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D208EAF0-B935-4429-A9B6-E5C442DA00C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9A1223-6E76-44C8-A8DF-80A4721DDB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73906EC6-6AED-4E00-B878-E14E145C63C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E3142D8-A208-4663-9DE5-E2C850E545DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6E6DF4-7B05-4C37-BF82-E912D768750C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7F2842-997F-4403-8DD0-C5A0D506ADB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE971DD9-81A9-49F3-B332-C29643325DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836E17BD-E968-449C-AB48-9226617DAAF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C821D81-A9F8-4CA2-8930-603191F88DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC10542-1473-4A25-A0C0-EAA1E8C724D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51AC444F-F1F4-44E1-892E-9D195D04B082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3735244D-DC20-4713-9117-B838E1743A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C9F399-BDC3-4635-AFD0-B23C8655327E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858502CB-8AB6-4FD2-AA98-BB6336CCE1D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D0A870-71C4-4E67-9377-EE2B67052DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF31178-1F21-4F04-8BC5-59CE908673D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034006A3-F6B7-4E41-86E1-FBA11F78BCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC1EF7F-B2EF-459D-A2A1-EFF90B093E28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A763C2E-DBE3-4ECD-9B01-994A8247D60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F52FC67-7F9C-47E1-831F-EE8BB81ADAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1911B88B-2C1B-494C-95B8-47C7FFB6248C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08FB320-0E34-40B6-9BFA-DD21F65F99E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9DEAD0-E077-4FC9-9BE6-6CD2F2729BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F413591-7937-408E-AD77-67F6BF4E204A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A419EBB7-F076-412A-B6EC-AE6A551F21FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0359C86B-003A-446C-B880-575300B53C99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E696FB-F432-4022-A868-4151B1DF2517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F272D642-B132-480B-A235-6A990FEF47E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F710BFC3-F5DE-498C-9669-A87F16ADCA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05ADA7EF-DC67-4830-97C7-EFF14FD2F327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D594BCB-7FF8-417D-AC6D-B38881A075E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC86CC6-C3E2-497D-8E81-9B10C97AA008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C41DD4-4E0C-42A1-9D57-D89BEC35A6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D54002D-D37E-4730-A8B9-5164F8426E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "6DB75703-655A-48FB-AE4A-69BE7E2D9112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21824",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21886",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=175965&release_id=446778",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewvc/ledger-smb/trunk/login.pl?r1=53&r2=69",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445817/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sql-ledger.org/cgi-bin/nav.pl?page=news.html&title=What%27s%20New",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=175965&release_id=446778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://svn.sourceforge.net/viewvc/ledger-smb/trunk/login.pl?r1=53&r2=69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445817/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sql-ledger.org/cgi-bin/nav.pl?page=news.html&title=What%27s%20New",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3739",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-13T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en la función CIDAFM en X.Org 6.8.2 y XFree86 X server permite a un usuario local ejecutar código de su elección a través de archivos Adobe Font Metrics (AFM) artesanales con un número modificado de métrica del caracter (StartCharMetrics), lo cual conduce a un desbordamiento de búfer basado en montón."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x.org:6.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86D1247-A4A5-4868-9A58-1905E34240A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7695FA-5B00-4175-88A8-B71091E4653A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21864",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21889",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21890",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21900",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21904",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21908",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21924",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22332",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22560",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102714-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102780-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-190.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-191.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=412",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:164",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0665.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0666.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445812/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19974",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-344-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3581",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3582",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0322",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-614",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10305",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102714-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102780-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-190.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-191.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0666.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445812/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-344-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3740",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-13T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función scan_cidfont en X.Org 6.8.2 and XFree86 X server , permite a un usuario local ejecutar código de su elección a través de la fuentes de datos(1) CMap y (2)CIDFont con contadores modificados en las secciones  (a) begincodespacerange, (b) cidrange, y (c) notdefrange"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x.org:6.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86D1247-A4A5-4868-9A58-1905E34240A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfree86_project:xfree86_x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7695FA-5B00-4175-88A8-B71091E4653A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21864",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21889",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21890",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21894",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21900",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21904",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21908",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21924",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22141",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22332",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22560",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23907",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016828",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102780-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-190.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-191.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=411",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:164",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0665.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0666.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445812/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/19974",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-344-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3581",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3582",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0322",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28890",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-614",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9454",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102780-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-190.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-191.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0665.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0666.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445812/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-344-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Visual Basic (VB) 6 has an unknown impact (\"overflow\") via a project that contains a certain Click event procedure, as demonstrated using the msgbox function and the VB.Label object."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Visual Basic (VB) 6 tiene impacto desconocido (\"desbordamiento\") mediante un proyecto que contiene cierto procedimiento de eventos Click, como se ha demostrado usando la función msgbox y el objeto VB.Label."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_basic:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D281B3-B2E0-4E36-B1BD-83865AE4B3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://silversmith.persiangig.com/PoC.rar",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445784/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://silversmith.persiangig.com/PoC.rar",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445784/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[sipssys] parameter.  NOTE: the product's documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en sipssys/code/box.inc.php en Haakon Nilsen simple, sistema integrado de publicaciones (SIPS) 0.3.1 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro config[sipssys]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sips:sips:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.1",
            "matchCriteriaId" : "E48E7A7C-FB63-49F1-94E3-6D02FD944F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sips:sips:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "263CC1D9-EF68-4BCF-9724-A41AD981193C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sips:sips:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFC87B4-B132-4EAF-ABD8-03300741073F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sips:sips:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF5942C-AC68-424E-9E35-4BA116D43529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sips:sips:0.3.0pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337900B6-E769-4FF5-968D-5804619F6044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sips:sips:0.3.0pl2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F608C80-06DC-4553-B4C9-1D3954D42771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/box.inc.php?revision=1.9&view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-February/001268.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445770/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19945",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/3245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/box.inc.php?revision=1.9&view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-February/001268.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445770/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/3245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in tiki-g-admin_processes.php in Tikiwiki 1.9.4 allow remote attackers to execute arbitrary SQL commands via the (1) pid and (2) where parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en tiki-g-admin_processes.php en Tikiwiki 1.9.4 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) pid y (2) where."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175D43FD-450F-443E-831B-B8091BE7054F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tikiwiki.cvs.sourceforge.net/tikiwiki/tiki/tiki-g-admin_processes.php?view=log",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackers.ir/advisories/tikiwiki.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445790/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19947",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tikiwiki.cvs.sourceforge.net/tikiwiki/tiki/tiki-g-admin_processes.php?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackers.ir/advisories/tikiwiki.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445790/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for (1) rss_fetch.inc.php or (2) rss_parse.inc.php, which reveals the path in various error messages."
      }, {
        "lang" : "es",
        "value" : "Kellan Elliott-McCrea MagpieRSS permite a atacantes remotos obtener información sensible mediante una petición directa a (1) rss_fetch.inc.php o (2) rss_parse.inc.php, lo cual revela la ruta en varios mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kellan_elliott-mccrea:magpierss:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69C4CED-9F95-4D37-964F-86F8A787D5BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1564",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445729/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445729/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the (1) adminname and (2) adminpass parameters.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en index.php en CMS.R. 5.5 permite a un atacante remoto ejecutar comandos SQL de su elección a través de los parámetros (1)adminname y (2) adminpass. NOTA: algunos de estos detalles se obtuvieron de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms.r.:cms.r.:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64789D0D-6C42-484B-9C07-D6FA3DAB407B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21860",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445789/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28877",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445789/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter.  NOTE: The view vector is already covered by CVE-2006-3586.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en Jetbox CMS permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del campo parámetro. NOTA: El vetor visto está actualmente cubierto por  CVE-2006-3586.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEE445-FE0A-4186-9AD1-3893BCC75EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445652/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter.  NOTE: The relative_script_path vector is already covered by CVE-2006-2270."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en phpthumb.php en Jetbox CMS permite a un atacante remoto ejecutar código PHP de su elección a través de una URL con el parámetro includes_path. NOTA: el vector relative_script_path está incluido por CVE-2006-2270."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEE445-FE0A-4186-9AD1-3893BCC75EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445652/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the OriginalImageData parameter to phpthumb.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados(XSS) en Jetbox CMS permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección, tal y como se demuestra a través del parámetro OriginalImageData a phpthumb.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEE445-FE0A-4186-9AD1-3893BCC75EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445652/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jetbox CMS allows remote attackers to obtain sensitive information via a direct request for certain files, which reveal the path in an error message."
      }, {
        "lang" : "es",
        "value" : "Jetbox CMS permite a un atacante remoto obtener información sensible a través de una respuesta directa de ciertos ficheros, los cuales revelan el camino en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CEE445-FE0A-4186-9AD1-3893BCC75EB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445652/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445652/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary code via the svr_rootPhpStart parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de fichero en bits_listings.php en IDevSpot PhpLinkExchange 1.0 permite a un atacante remoto ejecutar código de su elección a través del parámetro svr_rootPhpStart."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:phplinkexchange:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F19236F-E4B4-4230-AFE2-0564E18CC8AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445780/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445780/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en user_add.php en IDevSpot PhpLinkExchange 1.0 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro msg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:phplinkexchange:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F19236F-E4B4-4230-AFE2-0564E18CC8AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445780/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445780/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for (1) 404.php, (2) akismet.php, (3) archive.php, (4) archives.php, (5) attachment.php, (6) blogger.php, (7) comments.php, (8) comments-popup.php, (9) dotclear.php, (10) footer.php, (11) functions.php, (12) header.php, (13) hello.php, (14) wp-content/themes/default/index.php, (15) links.php, (16) livejournal.php, (17) mt.php, (18) page.php, (19) rss.php, (20) searchform.php, (21) search.php, (22) sidebar.php, (23) single.php, (24) textpattern.php, (25) upgrade-functions.php, (26) upgrade-schema.php, or (27) wp-db-backup.php, which reveal the path in various error messages.  NOTE: another researcher has disputed the details of this report, stating that version 2.0.5 does not exist. NOTE: the admin-footer.php, admin-functions.php, default-filters.php, edit-form-advanced.php, edit-link-form.php, edit-page-form.php, kses.php, locale.php, rss-functions.php, template-loader.php, and wp-db.php vectors are already covered by CVE-2006-0986. The edit-form-comment.php, vars.php, and wp-settings.php vectors are already covered by CVE-2005-4463. The menu-header.php vector is already covered by CVE-2005-2110."
      }, {
        "lang" : "es",
        "value" : "WordPress de 2.0.2 a 2.0.5 permite a un atacante remoto obtener información sensible a través de una respuesta directa para (1) 404.php, (2) akismet.php, (3) archive.php, (4) archives.php, (5) attachment.php, (6) blogger.php, (7) comments.php, (8) comments-popup.php, (9) dotclear.php, (10) footer.php, (11) functions.php, (12) header.php, (13) hello.php, (14) wp-content/themes/default/index.php, (15) links.php, (16) livejournal.php, (17) mt.php, (18) page.php, (19) rss.php, (20) searchform.php, (21) search.php, (22) sidebar.php, (23) single.php, (24) textpattern.php, (25) upgrade-functions.php, (26) upgrade-schema.php, o (27) wp-db-backup.php, lo cual revela el camino en  varios mensajes de error. NOTA: otro investigador ha impugnado los detalles de este informe, indicando que no existen en la versión 2.0.5. NOTA: los vectores admin-footer.php, admin-functions.php, default-filters.php, edit-form-advanced.php, edit-link-form.php, edit-page-form.php, kses.php, locale.php, rss-functions.php, template-loader.php, and wp-db.php están incluidos por CVE-2006-0986. Los vectores edit-form-comment.php, vars.php, y wp-settings.php están incluidos en CVE-2005-4463. El vector menu-header.php está incluido en CVE-2005-2110."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F05A1F-2227-4166-807B-1BDE2EA8F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECE66B3-3696-4E98-AF63-DF2FB256A6FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75BB382-6B47-4C6A-BF94-80443BEB1A23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/445374/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445471/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445604/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445374/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445471/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445604/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Abidia (1) O-Anywhere and (2) Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing."
      }, {
        "lang" : "es",
        "value" : "La transmisión de las credenciales de autentificacinó en Abidia (1) O-Anywhere y (2) Abidia Wireless en texto plano, permite a un atacante remoto obtener infomación sensible a través del olfateo (sniffing)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abidia:abidia_wireless:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADA6560-E93D-45CF-B25F-44484537B814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abidia:o-anywhere:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0728EE49-EB8D-4116-8F60-9BA8EF88A0E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.airscanner.com/security/06070101_abidia_oanywhere.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445608/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.airscanner.com/security/06070101_abidia_oanywhere.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445608/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header."
      }, {
        "lang" : "es",
        "value" : "ScaryBear PocketExpense Pro 3.9.1 utiliza una llave internamente registrada para proteger un fichero de datos cuyo contenido se almacena en texto plano, lo cual permite a un usuario local deshabilitar la validación y tener acceso al archivo modificando cierto valor en la cabecera del fichero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scarybear:pocketexpense_pro:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4667C14-5DF4-4A97-9A67-8B1B78E402CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://airscanner.com/security/06062602_pocketexpensepro.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445607/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://airscanner.com/security/06062602_pocketexpensepro.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445607/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en news/include/customize.php en Web Server Creator 0.1 permite a un atacante remoto ejecutar código PHP de su eleción a través de una URL con el parámetro l."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:web_server_creator:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B3AC91-7C8A-4466-9E00-187C951449EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445725/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445725/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in delete.php and (2) the error parameter in error.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IdevSpot TextAds, permite a un atacante remoto inyectar una secuencia de comandos web o HTML de su elección a través de (1) el parámetro id en delete.php y (2) el parámetro error en error.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:textads:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB335C4-5253-4EB7-98B9-523B105FA046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445745/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19932",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445745/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) xagent, (2) xpath, (3) xreferer, and (4) xdns parameters in (a) admin/plugins/NP_Log.php, and the (5) pitem parameter in (b) admin/plugins/NP_Poll.php; and allow remote authenticated users to execute arbitrary SQL commands via the (6) pageRef parameter in (c) admin/plugins/NP_Referrer.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en F-ART BLOG:CMS 4.1, permite a un atacante remoto ejecutar comandos SQL de su eleccióna través de lso parámetros 1) xagent, (2) xpath, (3) xreferer, y (4) xdnsen en (a) admin/plugins/NP_Log.php, y el parámetro pitem en (b)admin/plugins/NP_Poll.php; y permite a un usuario remoto validado ejecutar comandos SQL de su elección a través del parámetro (6)pageRef en (c)admin/plugins/NP_Referrer.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f-art_agency:blog_cms:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67834E0-FAB2-45FD-94B9-22333FDB856F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogcms.com/wiki/changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hackers.ir/advisories/blogcms.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445538/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogcms.com/wiki/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hackers.ir/advisories/blogcms.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445538/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4749",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 allow remote attackers to execute arbitrary PHP code via the include_location parameter in (1) activate.php, (2) configure.php, (3) fileop.php, (4) getimg.php, (5) ipblocked.php, (6) register.php, (7) showrecent.php, (8) showtophits.php, (9) usrmanag.php, (10) viewer_bottom.php, (11) viewer_content.php, and (12) viewer_top.php.  NOTE: The login.php and confirm.php vectors are already covered by CVE-2006-4594."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en PHP Advanced Transfer Manager (phpATM) 1.20 permite a un usuario remoto ejecutar código PHP de su elección a través del parámetro include_location en (1) activate.php, (2) configure.php, (3) fileop.php, (4) getimg.php, (5) ipblocked.php, (6) register.php, (7) showrecent.php, (8) showtophits.php, (9) usrmanag.php, (10) viewer_bottom.php, (11) viewer_content.php, y (12) viewer_top.php. NOTA: Los vectores login.php y confirm.php están recogidos en CVE-2006-4594."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8587D302-C1C5-4C47-A1F4-87F1B344D0D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/445742/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28874",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445742/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the config[openi_dir] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en openi-admin/base/fileloader.php en OPENi-CMS 1.0.1, y posiblemente anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL con el parámetro config[openi_dir]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openi-cms_group:openi-cms:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FB48C82-4D99-4A18-9B38-6981E3F75B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openi-cms_group:openi-cms:1.0.1_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1403395-926C-427B-B643-7D715DE440D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bb.domaindlx.com/bingung/shellcore/advisories.asp?bug_report=display&infamous_group=103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21874",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19952",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2344",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bb.domaindlx.com/bingung/shellcore/advisories.asp?bug_report=display&infamous_group=103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en index.php en Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro errcode."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laurentiu_matei:expandable_home_page_cms:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C27AB9-59F5-4027-8822-EDAB075B198B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016823",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445727/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19948",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28860",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445727/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter."
      }, {
        "lang" : "es",
        "value" : "Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 permite a un atacante remoto obtener la ruta de la instalación a través de una consulta al módulo del motor, probablemente con un parámetro de acción no válido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laurentiu_matei:expandable_home_page_cms:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C27AB9-59F5-4027-8822-EDAB075B198B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21877",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016823",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445727/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445727/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en index.php en PHProg anterior a 1.1 permite a un atacante remoto leer fichero de su elección a través de la secuencia ..(punto punto) en parámetro lang."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:phprog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873263FF-913C-4A86-AEF2-D85BF3685406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115796646100433&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21849",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pconfig.com/cdg393/adviso/PHProg.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19957",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115796646100433&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pconfig.com/cdg393/adviso/PHProg.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nComScripts, PHProg, 1.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call.  NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en PHProg anterior a 1.1, permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro album, el cual se usa en una llamada a opendir. NOTA: la misma publicación primaria se puede utilizar para el acceso completo de la trayectoria con un parámetro no válido que revele la ruta deinstalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comscripts:phprog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873263FF-913C-4A86-AEF2-D85BF3685406"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115796646100433&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21849",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pconfig.com/cdg393/adviso/PHProg.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19957",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115796646100433&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.pconfig.com/cdg393/adviso/PHProg.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nComScripts, PHProg, 1.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en alpha.php en phpMyDirectory 10.4.6 y anteriores, permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro letter. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.6",
            "matchCriteriaId" : "C182C14B-CB46-4577-8B70-548EE85B83EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B552DA-6D35-4BDF-A97B-B88CC16D0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62587DB1-B135-4F27-B77C-DE0EF917FC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6647056C-687E-4F30-B576-6A438B611745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51DB83A-67F2-4476-A074-22512E8A793D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34F0F60-FB88-47AA-8113-EC4B933AB80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE4E6B-AC7B-4500-93F9-0415EFE3FD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4723D3-BD9E-46DB-9783-7A97C8AC78C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A75D22-2E40-4986-BB33-73E1AAC50475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9E3CEA-09D1-4E51-84D8-39340219E774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E69696-0885-4BF0-BD89-F81FDBB0AEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C63AAC-8753-4769-B98E-E732715DAB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8F8C7A-755C-4DDE-A182-74B1889E7E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0C2118-C89D-452B-9270-7C85EE6D5298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D109078-AD74-4275-9069-A9226DF56F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851B7ABF-3116-46B1-8B21-A372A4075290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C65CBE-E83D-42F4-90F0-270530F6711C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34363AB0-E74F-4A92-AAC8-4EB42EC5488A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53172EEE-835A-4E3D-80F0-8215FEF0A16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26285314-4863-467A-80B3-B845DCB924B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA77316-49F3-4B40-93F0-FE3189AE31E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2138D7A2-920A-4EB6-952D-AB5E6054FDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "D957E6B7-5F58-40CC-8776-522AAC1EFA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D9547C-4436-4CC5-8AC1-2132CD1C140D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B05F8B-0A58-4C99-9208-942D065F5FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "54BFC064-E947-4520-92C9-F2904AB8BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE1576E-7C26-4295-9A38-A7A78ECA000A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D687BFB-D590-4329-B7C6-CAA3F4F4FF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F5AA88-4609-4AEF-B210-775A0F0A4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EB8A68-D56B-49F3-9DCB-560B57450D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB92CB8-51D7-48AA-894B-4E2A7F2378FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E1BC45-9657-494E-9DF2-64A12DA9DF59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECB010-BC7C-4EF7-A310-9DF0B03A7AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD48843-99B9-476A-9172-1FCBABE4424F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13659DC1-1DF8-4B42-A42E-A3286F80D470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB83757-68FA-4ADF-B456-3855B790F08C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en alpha.php en phpMyDirectory 10.4.6 y anteriores, permite a un atacante remoto ejecutar comando SQL de su elección a través del parámetro letter. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4.6",
            "matchCriteriaId" : "C182C14B-CB46-4577-8B70-548EE85B83EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B552DA-6D35-4BDF-A97B-B88CC16D0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62587DB1-B135-4F27-B77C-DE0EF917FC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6647056C-687E-4F30-B576-6A438B611745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51DB83A-67F2-4476-A074-22512E8A793D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C34F0F60-FB88-47AA-8113-EC4B933AB80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE4E6B-AC7B-4500-93F9-0415EFE3FD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4723D3-BD9E-46DB-9783-7A97C8AC78C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A75D22-2E40-4986-BB33-73E1AAC50475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9E3CEA-09D1-4E51-84D8-39340219E774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E69696-0885-4BF0-BD89-F81FDBB0AEFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C63AAC-8753-4769-B98E-E732715DAB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8F8C7A-755C-4DDE-A182-74B1889E7E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0C2118-C89D-452B-9270-7C85EE6D5298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D109078-AD74-4275-9069-A9226DF56F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851B7ABF-3116-46B1-8B21-A372A4075290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C65CBE-E83D-42F4-90F0-270530F6711C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34363AB0-E74F-4A92-AAC8-4EB42EC5488A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53172EEE-835A-4E3D-80F0-8215FEF0A16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26285314-4863-467A-80B3-B845DCB924B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA77316-49F3-4B40-93F0-FE3189AE31E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2138D7A2-920A-4EB6-952D-AB5E6054FDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "D957E6B7-5F58-40CC-8776-522AAC1EFA29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D9547C-4436-4CC5-8AC1-2132CD1C140D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B05F8B-0A58-4C99-9208-942D065F5FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "54BFC064-E947-4520-92C9-F2904AB8BBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE1576E-7C26-4295-9A38-A7A78ECA000A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D687BFB-D590-4329-B7C6-CAA3F4F4FF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F5AA88-4609-4AEF-B210-775A0F0A4295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EB8A68-D56B-49F3-9DCB-560B57450D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB92CB8-51D7-48AA-894B-4E2A7F2378FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E1BC45-9657-494E-9DF2-64A12DA9DF59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECB010-BC7C-4EF7-A310-9DF0B03A7AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD48843-99B9-476A-9172-1FCBABE4424F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13659DC1-1DF8-4B42-A42E-A3286F80D470"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accomplishtechnology:phpmydirectory:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB83757-68FA-4ADF-B456-3855B790F08C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21875",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the (1) linkopentype, (2) linkrender, (3) link_class, and (4) link_id parameters in (a) links.php; the (5) searchquery parameter in (b) users.php; and the (6) download_category_class parameter in (c) download.php.  NOTE: an e107 developer has disputed the significance of the vulnerability, stating that \"If your admins are injecting you, you might want to reconsider their access.\""
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en la sección admin de e107 0.7.5 permite a los usuarios remotos validados ejecutar comandos SQL de su elección a través de los parámetros (1) linkopentype, (2) linkrender, (3) link_class, y (4) link_id en (a) links.php; el parámetro searchquery(5) en (b) users.php; y el parámetro (6) download_category_class en (c) download.php. NOTA: el desarrollador e107 ha discutido sobre el significado de la vulnerabilidad, indicando que “si tus administradores te están inyectando, tú deberías de reconsiderar su acceso\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.7.5",
            "matchCriteriaId" : "453D7323-69AA-4283-8C6A-70A03624139A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C34EB0-7685-4346-81A2-371C1F19F6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB26A2A4-B0DE-4130-AA5F-76D5394A0614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90909932-AD39-4648-8621-5866F0C4AB12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F208E9-3C39-4D00-B1E0-5CD0B315E740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27C7402F-54C9-4FDA-B181-85941DDC7010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F77F5E4-8636-41F5-9A80-055CC0FC0346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AB914E-D616-45D2-A451-1C247B8B6E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA03C1AC-97EA-47ED-9558-A7CA48420AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32695A82-B042-46B7-9CB4-20F3446E0C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716A040-0CBE-4402-AB2A-1621B1240B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81627355-AB45-4D47-8DD2-4087E6971EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437C4251-886C-4E94-B7F6-AE34A0142A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "761D4EE9-0D54-4370-BCBC-3C23481C127B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E11E3F9E-708E-44CB-8FD2-E4961028B732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F38EB42-437C-4381-B36A-FD3DB78E724E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6454D949-83A2-4F69-92E1-BBCD84F21BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4B3A4-2563-4C06-A484-5C02CD8F7408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E80F85C-61AD-49C0-9EBF-B79F728F6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE097FC-A525-4599-9FDA-1A011EECE767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF51B0D-E020-491D-92A9-D2A01A7417AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692341-8DF2-4943-853A-4AAF1F313914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75197306-53DB-4C94-959B-C46D3FB1F42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C5C91C-C1C5-457D-9E09-24C7CACCC280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB88C92-4F62-471A-8C10-C13C890E764F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5585DC36-C65F-4FCA-B26F-E4A7901863E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7DD56C-66F7-421C-B211-07C7856112C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E14B108-228D-454F-AF16-9D9086E4C10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C91C45-9A96-4E69-8A0A-D619AB45BC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7C68F4-9ECD-41A9-B4AE-48F028841428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AA824A-CEE6-460B-A668-92FC3A822305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D17F613A-6BE1-4B45-8E40-8E44E0EEA756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB33E9-9AB8-482A-A196-768A2085A49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD5CAD-0EB8-48F2-AF80-510584A83446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E294FE-F0A2-45FC-BB67-D988DD89D2AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9640315B-7F04-4F5A-B213-8FAF509DFF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF75A192-81C1-4F58-A660-7EFE4F33E58B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://e107.org/e107_plugins/bugtrack/bugtrack.php?id=3195&action=show",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445005/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://e107.org/e107_plugins/bugtrack/bugtrack.php?id=3195&action=show",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445005/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the attacker have Administrative rights."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/admin_board.php with an avatar_path parameter ending in .php%00."
      }, {
        "lang" : "es",
        "value" : "phpBB 2.0.21 no maneja adecuadamente los nombres de ruta que finalicen en %00, lo cual permite a un usuario remoto administrador validado actualizar ficheros de su elección, según se puede ver a través de la consulta a admin/admin_board.php con el parámetro avatar_path terminado en .php%00."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CC6700-8863-4E86-9232-6CBFCF19FBC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=388120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/28871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2008/dsa-1488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/Odocument221.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445788/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=388120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2008/dsa-1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/Odocument221.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445788/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the attacker has Administrative rights."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote authenticated administrative users to upload arbitrary files and execute code, as demonstrated by a query to admin_options.php with an avatars_dir parameter ending in %00. NOTE: this issue was originally disputed by the vendor, but the dispute was withdrawn on 20060926."
      }, {
        "lang" : "es",
        "value" : "admin/admin_board.php en PunBB 1.2.12 no maneja adecuadamente los nombres de ruta de un avatar que finalizen en %00, lo cual permite a un usuario remoto administrador validado el envío de ficheros de su elección y ejecutar código, como lo demostrado lanzado una sentencia al admin_options.php con el parámetro avatars_dir acabado en %00. NOTA: Esta vulnerabilidad fue originalmente impugnada por el proveedor, pero la impugnación fue retraída el 20060926.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.punbb.org/viewtopic.php?id=13255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001041.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001052.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001055.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/Odocument221.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445788/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446420/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.punbb.org/viewtopic.php?id=13255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001055.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/Odocument221.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445788/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446420/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the attacker has Administrative rights.",
      "vendorComments" : [ {
        "organization" : "PunBB",
        "comment" : "PunBB 1.2.13 has been released to fix this vulnerability. The updated version is available at http://punbb.org/downloads.php.",
        "lastModified" : "2006-09-28T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Benjamin Pasero y Tobias Eichert RSSOwl permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de un alimentador (feed) web, según lo demostrado por ciertos casos de prueba de los lectores RSS y Atom de Robert Auger y Caleb Simay."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:benjamin_pasero_and_tobias_eichert:rssowl:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D28677-DB00-4BED-A207-72105FE108BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.sourceforge.net/project/rssowl/rssowl%20classic%201.0%20%28do%20not%20use%29/1.2.3/rssowl_1_2_3_src.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cgisecurity.com/papers/RSS-Security.ppt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.sourceforge.net/project/rssowl/rssowl%20classic%201.0%20%28do%20not%20use%29/1.2.3/rssowl_1_2_3_src.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cgisecurity.com/papers/RSS-Security.ppt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Luke Hutteman SharpReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Luke Hutteman SharpReader permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un web feed, según se ha demostrado en ciertos caso de prueba en los RSS de Robert Auger y Caleb Sima y en la suite de prueba de lectura de feed de Atom."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luke_hutteman:sharpreader:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B8C1E9-4109-436F-A1AD-FAA244C9A15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cgisecurity.com/papers/RSS-Security.ppt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29073",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cgisecurity.com/papers/RSS-Security.ppt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Ykoon RssReader permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del alimentador web, según quedó demostrado por ciertos casos de prueba del lector RSS y Atom de Robert Auger and Caleb Sima."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rssreader:rssreader:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34183B53-DEC4-4E7F-B59F-2B89E0EE2A74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cgisecurity.com/papers/RSS-Security.ppt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cgisecurity.com/papers/RSS-Security.ppt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie."
      }, {
        "lang" : "es",
        "value" : "IBM Lotus Domino Web Access (DWA) 7.0.1 no expira una ficha de autenticación de terceros ligera (LtpaToken) en el logout, lo cual permite a atacantes remotos obtener privilegios de usuario interceptando la cookie LtpaToken."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:lotus_domino_web_access:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F46CAB34-95D7-4728-B29E-FE766DF257F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21245589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.fishnetsecurity.com/csirt/disclosure/ibm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445821/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21245589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.fishnetsecurity.com/csirt/disclosure/ibm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445821/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en comon.php en Thomas LETE WTools 0.0.1-ALPH permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámerto include_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wtools:wtools:0.0.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C7AFB3-B65F-46AE-B362-F6A030DF002D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445815/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19962",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445815/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR DG834GT Wireless ADSL router running firmware 1.01.28 allows attackers to cause a denial of service (device hang) via a long string in the username field in the login window."
      }, {
        "lang" : "es",
        "value" : "Enrutador NETGEAR DG834GT Wireless ADSL que funcionando con firmware 1.01.28 permite a un atacante remoto provocar un denegación de servicio(caída del dispositivo) a través de una cadena larga en el campo del nombre de usuario en la ventana de entrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netgear:dg834gt:1.01.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2ED4D3-8E8C-45C0-8CF5-B3A707CB1A46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445819/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445819/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attackers to read arbitrary files via a .. (dot dot) in the ide parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorio en print.php en Stefan Ernst Newsscript (también conocido como WM-News) 0.5 beta permite a un atacante remoto leer ficheros de su elecciòn a través de .. (punto punto) en el parámetro ide."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ernst:newsscript:0.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D67AD5-932A-4C93-A632-918C49232F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21826",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445818/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445818/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta allow remote attackers to (1) read arbitrary local files via a .. (dot dot) sequence in the ide parameter in modify.php and (2) write to arbitrary local files via a .. sequence in the var parameter in add_go.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de directorio transversal en Stefan Ernst Newsscript (también conocido cómo WM-News) 0.5 beta, permite a un atacante remoto (1) leer un fichero local de su elección a través de la secuenca ..(punto punto) en el parámetro ide en modify.php y (2)escribir en un fichero local de su elección a través de la secuencia ..en el parámetro var en add_go.php. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ernst:newsscript:0.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D67AD5-932A-4C93-A632-918C49232F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21826",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/84154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/84154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via the (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, and (7) note parameters, which are stored in an article file.  NOTE: the original source of this vulnerability is unknown; the details are obtained from third party information and CVE post-disclosure analysis."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección estática directa de código en add_go.php en Stefan Ernst Newsscript (también conocido como WM-News) 0.5 beta permite a un atacante remoto ejecutar código PHP de su elección a través de los parámetros (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, y (7) note, lo cuales se alamacenan en un fichero de artículo. NOTA: la fuente original de esta vulnerabilidad es desconocida; los detalles se obtuverion a partir  de información de terceros y del análisis de revelaciones posteriores del CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ernst:newsscript:0.5_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4D67AD5-932A-4C93-A632-918C49232F2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21826",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/84155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3558",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/84155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP code via a URL in the abs_pfad parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión de archivo en abf_js.php en p4CMS 1.05 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro abs_pfad."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtasoft:p4cms:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153D4CFF-38A9-46CF-BAC9-81FD3896DFCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21891",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19971",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-13T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en menu.php en MiniPort@l 2.0 y anteriores permite a atacantes remotos ejecutar código PHP arbitrario mediante una URL en el parámetro skiny."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniportal:miniportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.5",
            "matchCriteriaId" : "09197AE3-72D8-41E4-8AF8-D56E6FD8E499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19949",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de cadenas de formato en Symantec AntiVirus Corporate Edition 8.1 hasta 10.0, y Client Security 1.x hasta 3.0, permiten a usuarios locales ejecutar código de su elección mediante cadenas de formato en (1) Protección de Alteración en el Cliente (Tamper Protection) y (2) Mensajes de Notificación de Alerta de Virus."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DFD4CB-40A1-4D70-97AC-0941826F28CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C856CC4-0AAE-4539-A57B-0160AA5751F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA2590E-DFB0-4B72-99BC-B49AD97A4969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251E7DE8-4485-438E-B62D-1BF508ECCCF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "742DB20E-AB26-4CF4-A383-BDCF3FBA448F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E4BCD7-E441-417A-8C52-E1DE80AD67CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D86F7A-F2C0-471C-8EA8-E1C7230F25AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844A6963-F60C-4D48-8445-9056C99201D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "3AA02AEB-362B-4A09-92E3-D6D8BB4B6CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "D9E85FD6-9E89-4497-854C-60A20639CE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "2860637E-6FA5-445A-86B5-E9F2D2D7DD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.2:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4B9AED5E-2D66-4EB2-95CC-158D909AAE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "CAC5389A-8B18-40C4-A3E0-E50B6AA724FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://layereddefense.com/SAV13SEPT.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446041/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://layereddefense.com/SAV13SEPT.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446041/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ColdFusion MX 7 and 7.01 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors involving a crafted command."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en ColdFusion Flash Remoting Gateway de Adobe ColdFusion MX 7 y 7.01 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) mediante vectores no especificados relacionados con un comando artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21866",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19984",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components (CFC) within a sandbox from CFML templates that are located outside of the sandbox."
      }, {
        "lang" : "es",
        "value" : "Adobe ColdFusion MX 7 y 7.01 permite a usuarios locales evitar las restricciones de seguridad y llamar a componentes (CFC) encerrados en un cajón de arena (sandbox) desde plantillas CFML que están situadas fuera del cajón de arena."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21866",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-13.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19985",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados(XSS) en Adobe ColdFusion MX de 6.1 a 7.02 inclusive, permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificadas con la aparición de una página de error de ColdFusion."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720437A6-66D3-4DD6-A40F-23FC107AD710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21858",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-14.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19982",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web script or HTML via the nb_connecte parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en haut.php de ForumJBC 4, permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro nb_connecte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jbc:forumjbc:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95609BBD-9B29-409B-871D-39A2947E424D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1573",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445877/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19992",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445877/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc."
      }, {
        "lang" : "es",
        "value" : "El HotPlug CMS almacena la información sensible bajo la raíz de la web con un control de acceso escaso, que permite a los atacantes remotos leer la contraseña del admin y las credenciales de la base de datos a través de una petición a includes/class/config.inc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotplug_cms:hotplug_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC96E1DF-720D-4E69-9A1C-E746F9CEF367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445761/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445761/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN."
      }, {
        "lang" : "es",
        "value" : "Sun StorEdge 6130 Array Controllers con firmware 06.12.10.11 y anteriores, permiten a un atacante remoto provocar un denegación de servicio (reinico del controlador)a través de una inundación de tráfico en la red."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:sun:storedge_6130_arrays:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "06.12.10.11",
            "matchCriteriaId" : "AE8ADD1B-5524-47BA-91AB-72FF85016340"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102601-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102601-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to cause a denial of service by sending a VTP version 1 summary frame with a VTP version field value of 2."
      }, {
        "lang" : "es",
        "value" : "El VLAN Trunking Protocol (VTP) característico en Cisco IOS 12.1(19) permite a un atacante remoto provocar una denegación de servicio a través del envio de una versión de VTP 1 marco resumen con un valor del campo de la versión de VTP de 2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4944AFEF-D002-4C86-958A-4EB753399FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/821420",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phenoelit.de/stuff/CiscoVTP.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445896/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445938/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/821420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phenoelit.de/stuff/CiscoVTP.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445896/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed context."
      }, {
        "lang" : "es",
        "value" : "El VLAN Trunking Protocol (VTP) característico en Cisco IOS 12.1(19) y CatOS permite a un atacante remoto provocar una denegación de servicio con el envío de una actualización de VTP con un valor de revisión de 0x7FFFFFFF, el cual se incrementa a 0x80000000 y es interpretado como un número negativo en un contexto de señales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4944AFEF-D002-4C86-958A-4EB753399FB5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catos:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3424FF-8507-4C7A-8858-EA89931A74DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21902",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/175148",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phenoelit.de/stuff/CiscoVTP.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445896/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445938/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/175148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phenoelit.de/stuff/CiscoVTP.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445896/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en la VLAN Trunking Protocol (VTP) característico de Cisco IOS 12.1(19), permite a un atacante remoto ejecutar código de su elección a través de un nombre largo de VLAN en un anuncio resumen de VTP tipo 2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.1\\(19\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4944AFEF-D002-4C86-958A-4EB753399FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21896",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/542108",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phenoelit.de/stuff/CiscoVTP.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445896/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445938/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3601",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/542108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phenoelit.de/stuff/CiscoVTP.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445896/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445938/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en el DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) para el Internet Explorer 6.0 SP1 en chino y posiblemente en otras distribuciones de, permite a un atacante remoto ejecutar código de su elección a través de manipulaciones desconocidas en los argumentos del método KeyFrame, relacionado posiblemente con un desbordamiento del número entero, según lo demostrado por daxctle2, y una vulnerabilidad diferente a la CVE-2006-4446."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21910",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/377369",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/925444.mspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445898/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446065/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446084/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446085/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446246/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3593",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/377369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/925444.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445898/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446065/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446084/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446085/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446246/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID.  NOTE: Some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en las herramientas de Creative Commons anteriores a la versión 3.0. Permite a los atacantes remotos ejecutar comandos SQL a través de la URL de forma manual, y que usan para llenar campos en el fichero ID. NOTA: Algunos detalles se obtienen a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cchost:cchost:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9",
            "matchCriteriaId" : "907484AD-6033-43D8-A3AC-5FB378C7A1AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21822",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=445818&group_id=80503",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19978",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=445818&group_id=80503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/functions_portal.php en Vitrax Premodded phpBB 1.0.6-R3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:vitrax_premodded_phpbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.6_r3",
            "matchCriteriaId" : "9A91C80C-26E3-4222-8DF5-8097EBD51016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21882",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/functions.php en phpBB XS 0.58 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbbxs:phpbb_xs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.58",
            "matchCriteriaId" : "0DD88FEA-6BCF-43FC-9967-10B971A08571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21841",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445816/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445816/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name.  NOTE: Some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en FutureSoft TFTP Server Multithreaded (MT) 1.1 permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente  la ejecución de código de su elección mediante el envío de un paquete especialmente construido al puerto 69/UDP, el cual dispara el desbordamiento cuando construye un nombre de ruta absoluto. NOTA: Algunos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futuresoft:tftp_server_multithreaded:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9095B478-7152-4E6F-B047-0863E78F1D0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21844",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19925",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php."
      }, {
        "lang" : "es",
        "value" : "src/index.php en WebSPELL 4.01.01 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos evitar la autenticación y obtener información sensible almacenada en la base de datos, mediante un parámetro userID modificado en una operación de escritura en admin/database.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:N/A:N",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.01.01",
            "matchCriteriaId" : "D2D5A0A0-990E-40DF-AF8B-14171FE1447C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511CDAC-8292-4696-A0BE-7DC321CF6500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE7D68-2638-4ED7-AFA5-8B9FC398B5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F5B8975-C514-457E-95FE-84FF3C44275F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cms.webspell.org/index.php?site=files&file=15",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21881",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19975",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cms.webspell.org/index.php?site=files&file=15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in squads.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the squadID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en squads.php en WebSPELL 4.01.01 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro squadID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.01.01",
            "matchCriteriaId" : "D2D5A0A0-990E-40DF-AF8B-14171FE1447C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511CDAC-8292-4696-A0BE-7DC321CF6500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cms.webspell.org/index.php?site=files&file=11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21881",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://translate.google.com/translate?hl=en&sl=de&u=http://webspell.org/&sa=X&oi=translate&resnum=2&ct=result&prev=/search%3Fq%3Dwebspell%26hl%3Den%26lr%3D",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cms.webspell.org/index.php?site=files&file=11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://translate.google.com/translate?hl=en&sl=de&u=http://webspell.org/&sa=X&oi=translate&resnum=2&ct=result&prev=/search%3Fq%3Dwebspell%26hl%3Den%26lr%3D",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Moodle 1.6.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante parámetros no especificados para (1) dos/index.php o (2) files/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_Notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21899",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_Notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el blog/edit.php del Moodle 1.6.1 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro format como el almacenado en la variable $blogEntry, lo que no es correctamente manejado por la función insert_record, lo que llama al _adodb_column_sql en la capa adodb (lib/adodb/adodb-lib.inc.php), y no convierte este tipo de datos a un entero (int)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21899",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016877",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001040.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446227/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19995",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20085",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3591",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28904",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29001",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446227/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups."
      }, {
        "lang" : "es",
        "value" : "Moodle 1.6.1 y anteriores permite a atacantes remotos obtener información sensible mediante (1) help.php y (2) otros vectores no especificados relacionados con las copias de seguridad programadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_Notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21899",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_Notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message.  NOTE: some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "AlphaMail anterior a 1.0.16 permite a usuarios locales obtener información sensible mediante la funcionalidad de registro de eventos, que muestra contraseñas no cifradas en un mensaje de error. NOTA: algunos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B87F8E-B9DB-4606-AB7F-C53549136B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A70FD38-A84C-48E4-8843-DE04B6DDA517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D48B4F-CA37-434B-9A89-5BD574936956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE78C33D-5BEF-4D48-8E60-C9D21565E293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9EB4C-43DA-4B10-9E12-F8DCB2D83BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD084E5-418E-4D0B-8F7E-7EB5D43EF2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67DD7470-4861-4EFD-A8A3-75D1B21DD525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD81998-6B35-4278-9D89-3B4838AA2159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713E74CA-D0E4-4A03-B461-E713A9AC7A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A114BF3E-F9F6-4784-B1C2-AFA4ACFB81B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB89CB3-6FEA-4B9C-9278-EA28B70EA1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170FAB77-F67A-4FD5-BCAD-44DC10BDB080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DE799F-D423-46EC-BF5C-EAC563D58DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFAFB51-F1E2-4489-9AA0-4B7761130780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A71B93-BBA6-450C-A14A-7DBDDE1E4CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphamail:alphamail:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018A660A-94CD-4DD2-8F2F-429A514D79F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21871",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://whizzo.uoregon.edu/public/src/alphamail/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://whizzo.uoregon.edu/public/src/alphamail/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to \"yes\", allows remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/log.inc.php en Telekorn SignKorn Guestbook (SL) 1.3 y anteriores, cuando register_globals está habilitado y el parámetro _SESSION[permission] está configurado como \"yes\", permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro dir_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telekorn:signkorn_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "D48C9281-9B77-4A77-9823-9CAF14C0A010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telekorn:signkorn_guestbook:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58D0577-76B7-4ACB-BEA5-31DE19E4EA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telekorn:signkorn_guestbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2D4CFA-C9DA-4EC2-A1F6-A6355D9475E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21878",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.telekorn.com/forum/showthread.php?t=1427",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.telekorn.com/forum/showthread.php?t=1427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Open Movie Editor 0.0.20060901 allows local users to cause a denial of service (system crash) or execute arbitrary code via a long project name in an open_movie_editor_project XML tag."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Open Movie Editor 0.0.20060901 permite a usuarios locales provocar una denegación de servicio (caída del sistema) o ejecutar código de su elección mediante un nombre largo de proyecto en una etiqueta XML open_movie_editor_project."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_movie_editor:open_movie_editor:0.0.20060901:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9CC3B0-BECC-463E-80AE-8AAC0F3E0304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19938",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28854",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2338",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4790",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-14T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339."
      }, {
        "lang" : "es",
        "value" : "verify.c en GnuTLS anterior a 1.4.4, cuando usamos una llave RSA con exponente 3, no maneja   correctamente el exceso de datos en el campo  digestAlgorithm.parameters al generar un hash, el cual permite a un atacante remoto falsificar una firma PKCS #1 v1.5 que es firmada por esa llave RSA y evita que GnuTLS verifique correctamente X.509 y otros certificados que utilicen PKCS, es una variante de CVE-2006-4339."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8856E1B1-8007-42E5-82EF-4700D4DEEDDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CF40D3-CE03-4C2A-8EEF-EB5989291806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC60D4CC-922C-4941-A400-0CBEAC7F31D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "754A0D19-A17A-4007-8355-497D14CFCBF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8140DBE1-8116-4051-9A57-07535586E0AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CC840D-AD01-4EE2-8652-06742A6286BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84224A82-6D58-4000-A449-20C1632DAE85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A466931C-769A-4A28-B072-10930CE655E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F621DC-7967-4D97-A562-02E7033C89C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776E5481-399F-45BC-AD20-A18508B03916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D7F972-9128-4A4D-8508-B38CE2F155E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D56873-E8C5-4E4B-BB85-6DCF6526B453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54FE4766-32D0-491E-8C71-5B998C468142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F980857-2364-466A-8366-BD017D242222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2E649D-5C45-4412-927B-E3EDCE07587C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066175C2-6E96-4BAE-B1A6-B23D25547FAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869D3010-67AE-44D0-BB8F-D9C410AEA1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "052B40C1-C29B-4189-9A45-DAE873AB716D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B588AAE0-8C3F-47C7-812F-8C97BD8795E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB9154B-4254-4F33-8DB2-5B96E2DA4931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EA79D1-2EA8-4040-A5B5-C93EE937945A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D05BC3-1315-4AC7-884D-41459272C94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.8.1a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2901E522-6F54-4FA5-BF22-463A9D6B53D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738F29DA-9741-4BA5-B370-417443A3AC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52173492-1031-4AA4-A600-6210581059D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB636C36-2884-4F66-B68A-4494AEAF90C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4231BD-201D-4B10-9E35-B9EEFC714F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9200C3-0F46-4238-918B-38D95BF11547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024A9511-7CB4-4681-8429-0FE7FC34DF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CEF5ED-87A5-44B2-8A4A-9896957C057B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B84A4F5-CED7-4633-913F-BE8235F68616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97564ABD-F9CE-4B3C-978A-1622DE3E4924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB6EC88-DCE0-439B-89CD-18229965849B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001205.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001212.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21942",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21973",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22084",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22097",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22226",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25762",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-15.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102970-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1182",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gnu.org/software/gnutls/security.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:166",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0680.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-348-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3635",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2289",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28953",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001205.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001212.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102970-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gnu.org/software/gnutls/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0680.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-348-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL commands, as demonstrated by the icerikno parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en icerik.asp en TualBLOG 1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección, como ha sido demostrado con el parámetro icerikno."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tualblog:tualblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EEB184D-5AC8-4942-8287-CFAB1F60FF14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445918/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20002",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2362",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445918/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, (3) admin.php, (4) fpw.php, (5) news.php, (6) search.php, (7) signup.php, (8) submitnews.php, and (9) user.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la cadena de consulta (PATH_INFO) en (1) contact.php, (2) download.php, (3) admin.php, (4) fpw.php, (5) news.php, (6) search.php, (7) signup.php, (8) submitnews.php, y (9) user.php. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DAAA4F-B893-4914-8538-E68DDA211225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/30979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30984",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30985",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30987",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19997",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/19997.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/30979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/19997.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.11 and B.11.23 before 20060912 allows local users to cause a denial of service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el software de transporte Address and Routing Parameter Area (ARPA) en HP-UX B.11.11 y B.11.23 anteriores al 12/09/2006 permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-193.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445893/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19999",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-193.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445893/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter (strtopicsortord variable)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en forum.asp de Snitz Forums 2000 3.4.06 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro sortorder. (variable strtopicsortord)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6A7A03-4580-4FB9-958E-992717F2AE72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445902/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446043/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20004",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445902/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446043/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados  (XSS) en tag.php en CloudNine Interactive CJ Tag Board 3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un evento JavaScript en una etiqueta url en BBcode en el parámetro cjmsg."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cj_design:cj_tag_board:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFC4925-A3D8-440D-BEAF-358AA94BB22E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://evuln.com/vulns/137/summary.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445913/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://evuln.com/vulns/137/summary.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445913/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history."
      }, {
        "lang" : "es",
        "value" : "SQL-Ledger anterior a 2.4.4 almacena una contraseña en una cadena de petición, lo que puede permitir a atacantes (locales o remotos dependiendo del contexto) obtener la contraseña a través de un campo Remitente (Referer) o el historial del navegador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dws_systems_inc.:sql-ledger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.3",
            "matchCriteriaId" : "D32BBDC3-E248-482D-95A4-877B0255647F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1579",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and \"bad indexes\", a different vulnerability than CVE-2005-4048 and CVE-2006-2802."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en ffmpeg para xine-lib anterior a 1.1.2 podría permitir a atacantes (locales o remotos dependiendo del contexto) ejecutar código de su elección mediante \"índices erróneos\" en un archivo AVI especialmente construido. Es una vulnerabilidad diferente a CVE-2005-4048 y CVE-2006-2802."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "61A8D011-D000-4E99-B4F9-3C7EDCDF3166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A905719D-4520-4374-B3A7-55034728B85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2899EF34-824B-4893-8636-64A83EC5885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAB10333-6C25-4359-BB3F-D76468170825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200609-09.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_73_mono.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-358-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xinehq.de/index.php/news",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200609-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_73_mono.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-358-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xinehq.de/index.php/news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4437",
      "sourceIdentifier" : "PSIRT-CNA@flexerasoftware.com",
      "published" : "2006-09-14T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in (1) tags.php, (2) sign.php, and (3) admin/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección Eval en Tagger LE permite a un atacante remoto ejecutar código PHP de su elección a través de una consulta de cadena en (1) tags.php, (2) sign.php, y (3) admin/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:venture_nine:tagger_le:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0241B1-7BD3-4DAC-94EF-55DE9739957C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21449",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-62/advisory/",
        "source" : "PSIRT-CNA@flexerasoftware.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1584",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/28755",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/28756",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.osvdb.org/28757",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446010/100/0/threaded",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20023",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3606",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28941",
        "source" : "PSIRT-CNA@flexerasoftware.com"
      }, {
        "url" : "http://secunia.com/advisories/21449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-62/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c.  NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de buffer en libavcodec en ffmpeg anterior a 0.4.9_p20060530 permite a un atacante remoto causar denegación de servicio o la posibilidad de ejecutar código de su elección a través de multiples vectores no especificados en (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, y (13) tta.c. NOTA: es probable que esta sea una vulnerabilidad diferente a la CVE-2005-4048 y CVE-2006-2802."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AEE1977-E9E0-4BFF-B33B-B083E49E51F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6979C17-0BC6-47D1-9B73-254D84306A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204C7C05-3441-4DB0-8702-D99C8FCB381E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD897CA-4F73-437B-9649-951DD2D37B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=133520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21921",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23010",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-09.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_73_mono.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20009",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-358-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=133520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-09.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_73_mono.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-358-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are executed with raised privileges."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en Deja Vu, según es usado en Roxio Toast Titanium 7 y posiblemente otros productos, permite a un usuario local ejecutar código de su elección a través de archivos temporales, incluido dejavu_manual.rb, que es ejecutado con aumento de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roxio:toast:7:*:titanium:*:*:*:*:*",
            "matchCriteriaId" : "0BA29139-259C-480F-9AB2-7A904435BF3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.netragard.com/pdfs/research/ROXIO_RACE_NETRAGARD-20060624.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.netragard.com/pdfs/research/ROXIO_RACE_NETRAGARD-20060624.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a \"second format string vulnerability\" as found by the vendor."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en el servicio Real Time Virus Scan de Symantec AntiVirus Corporate Edition 8.1 a la 10.0, y Client Security 1.x a la 3.0, permite a un usuario local ejecutar código de su elección a través de un vector no espeficicado relacionado con los mensajes de notificación de alertas, un vector diferente a CVE-2006-3454, una \"segunda vulnerabilidad de formato de cadena\" según lo encontrado por el vendedor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DFD4CB-40A1-4D70-97AC-0941826F28CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C856CC4-0AAE-4539-A57B-0160AA5751F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE15AE1D-8647-444F-90F0-FC658A3AC344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C03FA86-F2E6-4E41-8368-E917C91D7837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*",
            "matchCriteriaId" : "95BF74F0-40F1-4395-AC85-E6B566950C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*",
            "matchCriteriaId" : "994CB184-AFE8-4673-ACE8-085813F1E71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*",
            "matchCriteriaId" : "85CF6FFB-4189-4558-A70D-DE6D4C0C1F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*",
            "matchCriteriaId" : "31D6A148-A92C-4FCA-8762-16764D62C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6E2EA2-88DA-4DF0-9AA3-3E3D2C80C04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA2590E-DFB0-4B72-99BC-B49AD97A4969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB47C16B-5221-4D64-BDB2-65D072A66C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204F2046-F116-45D7-9256-179A3B59886A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0C67C0-3CF1-4BAD-A673-9B783E1D0724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274EA5DA-9519-46DE-B11E-87BDF1978E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044C020A-0BCC-4037-BC32-73385A0BE019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102D0C6A-31B8-4275-A805-4CA446D1C77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA18147D-E618-4902-8837-5824240DD50E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D357CC-EAD0-42E3-B38C-BE2DC44D154E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201403B4-3B5C-4F77-ADAE-7A553D4D58F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D19926-AB65-4C06-8C44-7EA9B070FD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F27E94F-F6D6-4C40-878F-BF952658A909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA71038-2D4E-4366-A3D1-AD85251B3E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC689F12-84C6-4B52-970F-DAF6B00B4A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251E7DE8-4485-438E-B62D-1BF508ECCCF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "742DB20E-AB26-4CF4-A383-BDCF3FBA448F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E4BCD7-E441-417A-8C52-E1DE80AD67CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D86F7A-F2C0-471C-8EA8-E1C7230F25AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "3AA02AEB-362B-4A09-92E3-D6D8BB4B6CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "E626F14C-FDE9-4C6A-8CE7-B99CD4FEE485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EC4CFE5A-4D51-405D-B92E-37DE4E617ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "727A116A-D18C-4F3F-A6A8-2C6107FFB8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4A6612F1-4CA8-427A-AED4-854F943BA3D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "D9E85FD6-9E89-4497-854C-60A20639CE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "2860637E-6FA5-445A-86B5-E9F2D2D7DD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EDF0DA40-1AC4-4610-AEAC-F431E23BAEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "018D1F3B-BAFC-461E-B833-9E0F98A6533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.2:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4B9AED5E-2D66-4EB2-95CC-158D909AAE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.4:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "56D54011-9B09-4C63-8301-609C03E51099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21884",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-14T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and \"code injection.\""
      }, {
        "lang" : "es",
        "value" : "La secuencia de comandos del receptor de fan-out de linux y UNIX permite a un usuario local ejecutar comandos de su elección a través de vectores sin especificar que implican ciertas varibles de entorno e \"inyecciòn de código\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netiq:identity_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97268D6-952C-4D63-A34E-18583925718B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21888",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016853",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974421.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20016",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3607",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974421.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4340",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-15T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339.  NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462."
      }, {
        "lang" : "es",
        "value" : "La librería Mozilla Network Security Service (NSS) anterior a 3.11.3, usada en Mozilla Firefox anterior a 1.5.0.7, Thunderbird anterior a 1.5.0.7, y SeaMonkey anterior a 1.0.5, cuando se usa una llave RSA con exponente 3, no maneja correctamente los datos en una firma, lo que permite a atacantes remotos falsificar firmas para SSL/TLS y certificados de correo electrónico; una vulnerabilidad muy similar a la CVE-2006-4339. NOTA: el 7/11/2006, Mozilla publicó un aviso afirmando que estas versiones no estaban completamente parcheadas por MFSA2006-60. Las nuevas correcciones para 1.5.0.7 se tratan en CVE-2006-5462."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "553BE4FA-523B-4AED-90D4-6FFCFD91E4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.11.2",
            "matchCriteriaId" : "F61D6DE3-BD82-4A09-9537-806FAEEA8FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "2DCE4360-4064-47F8-B4B1-12D15D31BE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "4C246DC3-0BAF-4FE2-B160-EE223E8F3CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21903",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22044",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22226",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22446",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23883",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016858",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016859",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016860",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102781-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-60.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-66.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_55_ssl.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-312A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3622",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3899",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0293",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30098",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11007",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102781-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-60.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-66.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_55_ssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-312A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4565",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-15T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a \"minimal quantifier.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de bufer en Mozilla Firefox anterior a 1.5.0.7, Thunderbird anterior 1.5.0.7, y SeaMonkey anterior 1.0.5 permite a un atacante remoto provocar denegación de servicio (crash) y la posibilidad de ejecutar código de su elección a través de expresiones regulares de JavaScript con una \"cuantificación mínima\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "553BE4FA-523B-4AED-90D4-6FFCFD91E4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "2DCE4360-4064-47F8-B4B1-12D15D31BE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "4C246DC3-0BAF-4FE2-B160-EE223E8F3CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016848",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-57.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28955",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11421",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-57.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4566",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-15T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set (\"[\\\\\"), which leads to a buffer over-read."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a 1.5.0.7, Thunderbird anterior 1.5.0.7, y SeaMonkey anterior 1.0.5 permite a atacantes remotos provocar denegación de servicio(crash) a través de expresiones regulares mal formadas JavaScript que finalizan con una barra invertida en un juego de caracteres indeterminado (\"[\\\\\"), que conduce a un bufer a sobre leerse."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "553BE4FA-523B-4AED-90D4-6FFCFD91E4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "2DCE4360-4064-47F8-B4B1-12D15D31BE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "4C246DC3-0BAF-4FE2-B160-EE223E8F3CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016848",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/141528",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-57.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28958",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9637",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/141528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-57.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4567",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-15T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious certificate for the Mozilla update site, which can then be used to install arbitrary code on the next update."
      }, {
        "lang" : "es",
        "value" : "Mozilla Firefox anterior a 1.5.0.7 y Thunderbird anteror a 1.5.0.7 hacen que fuera facil que los usuarios aceptaran certificados auto-firmados para el mecanismo de auto-actualización, el cual   pudo permitir a atacantes con la complicidad del usuario usando suplantación DNS engañando a los usuarios con la visita a un sitio malicioso y aceptando un certificado malicioso para la actualización de Mozilla, el cual puede ser usado para instalar codido de elección del atacante en la siguiente actualización."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "553BE4FA-523B-4AED-90D4-6FFCFD91E4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "4C246DC3-0BAF-4FE2-B160-EE223E8F3CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016850",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016851",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-58.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10488",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-58.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4568",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-15T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks."
      }, {
        "lang" : "es",
        "value" : "Mozilla FireFox anterior a 1.5.0.7 y SeaMonkey anterior a 1.0.5 permite a un atacante remoto evitar el modelo de seguridad e inyectar contenidos dentro de una sub-estructura de otro sitio a través de targetWindow.frames[n].document.open(), el cual facilita la suplantación y otros ataques."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "553BE4FA-523B-4AED-90D4-6FFCFD91E4F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "2DCE4360-4064-47F8-B4B1-12D15D31BE13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016855",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016856",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-61.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=343168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28961",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-61.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=343168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4569",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-15T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The popup blocker in Mozilla Firefox before 1.5.0.7 opens the \"blocked popups\" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks."
      }, {
        "lang" : "es",
        "value" : "El bloqueador de ventanas emergentes de Mozilla Firefox anterior a 1.5.0.7 abre las \"vetanas emergentes bloqueadas\" mostrando el contexto de la barra de localización en vez del subframe en el cual el popup se originó, que puede hacer más fácil para que atacantes remotos con la complicidad del usuario conduzcan a ataques de secuencias de comandos en sitios cruzados(XSS)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "553BE4FA-523B-4AED-90D4-6FFCFD91E4F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016849",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-62.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28957",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-62.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4570",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-15T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with \"Load Images\" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message."
      }, {
        "lang" : "es",
        "value" : "Mozilla thunderbird anteriores a 1.5.0.7 y SeaMonkey anterior a 1.0.5, con la \"carga de imágenes\" (Load Images) habilitada, permite a un  atacante remoto con la complicidad del usuario evitar la configuración que deshabilita el JavaScript a través de un fichero remoto XBL en un mensaje que se carga cuando el usuario mira y reenvía o responde al mensaje original."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "2DCE4360-4064-47F8-B4B1-12D15D31BE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "4C246DC3-0BAF-4FE2-B160-EE223E8F3CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016866",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016867",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-63.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28962",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10892",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-63.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_54_mozilla.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4571",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-15T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en FireFox anteriores a 1.5.0.7, Thunderbird anteriores 1.5.0.7 y SeaMonkey anterior a 1.0.5 permite a un atacante remoto provocar denegación de servicio(crash), corrupción de memoria, y posiblemente ejecutar código de su elección a través de vectores no especificados, algunos de los cuales implican JavaScript, y posiblemente imágenes grandes o adición de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "2DCE4360-4064-47F8-B4B1-12D15D31BE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.6",
            "matchCriteriaId" : "4C246DC3-0BAF-4FE2-B160-EE223E8F3CD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016846",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016847",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016848",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-64.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11728",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mozilla.org/security/announce/2006/mfsa2006-64.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0675.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0676.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0677.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-350-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-351-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-352-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-354-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-361-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in X.25 on HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en X.25 sobre HP-UX B.11.00, B.11.11 y B.11.23 permite a usuarios locales provocar una denegación de servicio no especificada a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446030/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446030/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la revisión de usuario de Drupal 4.7 anterior a 1.19 (12/09/2006) permite a a atacantes remotos inyectar secuencias de comandos web de su elección o HTML  a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal_userreview_module:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11969CD3-7379-4CA0-B0BA-05A75169E8F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/83954",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21907",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/83954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en eMuSOFT emuCMS 0.3 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web de su elección o HTML a través de (1) consultas o (2) parámetros de la página."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emusoft:emucms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "C1067E5E-66AD-4F47-B3A1-6D5C3DF47467"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21883",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security-net.biz/adv/D13906a.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security-net.biz/adv/D13906a.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad del fichero remoto de inclusión PHP en scripts/news_page.php en Reamday Enterprises Magic News Pro 1.0.3 y anteriores, permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro script_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reamday_enterprises:magic_news_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "E2EBD57B-D909-43D5-8A2C-3DC0C8E1C2C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21887",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446032/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446032/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4824",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums (QSF) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the set[include_path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el fichero de inclusión remota en lib/activeutil.php en Quicksilver Forums (QSF) 1.2.1 y anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro set[include_path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quicksilver_forums:quicksilver_forums:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "2C7B99F5-3144-4DD9-A013-1E0CCB39CA25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.quicksilverforums.com/index.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19991",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.quicksilverforums.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in cl_files/index.php in SoftComplex PHP Event Calendar 1.5.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) ti, (2) bi, or (3) cbgi parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados(XSS) en cl_files/index.php en SoftComplex PHP Event Calendar 1.5.1 y posiblemente anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) ti, (2) bi o (3) cbgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softcomplex:php_event_calendar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "AE315BD2-C9DF-4527-9254-C7AA0BD6A3B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445879/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20001",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445879/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to the fixed version"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP remoto en fichero de inclusión en bottom.php en Shadowed Portal 5.599 y anteriores, permite a atacantes remotos ejecutar comandos PHP de su elección a través de una URL en el parámetro root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowed_portal:shadowed_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.599",
            "matchCriteriaId" : "7BE0E77C-90C6-4CE8-B192-A781D91A8983"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the art parameter to (1) admin.php, (2) chart.php, (3) modes.php, or (4) stats.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de PHP remoto en el fichero de inclusión en Vmist Downstat 1.8 y anteriores, permite a los atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro art a (1) admin.php, (2) chart.php, (3) modes.php, o (4) stats.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmist:downstat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "96637861-180E-4ABB-BB5E-E05DB8AA870C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmist:downstat:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4B0FEE-9BAD-48E7-AFC8-99DA7E90A6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmist:downstat:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E478F1B-55BC-42BA-9207-931AE1DC8F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmist:downstat:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4BC1BA8-F46D-498E-BE0E-3D4B0E9E0E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmist:downstat:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3F87F7-5C65-4670-8DA8-B5DCB22AFE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmist:downstat:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DDCA63-8FAF-450E-96F7-61F38110BEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmist:downstat:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8CA925-5062-460A-84CE-A4A22F73C5DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21914",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20007",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP remoto en el fichero de inclusión, en  zipndownload.php en PhotoPost de 4.0  al 4.6, permite a un atacante remoto ejecutar código PHP de su elección a través de la URL en el parámetro PP_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36E11FE-5E1F-4BF9-A223-64B74984C5DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D19ECFF-EAE7-4FCB-BE21-B0C08FF65AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FD043F-9519-497E-B9AA-855A9F540FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61B2CAF8-3EE5-4B08-A7F5-D0166B78FF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F216FDF2-6E00-49FD-A6D4-DFF1958EB029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EC4189-43E3-4E9A-A3B0-958A2C0F1116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F04E77C-C9ED-4CAE-964C-6AB395BFEBE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446031/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20028",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446031/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the (1) blog-category-description, (2) blog-entry-title, (3) rss-enclosure-url, (4) technorati-tagsi, or (5) blog-category-name parameter in a blog post."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en David Czarnecki Blojsom 2.31 permite a un atacante remoto inyectar secuencias de comandos web o HTML de sue elección a través de los parámetros (1) blog_category_description, (2) blog_entry_title, (3) rss_enclosure_url, (4) technorati_tagsi, o (5) blog_category_name en un correo del blog."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blojsom:blojsom:2.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A379A2B-CBAA-4B5C-8312-23F1FC5749F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/425861",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20026",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/425861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nBlojsom, Blojsom, 2.32"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of blogTemplate."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en EditBlogTemplatesPlugin.java en David Czarnecki Blojsom 2.30 permite a un atacante remoto tener un impacto desconocido a través del envío de una petición HTTP con un cierto valor de blogTemplate."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blojsom:blojsom:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FB6BB7-E3F1-4E96-97D4-190219BC5CBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jira.blojsom.com/jira/browse/BLOJSOM-130",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://jira.blojsom.com/jira/browse/BLOJSOM-130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nBlojsom, Blojsom, 2.31"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IP over DNS is now easy (iodine) before 0.3.2 has unknown impact and attack vectors, related to \"potential security problems.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IP sobre DNS es ahora fácil (idonea) anterior a 0.3.2 tiene un impacto desconocido y ataca vectores, relacionado con \"problemas potenciales de seguridad\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iodine:iodine:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78703DBF-3596-4912-9F9D-07FF4F675499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iodine:iodine:0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCDDFEF-28E1-4764-84DA-A94157BE8017"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://code.kryo.se/iodine/CHANGELOG.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21872",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20017",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://code.kryo.se/iodine/CHANGELOG.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nIodine, Iodine, 0.3.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via a long username."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer en el servicio de Telnet en VersoNetPerformes FRAD ACT SDM-95xx 7.xx (R1) y anteriores, SDM-93xx 10.x.x (R2) y anteriores, y SDM-92xx 9.x.x (R1) y anteriores permite a un atacante remoto provocar una denegación de servicio (reboot) y posiblemente ejecutar código de su elección a través de un nombre de usuario grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9200_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2137CBC5-0143-4345-8761-1A125EE6A41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9300_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54AE9128-4AFD-4723-A853-51DE1BF9416A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9500_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B1E014-B51F-4292-8F7F-DB2121DF4F7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21876",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445883/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19989",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445883/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allow remote attackers to cause a denial of service (hang or reboot) via an ICMP packet with the same destination and source address and port, aka the \"Land\" vulnerability."
      }, {
        "lang" : "es",
        "value" : "Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) y anteriores, SDM-93xx 10.x.x (R2) y anteriores, y SDM-92xx 9.x.x (R1) y anteriores permiten a un atacante remoto provocar denegación de servicio (colgar o reinciar) a través de un paquete ICMP con el mismo destinatario y la dirección fuente y puerto, también conocido como la vulnerabilidad \"Land\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9200_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2137CBC5-0143-4345-8761-1A125EE6A41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9300_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54AE9128-4AFD-4723-A853-51DE1BF9416A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9500_series:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B1E014-B51F-4292-8F7F-DB2121DF4F7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21876",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445883/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445883/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP remoto en fichero de inclusión  en index.php en Jule Slootbeek phpQuiz 0.01 permite a un atacante remoto ejecutar comandos PHP de su elección a través de una URL en el parámetro pagename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpquiz:phpquiz:0.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "287E1A12-DECD-41B3-8527-3FB44C6E150A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-07.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446039/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20019",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-07.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446039/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bluview Blue Magic Board (BMB) (aka BMForum) 5.5 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) db_mysql_error.php, (4) langlist.php, (5) sendmail.php, or (6) style.php, which reveals the path in various error messages."
      }, {
        "lang" : "es",
        "value" : "Bluview Blue Magic Board (BMB) (BMForum) 5.5 permite a un atacante remoto obtener información sensible a través de una petición a (1) foote.php, (2) header.php, (3) db_mysql_error.php, (4) langlist.php, (5) sendmail.php, o (6) style.php, el cual revela el camino eb varios mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluview:blue_magic_board:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8DD74E-494F-4FE6-87C7-EC2E4B8CBEE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446037/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446037/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-4227."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.php en DCP-Portal SE 6.0 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro username. NOTA: los vectores lostpassword.php y calendar.php están incluidos en CVE-2005-3365, y el vector search.php está cubierto por CVE-2005-4227."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:se_6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C709CD59-67A8-4353-BA87-554B78C34F92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445996/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445996/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "evaluatorSolution" : "if magic_qoutes_gpc = off\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) library/lib.php and (2) library/editor/editor.php.  NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de PHP remoto en el fichero de inclusión en DCP-Portal SE 6.0 permite a un atacante remoto ejecutar código PHP de su elección a través de la URL en el parámetro root en (1)library/lib.php y (2)library/editor/editor.php. NOTA: la misma edición primaria se puede utilizar para el acceso completo del camino con un parámetro inválido que revele el camino de la instalación en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:se_6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C709CD59-67A8-4353-BA87-554B78C34F92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437510/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445996/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1905",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/437510/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445996/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/1905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-15T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) root_url and (2) dcp_version parameters in (a) admin/inc/footer.inc.php, and the root_url, (3) page_top_name, (4) page_name, and (5) page_options parameters in (b) admin/inc/header.inc.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en DCP-Portal 6.0 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de (1) root_url y(2) parámetros dcp_version en (a) admin/inc/footer.inc.php, y el root_url, (3) page_top_name, (4) page_name, y (5) parámetros de page_options en(b) admin/inc/header.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeworx_technologies:dcp-portal:se_6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C709CD59-67A8-4353-BA87-554B78C34F92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445996/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445996/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en inc/claro_init_local.inc.php en Claroline 1.7.7 y anteriores, como el utilizado en el Dokeos y posiblemente otros productos, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro extAuthSource[newUser]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7",
            "matchCriteriaId" : "7185CC69-7401-4A48-8962-281317D17E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91188982-B73C-45A1-8FA1-66557D50A6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E91C51-AA00-452E-B009-CD8EC50F9E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C266BDCB-4533-4697-A13A-22B8DC4A33EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE56684-B98B-4642-93F3-8C6297246E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BD0DDD-51EC-40E6-8E6D-635E449478AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EA479E-E55B-45B2-9DD2-4E2D088AF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E88D7C-9610-4052-BBB0-F5FDC596DBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF4F90D-CBF7-4539-9AA3-2A667C888670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F49508-B7BC-4971-B3A7-279DCE45E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34591E8D-FF34-4E78-BA9B-C8C22C38E1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC9DF44-4883-422F-9FB8-57CDE7EA6C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD502BE-8878-461D-AA04-AA450F652DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D5CC64-234C-4519-B902-381A023B83CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB68ED4-C23E-4873-A29A-7644460D25FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D42A87A-A157-44AA-BEF3-09A42CE15D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9A617-7752-4573-89E3-BA4608BD7174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B7036F-9200-4096-82BE-BAABF961DBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A11527A7-4436-4363-84B1-64372C7DD07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1CBF1F-DC8B-4504-B1D0-6A482E8A4DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6.4_p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B7D8774-7008-4266-9522-4A702E1DF270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CEF83F-742D-4CE3-979F-0B0D0FF30DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.6_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "687FBDBF-7E0A-44BD-8DD9-070AAA0D5513"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21931",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21948",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.claroline.net/wiki/index.php/Changelog_1.7.x#Modification_between_claroline_1.7.7_and_1.7.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00112-09142006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00112-09142006&",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20056",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3638",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3639",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.claroline.net/wiki/index.php/Changelog_1.7.x#Modification_between_claroline_1.7.7_and_1.7.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00112-09142006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00112-09142006&",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled.\r\nThis vulnerability is addressed in the following product release:\r\nClaroline, Claroline, 1.7.8"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tc_config[app_root] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/footer.html.inc.php en TeamCal Pro 2.8.001 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro tc_config[app_root]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:george_lewe:teamcal_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.001",
            "matchCriteriaId" : "A670C9F8-3928-49DA-97A1-31BC59A5A19C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21933",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20030",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20036",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en Citrix Access Gateway con Advanced Access Control (AAC) 4.2 anterior al 14/09/2006, cuando AAC está configurado para usar autenticación LDAP, permite a atacantes remotos evitar la autenticación a través de vectores desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:access_gateway:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C3186D6-9A71-4B1A-8A2A-D801408E5AF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21941",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016874",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX110439",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX110950",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/658620",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20066",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX110439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.citrix.com/article/CTX110950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/658620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/28938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the Advanced Access Control option is set to use LDAP authentication.\r\nThis vulnerability is addressed by hotfix AAC420W004."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en Ipswitch WS_FTP Server 5.05 anterior al Hotfix 1 permiten a usuarios autenticados remotamente ejecutar código de su elección a través de comandos largos (1) XCRC, (2) XSHA1, o (3) XMD5."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:1.0.1eval:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFFF21C-9F80-4BFC-B71C-E534F42020BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:1.0.2eval:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1CFEE0-7707-4B3D-8E84-0C42F56F5666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:3.0_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B30C60A-2716-4464-A9CD-2649DC763037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A4DEB6-8E4B-4DAD-911C-DCC26D4C9DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0A22A5-FBBB-4B7D-A64D-8F021B60181F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:5.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA85C3EF-DAD2-4383-9E97-65B4D77A73E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.05",
            "matchCriteriaId" : "50BFB437-2855-401A-AD99-D20A51F2DA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A886D80F-D72C-4BDF-A65F-27CA82348C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:1.0.1.e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9BE1954-74C5-4A91-9C9A-C0647F281017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0D7240-62C8-4003-A840-98E818709D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:1.0.2.e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE6789D-5DA5-489F-A900-F4788286ACE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA99A58B-F751-4C04-B41B-CBE94998AA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D8225C-A74A-451E-9589-F1E00E4728D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3438AF-FCF1-4D77-83D5-27B9989F0683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843B6647-BF92-46D1-ADEE-92088D9AD1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B80A25-3860-4CF5-B8ED-5370EBB42455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B58011-9D3B-432C-93B1-47938F7E2D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50BE9ECB-4799-48BD-B3BE-7EE27FE3AA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBC59D2-405D-4374-812A-A3AEE0D6D594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755C3FB5-5D5B-4732-86F9-68A6612BC819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968C0544-A2F5-4FA6-A4B8-89113EE95B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E33B458B-F945-4D1A-81B7-F07CCC183C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D662A9-5D1B-465E-A4B1-A4C86BA207C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA7690C-8ADA-462E-B671-4D4CB243A483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B11EAC-796C-43E4-A150-F3FE3F19A058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71B59A7-9467-4729-9A24-D5291C059E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1D0E89-C64F-4027-BF44-8F7159A5AE21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21932",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nIpswitch, WS_FTP Server, 5.05 Hotfix 1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REP_CLASS parameter to (1) index.php, (2) arbo.php, (3) framepoint.php, (4) genpage.php, (5) lienvalider.php, (6) appreciation.php, (7) partenariat.php, (8) rechercher.php, (9) projet.php, (10) propoexample.php, (11) refererpoint.php, or (12) top50.php.  NOTE: this issue has been disputed by a third party researcher, stating that REP_CLASS is initialized in an included file before being used"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADO ** Múltiples vulnerabilidades PHP de inclusión remota de archivo en Brian Fraval Hitweb 3.0 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro REP_CLASS para (1) index.php, (2) arbo.php, (3) framepoint.php, (4) genpage.php, (5) lienvalider.php, (&) appreciation.php, (7) partenariat.php, (8) rechercher.php, (9) projet.php, (10) propoexample.php, (11) refererpoint.php, o (12) top50.php.\r\nNOTA: Esta vulnerabilidad ha sido impugnada por un investigador de terceras partes, que afirma que REP_CLASS se inicializa en un fichero incluido antes de se usado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hitweb:hitweb:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC7E8ED-ED55-4F69-84FE-3F8189EB90E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446219/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446567/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20060",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446219/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446567/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en header.php en MobilePublisherPHP 1.5 RC2 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro abspath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilepublisherphp:mobilepublisherphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5_rc2",
            "matchCriteriaId" : "09FCEAAF-B3AB-444D-BD23-13009D3B9A9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2007-April/001523.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21951",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2007-April/001523.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en system/_b/contentFiles/gBIndex.php en BolinOS 4.5.5 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro gBRootPath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bolinos:blinos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "08727075-3464-417B-8530-961A80C9A6AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21965",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446113/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20037",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2372",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446113/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en system/_b/contentFiles/gBHTMLEditor.php en BolinOS 4.5.5 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro gBRootPath. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bolinos:bolinos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "A8716382-13E4-47BE-AEDD-4EF5958A5FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bolinos:bolinos:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1557F88-1EAB-4F50-96BB-31E11D705184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bolinos:bolinos:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B905F3-91F5-4253-BDB7-C377732F2525"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/84179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/84179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL commands via the OrderBy parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en browse.asp en Quadcomm Q-Shop 3.5 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro OrderBy."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quadcomm:q-shop:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75F4364-F341-4CAA-8AEA-D00405A43DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21929",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446231/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20075",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446231/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en kategorix.asp en Haberx 1.02 hasta 1.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en kategorihaberx.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haberx:haberx:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28A9BE8-9E7D-46D3-821B-E61DCA621C4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haberx:haberx:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0436A0A1-4B23-4CC7-88D2-E7E2127EF8C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haberx:haberx:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84C697D-A8A7-431D-918D-EDD59027DB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haberx:haberx:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633F3877-ECF4-4113-B9A5-8D762D47B828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstorm.linuxsecurity.com/0609-exploits/haberx.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21960",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20038",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstorm.linuxsecurity.com/0609-exploits/haberx.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4246",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user."
      }, {
        "lang" : "es",
        "value" : "Usermin anterior a 1.220 (20060629) permite a atacantes remotos leer ficheros de su elección, posiblemente relacionado con que chfn/save.cgi no está manejando adecuadamente un parámetro shell vacío, lo cual provoca un cambio al shell de root en vez de al shell del usuario especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.210",
            "matchCriteriaId" : "26B92F53-3598-44F5-8CE1-A04A28EFF92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD41B8B-72C0-411F-83E7-A82E1642FA26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A99166-28DF-4651-985F-922DBB06687E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9EACC7-1464-4476-9AA1-50DD902A3489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD343610-8BE2-4916-AF30-66B21330D84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D54B4D9-5218-41F9-A701-F960199EE520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B352FF6B-989C-4540-B434-9452851F745C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83F9841-49C7-410A-891F-365BBA043D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.92:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711485C5-F16A-4481-AEE3-E2AF1BAA09DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5B9395-DCEA-4615-825E-1C4B42F25E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.94:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7162DD-DFE1-478D-B87C-28C393E20941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01D1150-FCDE-47F5-BFE6-F06A294D7B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D673B88-A9D9-4D22-9531-7F06791BC551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538021A3-2A6E-446F-B14D-4DCC7A470E55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.98:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1A2A26-1187-46BE-8EFC-F3C325679245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E70B0A6-31C9-4D78-B4B9-E75B45B6368C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C70274C3-7CA0-49A2-B63C-7DAF492CCD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C4A319-0EA6-47E0-831A-27530DCF714E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1009D90-9851-441B-A2E2-FA5B676E8182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934A3D3F-CF10-478C-9206-DB468BCA4702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B42570-F094-4C25-B246-6439D3FF4B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A30BB5-2C3F-4C39-8CDC-CC0CC280384C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753BF8DE-D225-4301-A6A6-50CD60B34234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC37A972-11D7-4C85-A8DC-5EDE808629F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA7131C0-4FE1-4D69-9B21-8A9BFADE2A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.090:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6499BF74-CA64-4192-A45F-0D8B30C1FF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E9BC53-C2EC-43B8-9B5D-40675CF4C335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4702AEBE-E774-4015-974C-761901D50697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC9875A-3D23-4E4B-9A18-F8F86A62E5DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.130:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AED1941-33C5-4C29-BC85-F43B0BE3920B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED34F-0D69-4A4F-B59B-15437E991075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usermin:usermin:1.150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B443FCF7-5949-4084-BA55-74F45A8ADB66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21968",
        "source" : "security@debian.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21981",
        "source" : "security@debian.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1509145&group_id=17457&atid=485894",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1177",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osreviews.net/reviews/admin/usermin",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/18574",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3668",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.webmin.com/uchanges.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29010",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1509145&group_id=17457&atid=485894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osreviews.net/reviews/admin/usermin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/18574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.webmin.com/uchanges.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nWebmin, Usermin, 1.220"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458."
      }, {
        "lang" : "es",
        "value" : "El módulo docutils en Zope (Zope2) desde 2.7.0 hasta 2.7.9 y desde 2.8.0 hasta 2.8.8 no maneja adecuadamente páginas web con el marcado reStructuredText (reST), lo cual permite a atacantes remotos leer ficheros de su elección vía una directiva csv_table, una vulnerabilidad diferente que CVE-2006-3458."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E296CD1C-2601-4A63-9E9D-38A39C84BF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9B22D-6EF3-4364-A016-041457C4DFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88153606-52FE-4C0B-88CD-B76538C19055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA38381-4C32-4C55-8116-341028D1888A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B294E38-65FD-474D-BABC-9447EF33202A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685805FD-1A33-480E-A313-255EDF0B5266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D827148D-4A8A-41DB-91B6-0049706D53D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0273EF1B-BC64-432F-8966-68547DFAD6BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A52CDCE-172C-4FAC-9015-ACF362E8E8A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84DFC911-D226-4F8C-840A-D5F6EBBBF0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234C776B-C053-484C-ADE4-ED270064943F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "244107E5-42B0-4695-BBC9-5B90AD0A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93785E75-3F82-471E-B802-6337A6469AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B34066B4-CE72-4271-9CFD-F725F7D17C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A40B0D1-1812-4BC7-AC7D-CCE6184A9DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81028DBB-7A75-4D27-8027-947F15CAA21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BCE60F-9081-44D3-87FC-396D1A954626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA09D22-779C-4E63-B216-B931FA11E014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:zope:2.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2759CCE-3A1F-4E3F-9832-8BF3AA4F20F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.zope.org/pipermail/zope-announce/2006-August/002005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21947",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1176",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zope.org/Products/Zope/Hotfix-2006-08-21/Hotfix-20060821/README.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://mail.zope.org/pipermail/zope-announce/2006-August/002005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zope.org/Products/Zope/Hotfix-2006-08-21/Hotfix-20060821/README.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2023-11-07T01:59:24.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Unspecified vulnerability in Microsoft Office 2000 (Chinese Edition) and Microsoft PowerPoint 2000 (Chinese Edition) allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as Trojan.PPDropper.E.  NOTE: on 20060919, Microsoft notified CVE that this is a duplicate of CVE-2006-0009"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \\Device\\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data."
      }, {
        "lang" : "es",
        "value" : "El driver \\Device\\SymEvent en Symantec Norton Personal Firewall 2006 9.1.0.33, y otras versiones del Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, y 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0 y 10.1, Symantec pcAnywhere 11.5 y Symantec Host, permite a usuarios locales provocar una denegación de servicio (caída del sistema) vía una información inválida, como ha sido demostrado llamando a DeviceIoControl para enviar la información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DFD4CB-40A1-4D70-97AC-0941826F28CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.0_b8.01.9378:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A56518F-41E9-455D-9AC1-98FFDCE295C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C856CC4-0AAE-4539-A57B-0160AA5751F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.425a:mr1:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE482AD-A0F8-4634-A3FE-08F112647648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.429c:mr2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FC66EB-2267-4B42-BD99-C4344DAE1C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE15AE1D-8647-444F-90F0-FC658A3AC344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C03FA86-F2E6-4E41-8368-E917C91D7837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*",
            "matchCriteriaId" : "95BF74F0-40F1-4395-AC85-E6B566950C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*",
            "matchCriteriaId" : "994CB184-AFE8-4673-ACE8-085813F1E71F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*",
            "matchCriteriaId" : "85CF6FFB-4189-4558-A70D-DE6D4C0C1F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*",
            "matchCriteriaId" : "31D6A148-A92C-4FCA-8762-16764D62C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6E2EA2-88DA-4DF0-9AA3-3E3D2C80C04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.501:mr9:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1B69D3-8A9C-481E-8891-1ACD8479CBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.0_build_8.01.9374:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D72649-92F9-4820-B5A5-A14B52714809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA2590E-DFB0-4B72-99BC-B49AD97A4969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_build_393:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766C850E-817E-41AB-B0FF-413513548BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB47C16B-5221-4D64-BDB2-65D072A66C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204F2046-F116-45D7-9256-179A3B59886A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0C67C0-3CF1-4BAD-A673-9B783E1D0724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274EA5DA-9519-46DE-B11E-87BDF1978E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044C020A-0BCC-4037-BC32-73385A0BE019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr6_b8.1.1.266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A0176BE-3D55-422B-9FDD-961A00CFAC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1_stm_b8.1.0.825a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3D7305-B8D0-4165-9F0F-50A49142EF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.1_build_9.0.1.1000:mr1:*:*:*:*:*:*",
            "matchCriteriaId" : "D934F853-C7E0-421E-9AF3-B7B49228722F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.2_build_9.0.2.1000:mr2:*:*:*:*:*:*",
            "matchCriteriaId" : "D608AACF-A4BC-49CE-BE49-E8F3AEF31DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.3_build_9.0.3.1000:mr3:*:*:*:*:*:*",
            "matchCriteriaId" : "3238894A-3C25-4CC8-A319-8AA7246FEC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.5_build_1100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E9F1EE-CB23-42DE-8787-7F477D16329F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0_scf_7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C2D813-C219-4FF3-9C3B-DBB855480492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0_stm_build_9.0.0.338:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A00A25-A52F-4E9D-AAD0-194171C772FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844A6963-F60C-4D48-8445-9056C99201D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D24019B-20F0-4B4D-86A5-9409698E6216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:host_ids:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F05B889-88D3-41AF-A79D-3E2F689BA1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*",
            "matchCriteriaId" : "A9415109-C554-40F6-851E-CC016951BDF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "595CDCD1-4E0B-49E4-B726-82FAA99EF70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.0.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "DBBAD310-3E2E-4E83-A605-47540668827F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.0.1.425a:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "F4341136-7821-4638-9F36-93361327250E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.0.1.425c:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "497BC653-98D7-41C5-94BB-2634B9C5BF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.0.1.501:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "094EED2C-F8FA-418B-B110-E44D90B9BA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.0.1.9374:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "15AEADC9-00B9-43BA-AABB-ADB7627CF0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.0.1.9378:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "39D769B1-B1D6-4F5C-9C66-00055D4A6618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "3AA02AEB-362B-4A09-92E3-D6D8BB4B6CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.0.825a:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "3A82AC27-8BE6-47F7-A6EC-F4C21373AA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "ECAA6170-5520-4AA9-8358-5F91FD10420E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "E626F14C-FDE9-4C6A-8CE7-B99CD4FEE485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EC4CFE5A-4D51-405D-B92E-37DE4E617ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "727A116A-D18C-4F3F-A6A8-2C6107FFB8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.366:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EAE76215-2A7E-4D71-8757-AE10E4A9AE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.377:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "AF45DF9D-D7BE-41AD-A838-0AF9A264EBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4A6612F1-4CA8-427A-AED4-854F943BA3D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1_build393:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "902A4011-83C5-4A3B-B443-C51EA855E8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.434:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "8BB225A0-7FB9-4AD2-8ED2-5CC1AEBAAB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.437:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "9603C423-F24A-4607-B721-D02EDA94AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.446:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "574AAAA6-8181-457B-84CE-5AEB1895E3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.457:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "DF957AD3-B6E5-4BD7-832F-33E734817B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.460:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "14D862F4-BE5F-4E6B-9955-ACFB48A5D3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.464:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "768B7F5E-E4AD-420E-92FA-A58E1AE3D1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.471:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "C15B7FEA-E6A9-4DBE-B1A9-E17E91512A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "D9E85FD6-9E89-4497-854C-60A20639CE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.0.338:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "91F70069-D0F2-41D8-862F-2162CE12D49F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EDF0DA40-1AC4-4610-AEAC-F431E23BAEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.2.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "5696AC09-E8BB-4060-9A81-EA2B190B850A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.3.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "C18E6605-5F86-4957-AE16-80F59F40110E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.4:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "56D54011-9B09-4C63-8301-609C03E51099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.5:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "9EF7F7F6-FC6B-4258-AE1D-3E4C19B365B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.5.1100:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "A10DA055-1F24-4AFD-A688-58D1DB4FB64A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "CAC5389A-8B18-40C4-A3E0-E50B6AA724FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "88090CD5-A324-4A41-A55E-9381FBC14B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2001:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "78E79E4D-E93B-4C6C-92EE-1E33EE1AEB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2002:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "F6E6EC72-9B83-4685-B48E-25E4211EC280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2010:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "275187A5-FB3A-41C2-A6F4-F2DC9D88D0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2011:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "A7F0C0E9-9665-452E-A382-04656F2009AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2020:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "6A220194-CCB1-41F6-9CB0-A79C2E5E36FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.0.2.2021:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4D3CBEF5-25C6-41E8-97A3-2AA43134E619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:10.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "81AE594C-41ED-4FE8-839D-B604AE8DC901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B1D862-2CB4-4D50-9BBA-0507FEAA1924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2003:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "7D43A376-4282-4A66-860D-50483438EC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2004:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C2E302A4-72F8-478B-9FA2-2536902986B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11477B6E-C4C5-4664-91A7-D253077981F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44843812-35FC-4378-B239-EEC74A0C8A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C988B309-F397-412A-8570-C3823C7FE7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF97C5F-3A80-4973-85FD-5BCE43B32AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2003:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "EF583EBF-0FDC-45FD-ADAE-C38D9DB34ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "09CA1AC8-E273-44C1-9D1C-19542EB57433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C7CD61-A47B-4521-8C6F-4BB1F4C95614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2005:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "E4BBE123-56E1-46E0-93BE-38F0932D9C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2006:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "1DE91FB9-35C3-4DC7-BE00-7C60EE9FD880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692ECBCD-AB6B-4965-93F4-BDAD4777C018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E5CAF7-C305-4FAF-8DA7-627D83F65185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C0FF0C-EB6E-479B-BFF9-E55CBC0D6500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_personal_firewall:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5F3CB3-7EB3-416C-AD2F-6357DC7248CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_personal_firewall:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C890A979-00E7-44E6-8CEA-8E4B2C966622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2003_professional_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F3EAD1-C4DA-48E8-A582-A14F4401AD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F589D9AA-FD1B-4929-93DC-801C36087E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2004_professional_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37BF3DA-FD23-49A1-B97D-FD3B5896574D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F670F0-FD5D-447C-94B8-691482D907F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005_premier:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E481D2-87F3-4912-BB87-5168C6A1BE23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EB078C-2538-4961-ABFF-6C4601C3977F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:pcanywhere:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A496D973-4BC8-4377-8C84-8F2CB281AEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21938",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016895",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446111/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20051",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3636",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446111/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) url parameters; (4) certain content parameters in the preview method; or (5) the q parameter in (a) sitesearch.do."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Roller WebLogger 2.3 permiten a atacantes remotos inyectar secuencias de comandos o HTML de su elección vía los parámetros (1) name, (2) email, o (3) url; (4) ciertos parámetros de contenido en el método preview; o (5) el parámetro q en (a) sitesearch.do."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roller_weblogger:roller_weblogger:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C25717-C8B4-4BF7-A378-91150EFFB227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://opensource.atlassian.com/projects/roller/browse/ROL-1196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://people.apache.org/~snoopdave/roller-2.3.1-rc1/apache-roller-src-2.3.1-rc1-incubating.tar.gz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/366900",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446133/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20045",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://opensource.atlassian.com/projects/roller/browse/ROL-1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://people.apache.org/~snoopdave/roller-2.3.1-rc1/apache-roller-src-2.3.1-rc1-incubating.tar.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/366900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446133/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) form_codeword (aka the Password field) parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en default.asp (también conocido como pagina de acceso)en ClickTech ClickBlog 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) username y (2)form_codeword (también conocido como el campo de Contraseña (Password) )."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clicktech:clickblog:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "485DF6C1-3449-471D-988E-C2D9F6C5F495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21980",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446074/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446074/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en install.serverstat.php en el componente Serverstat (com_serverstat) 0.4.4 y anteriores para Mambo permite a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:serverstat_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.4",
            "matchCriteriaId" : "6515A1B5-9B4A-446B-BC11-1BB338C3FEB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20018",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contact_attach parameter in a contact option in index.php, which bypasses an insufficiently restrictive regular expression."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de fichero no restringida en contact.html.php en el componente Contact (com_contact) en Limbo (también conocido como Lite Mambo) CMS 1.0.4.2L y anteriores permite a atacantes remotos subir código PHP a la carpeta images/contact vía un nombre de fichero con extensión doble en el parámetro contact_attach en una opción de contacto en index.php, lo cual evita una insuficientemente restrictiva expresión regular."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20A5711-44DE-42FD-A16F-0BF59F1171E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D899CC0B-334F-4794-A7C2-449545D728C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.2l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233B6A06-5CB5-4719-B40F-13C61D5E528E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treecomp.inc.php, (7) forum.html.php, (8) forum.php, (9) antihack.php, (10) content.php, (11) initglobals.php, and (12) imanager.php in Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311 have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treecomp.inc.php, (7) forum.html.php, (8) forum.php, (9) antihack.php, (10) content.php, (11) initglobals.php, y (12) imanager.php en Limbo (también conocido como Lite Mambo) CMS 1.0.4.2 antes de 20060311 tienen impacto y vectores de ataque desconocidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20A5711-44DE-42FD-A16F-0BF59F1171E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D899CC0B-334F-4794-A7C2-449545D728C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limbo_cms:limbo_cms:1.0.4.2l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233B6A06-5CB5-4719-B40F-13C61D5E528E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.limboportal.com/index.php/option/downloads/task/download/id/110",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.limboportal.com/index.php/option/downloads/task/info/id/110/Itemid/46",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/31012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31019",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31020",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.limboportal.com/index.php/option/downloads/task/download/id/110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.limboportal.com/index.php/option/downloads/task/info/id/110/Itemid/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/31012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in loginprocess.asp in Mohammed Mehdi Panjwani Complain Center 1 allows remote attackers to execute arbitrary SQL commands via the (1) TxtUser (aka Username) and (2) TxtPass (aka Password) parameters in login.asp."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en loginprocess.asp en Mohammed Mehdi Panjwani Complain Center 1 permite a atacantes remotos ejecutar comandos SQL de su elección vía los parámetros (1) TxtUser (también conocido como Username) y (2) TxtPass (también conocido como Password) en login.asp."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mohammed_mehdi_panjwani:complain_center:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD9F09F8-D35F-48F6-B8E4-851F3BAEAB84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446078/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in default.aspx in easypage allows remote attackers to execute arbitrary SQL commands via the srch parameter in the Search page."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en default.aspx en easypage permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro srch en la página de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easypagecms:easypagecms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E969D6B5-DA01-49F3-B783-694C0928947E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/446122/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446122/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in (1) login.php, (2) stats.php, (3) detail.php, or (4) erase.php.  NOTE: CVE and a third party dispute this vulnerability, because the langfile parameter is set to english.php in each file.  NOTE: CVE also disputes a later report of this vulnerability in 1.2, because the langfile parameter is set to french.php in 1.2"
      }, {
        "lang" : "es",
        "value" : "** DISPUTADA ** Múltiples vulnerabilidades de inclusión remota de archivos PHP en Marc Cagninacci mcLinksCounter 1.1 permiten a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro langfile en (1) login.php, (2) stats.php, (3) detail.php o (4) erase.php. NOTA: CVE y un tercero disputan esta vulnerabilidad, porque el parámetro langfile está establecido en english.php en cada archivo. NOTA: CVE también disputa un reporte posterior de esta vulnerabilidad en 1.2, porque el parámetro langfile está establecido en french.php en 1.2."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_cagninacci:mclinkscounter:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28591180-6FD7-4B20-8274-CCF2E9015D4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115860241806867&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityvulns.com/Rdocument844.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityvulns.com/source26994.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446062/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/477253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/477363/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115860241806867&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityvulns.com/Rdocument844.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityvulns.com/source26994.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446062/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/477253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/477363/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/482006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RP_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en All Enthusiast ReviewPost 2.5 permite a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro RP_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:all_enthusiast_inc:reviewpost_php_pro:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C351A3A-93D7-4E71-ACC0-5F28EB07AAA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21971",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1603",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nyubicrew.org/adv/home_edition2001-adv-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446106/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nyubicrew.org/adv/home_edition2001-adv-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446106/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T18:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/install.php and other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Walter Beschmout PhpQuiz permite a atacantes remotos obtener información sensible vía una petición directa a cfgphpquiz/install.php y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpquiz:phpquiz:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80564BC-9A71-4801-B0BB-5CD87C2EE06C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446112/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446112/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745.  NOTE: older kernel versions for specific Linux distributions are also affected, due to backporting of the CVE-2006-3745 patch."
      }, {
        "lang" : "es",
        "value" : "El Linux kernel 2.6.17.10 y 2.6.17.11 y 2.6.18-rc5 permite a usuarios locales provocar una denegación de servicio (caída) vía un socket SCTP con un cierto valor SO_LINGER, posiblemente relacionado con el parche para CVE-2006-3745. NOTA: versiones anteriores del núcleo para las distribuciones Linux especificadas están también afectadas, debido a la portabilidad hacia atrás del parche CVE-2006-3745."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21945",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21967",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mail-archive.com/kernel-svn-changes%40lists.alioth.debian.org/msg02314.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-347-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204460",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/21967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mail-archive.com/kernel-svn-changes%40lists.alioth.debian.org/msg02314.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-347-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer en kextload en Apple OS X, como ha sido usado por TDIXSupport en Roxio Toast Titanium y posiblemente otros productos, permite a usuarios locales ejecutar código de su elección vía un argumento con extensión larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C273D1-ADFE-4B4C-B543-7B9CA741A117"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066ABC3B-B395-42D2-95C0-5B810F91A6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BC19FC-6E03-4000-AE4B-232E47FA76F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421FC2DD-0CF7-44A2-A63C-5221689E2363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE52A344-8B07-480D-A57F-B1F6E6574F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CC0444-570C-4BB5-B53A-C5CA0BD87935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E3EED7-FE30-4620-B40B-9CC49B77408A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A24978-2891-425C-ACF6-E8F5C839C54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20E130-6078-4336-B614-273C27142B46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB461678-560D-436E-A3AE-9E1E16DB0412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFDADE04-29F0-446B-824B-0518880CF0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9BE602-A740-4CF7-9CAF-59061B16AB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E698C1-C313-40E6-BAF9-7C8F9CF02484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2D00AC-FA2A-4C39-B796-DC19072862CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421079DA-B605-4E05-9454-C30CF7631CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B734BA-3435-40A9-B22B-5D56CEB865A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30897327-44DD-4D6C-B8B6-2D66C44EA55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB279593-17D1-4A65-BF54-969B38B74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F4618C-1408-4097-B97D-5F32DE6D01DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F558C40-D0DA-4700-95DA-DF1322C020E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F30B-E4B8-4745-AFFA-8FD620E61994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE033B-5F16-4262-A397-02D7450189B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E831F3E-A980-47AF-BD05-2DB1A14689B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36991737-904F-4B26-AEE2-7B30411279E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620ECFC8-293D-4C2B-9698-67185BB6E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F14A45-BDDB-4C12-9370-D5241975A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35932546-B614-47C0-98E6-8EF1EFE06725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E997653-C744-4F1F-9948-47579AB3BED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384C130F-D1A9-4482-AF20-FC81933473A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA6BD2A-3022-408D-8E4F-50865996E965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463D5628-7536-4029-99D6-5E525050059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A39B11-1C23-4A6C-B4C5-AEC40836F173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D48FD1-CB91-4310-9432-A4365FA67B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29644501-54BD-45E9-A6C1-618892CD354F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A132487-E89F-4D0D-8366-14AFC904811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD231103-D7C7-4697-BE90-D67558D6115C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADAAA0-C885-466C-A122-A94E73EAF817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL commands via the t_id parameter when the go parameter is \"Forum.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en mods.php en GNUTurk 2G y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro t_id cuando el parámetro go es \"Forum\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnuturk:gnuturk_portal_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2g",
            "matchCriteriaId" : "B5DE023C-197E-4A23-B50F-2878F15E87CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21956",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnuturk.com/mods.php?go=Forums&p=vtop&t_id=138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20069",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gnuturk.com/mods.php?go=Forums&p=vtop&t_id=138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4868",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en el motor Vector Graphics Rendering (vgx.dll), tal y como se usa en Microsoft Outlook e Internet Explorer 6.0 en Windows XP SP2 y posiblemente otras versiones permite a atacantes remotos ejecutar código de su elección mediante un fichero Vector Markup Language (VML) con un parámetro \"fill\" largo dentro de una etiqueta \"rect\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:*:itanium:*:*:*:*:*",
            "matchCriteriaId" : "580632FB-7EB8-4DC6-A372-742D4523BF79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*",
            "matchCriteriaId" : "CD264C73-360E-414D-BE22-192F92E5A0A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3C557A-71D8-47F9-9E12-CE938F301E66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8F4276-4D97-480D-A542-FE9982FFD765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A74985B6-BCA5-49E3-878B-77D7FA43070C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3189982-F780-4AC2-9663-E6D4DF9DD319"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.securiteam.com/index.php/archives/624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21989",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016879",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.microsoft.com/kb/925486",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/416092",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/925568.mspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446378/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446505/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446523/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446528/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446881/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447070/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448552/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20096",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-262A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3679",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.securiteam.com/index.php/archives/624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.microsoft.com/kb/925486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/416092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/925568.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446378/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446505/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446523/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446528/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446881/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447070/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448552/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-262A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4869",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute arbitrary PHP code via a URL in the gallery_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en phpunity-postcard.php en phpunity.postcard permite a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro gallery_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perlunity:phpunity_postcard:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA812A4-492E-4597-846B-F6BA531BB300"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21897",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19993",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T19:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de fichero en AEDating 4.1, y posiblemente versiones anteriores, permiten a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro dir[inc] en (1) inc/design.inc.php o (2) inc/admin_design.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aewebworks:aedating:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "66D83256-3BB5-467D-85BE-6D60A3B1FF6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aewebworks:aedating:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0D4220-1B34-4189-8755-3338E5C4CC69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21955",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2191",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "security@debian.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is \"unexploitable."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADO **  Vulnerabilidad de cadena de formato en Mailman anterior a 2.1.9 permite a atacantes ejecutar código de su elección vía vectores no especificados. NOTA: el vendedor ha impugnado esta vulnerabilidad, estableciendo que es \"inexplotable\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.8",
            "matchCriteriaId" : "42856677-9290-4B21-AE1F-0F217B0D80AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://people.debian.org/~terpstra/message/20060906.155339.0c0732a4.en.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/21732",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "security@debian.org"
      }, {
        "url" : "http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://people.debian.org/~terpstra/message/20060906.155339.0c0732a4.en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3866",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2023-11-07T01:59:09.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4868.  Reason: This candidate is a duplicate of CVE-2006-4868.  Notes: All CVE users should reference CVE-2006-4868 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4334",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en gzip 1.3.5 permite a atacantes dependientes de contexto causar una denegación de servicio (caída) vía un archivo GZIP (gz) artesanal, lo cual resulta en una referencia a NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BB9DB3-E2F2-4AE8-AC67-8C864C90D1D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/933712",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10527",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/933712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4335",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a \"stack modification vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Error de índice de array en la función make_table en unlzh.c en el componente de descompresión LZH en gzip 1.3.5, cuando se ejecuta en ciertas plataformas, permite a atacantes dependientes de contexto provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección vía un archivo GZIP artesanal que dispara una escritura fuera de rango, también conocida como \"vulnerabilidad de modificación de pila\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BB9DB3-E2F2-4AE8-AC67-8C864C90D1D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23153",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23156",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/381508",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3695",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4760",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10391",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/381508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=220595\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4336",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función build_tree en gzip 1.3.5 permite a atacantes dependientes de contexto ejecutar código de su elección vía una tabla de contadores de hoja artesanal que provoca una escritura en un índice negativo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BB9DB3-E2F2-4AE8-AC67-8C864C90D1D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23153",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23156",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/554780",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3695",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4760",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29042",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10140",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/554780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4337",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función make_table en el componente LHZ en gzip 1.3.5 permite a atacantes dependientes de contexto ejecutar código de su elección vía una tabla de decodificación artesanal en un archivo GZIP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BB9DB3-E2F2-4AE8-AC67-8C864C90D1D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23153",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23156",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3695",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4760",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11212",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=220595\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4338",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive."
      }, {
        "lang" : "es",
        "value" : "unlzh.c en el componente LHZ en gzip 1.3.5 permite a atacantes dependientes de contexto provocar una denegación de servicio (bucle infinito) vía un archivo GZIP artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BB9DB3-E2F2-4AE8-AC67-8C864C90D1D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23153",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23156",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/29008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3695",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4760",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29046",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11290",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-13.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_56_gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0667.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446426/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450078/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451324/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/462007/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0052/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-349-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=220595\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search_run.asp in Keyvan1 (aka Keyvan Janghorbani) EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search_run.asp en Keyvan1 (también conocido como Keyvan Janghorbani) EShoppingPro 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro order."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keyvan1:eshoppingpro:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07FA611B-2B5F-4BD2-BAAC-46BC367325F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22006",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016878",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446222/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446222/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.asp en Keyvan1 (también conocido como Keyvan Janghorbani) ECardPro 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro keyword."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keyvan1:ecardpro:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA561F8-AE5B-4D7F-A0E0-ED2F7575170F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22013",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446319/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446319/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for (1) includes/functions.php, (2) modules/register.php, (3) modules/poll.php, (4) modules/panel.php, (5) modules/pm.php, (6) modules/news.php, (7) modules/templates_change.php, (8) modules/users.php, (9) modules/misc.php, (10) modules/masspm.php, (11) modules/mass-email.php, (12) modules/main-nav.php, (13) modules/login.php, (14) modules/layout.php, (15) modules/hq.php, (16) modules/forum.php, (17) modules/forum-admin.php, (18) modules/events.php, (19) modules/emoticons.php, (20) modules/download.php, (21) modules/blocks.php, (22) modules/ban.php, (23) modules/badwords.php, (24) modules/ads.php, or (25) modules/admin.php, which reveals the installation path in various error messages.  NOTE: The modules/online.php vector is already covered by CVE-2006-1679."
      }, {
        "lang" : "es",
        "value" : "Jupiter CMS permite a atacantes remotos obtener información sensible vía una petición directa para (1) includes/functions.php, (2) modules/register.php, (3) modules/poll.php, (4) modules/panel.php, (5) modules/pm.php, (6) modules/news.php, (7) modules/templates_change.php, (8) modules/users.php, (9) modules/misc.php, (10) modules/masspm.php, (11) modules/mass-email.php, (12) modules/main-nav.php, (13) modules/login.php, (14) modules/layout.php, (15) modules/hq.php, (16) modules/forum.php, (17) modules/forum-admin.php, (18) modules/events.php, (19) modules/emoticons.php, (20) modules/download.php, (21) modules/blocks.php, (22) modules/ban.php, (23) modules/badwords.php, (24) modules/ads.php, o (25) modules/admin.php, lo cual revela la ruta de instalación en varios mensajes de error. NOTA: El vector modules/online.php ya está cubierto por CVE-2006-1679."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB372559-61D8-4E8D-9ED2-DB7F211E8C78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script or HTML via the (1) language[Admin name] and (2) language[Admin back] parameters in (a) modules/blocks.php; the (3) language[Register title] and (4) language[Register title2] parameters in (b) modules/register.php; the (5) language[Mass-Email form title], (6) language[Mass-Email form desc], (7) language[Mass-Email form desc2] (8) language[Mass-Email form desc3], and (9) language[Mass-Email form desc4] parameters in (c) modules/mass-email.php; the (10) language[Forgotten title], (11) language[Forgotten desc], (12) language[Forgotten desc2], (13) language[Forgotten desc3], (14) language[Forgotten desc4], and (15) language[Forgotten desc5] parameters in (d) modules/register.php; and the (16) language[Search view desc], (17) language[Search view desc2], (18) language[Search view desc3], (19) language[Search view desc4], (20) language[Search view desc5], (21) language[Search view desc6], (22) language[Search view desc7], and (23) language[Search view desc8] parameters in (e) modules/search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Jupiter CMS permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección vía los parámetros (1) language[Admin name] y (2) language[Admin back] en (a) modules/blocks.php; los parámetros (3) language[Register title] y (4) language[Register title2] en (b) modules/register.php; los parámetros (5) language[Mass-Email form title], (6) language[Mass-Email form desc], (7) language[Mass-Email form desc2] (8) language[Mass-Email form desc3] y (9) language[Mass-Email form desc4] en (c) modules/mass-email.php; los parámetros (10) language[Forgotten title], (11) language[Forgotten desc], (12) language[Forgotten desc2], (13) language[Forgotten desc3], (14) language[Forgotten desc4] y (15) language[Forgotten desc5] en (d) modules/register.php; y los parámetros (16) language[Search view desc], (17) language[Search view desc2], (18) language[Search view desc3], (19) language[Search view desc4], (20) language[Search view desc5], (21) language[Search view desc6], (22) language[Search view desc7] y (23) language[Search view desc8] en (e) modules/search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8315FBF2-D9B2-42EC-9DFA-FD7E6A987C97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to upload picture files, and possibly files with arbitrary extensions, to gallery/albums/public."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de subida de ficheros no restringida en modules/galleryuploadfunction.php en Jupiter CMS permite a atacantes remotos subir ficheros de imagen, y posiblemente ficheros con extensión de su elección, a gallery/albums/public."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8315FBF2-D9B2-42EC-9DFA-FD7E6A987C97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) the user name during login, or the (2) key or (3) fpwusername parameters in modules/register."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Jupiter CMS permiten a atacantes remotos ejecutar comandos SQL de su elección vía (1) el nombre de usuario durante el alta, o los parámetros (2) key o (3) fpwusername en modules/register."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jupiter_cms:jupiter_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8315FBF2-D9B2-42EC-9DFA-FD7E6A987C97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446064/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446064/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (2) profile.php, and (3) header.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de sobreescritura de variable en David Bennett PHP-Post (PHPp) 1.0 y anteriores permite a atacantes remotos sobreescribir variables de programa de su elección vía múltiples vectores que usan la función extract, como ha sido demostrado por el parámetro table_prefix en (1) index.php, (2) profile.php y (3) header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_bennett:php-post:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "70FA6839-10EF-409D-AE8E-31F1DD908165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local files via a .. (dot dot) sequence in the template parameter.  NOTE: this was later reported to affect 1.0.1, and demonstrated for code execution by uploading and accessing an avatar file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en footer.php en David Bennett PHP-Post (PHPp) 1.0 y anteriores permite a atacantes remotos leer ficheros locales de su elección vía una secuencia .. (punto punto) en el parámetro template."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_bennett:php-post:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "F823793B-3A3E-4EB1-A249-8D5A4E47292B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en profile.php en David Bennett PHP-Post (PHPp) 1.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_bennett:php-post:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "70FA6839-10EF-409D-AE8E-31F1DD908165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4880",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2) template.php, or (3) lastvisit.php, which reveals the installation path in various error messages."
      }, {
        "lang" : "es",
        "value" : "David Bennett PHP-Post (PHPp) 1.0 y anteriores permite a atacantes remotos obtener información sensible vía una petición directa a (1) footer.php, (2) template.php o (3) lastvisit.php, lo cual revela la ruta de instalación en varios mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_bennett:php-post:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "70FA6839-10EF-409D-AE8E-31F1DD908165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the replyuser parameter in (a) pm.php; (2) the txt_jumpto parameter in (b) dropdown.php; the (3) txt_error and (4) txt_templatenotexist parameters in (c) template.php; the (5) split parameter in certain files, as demonstrated by (d) editprofile.php, (e) search.php, (f) index.php, and (g) pm.php; and the (6) txt_login parameter in (h) loginline.php; and allow remote authenticated users to inject arbitrary web script or HTML via the (7) txt_logout parameter in (i) loginline.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en David Bennett PHP-Post (PHPp) 1.0 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección vía (1) el parámetro replyuser en (a) pm.php; (2) el parámetro txt_jumpto en (b) dropdown.php; los parámetros (3) txt_error y (4) txt_templatenotexist en (c) template.php; (5) el parámetro split en ciertos ficheros, como ha sido demostrado en (d) editprofile.php, (e) search.php, (f) index.php, y (g) pm.php; (6) y el parámetro txt_login en (h) loginline.php; además permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de su elección vía (7) el parámetro txt_logout en (i) loginline.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:david_bennett:php-post:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "70FA6839-10EF-409D-AE8E-31F1DD908165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Review.asp en Julian Roberts Charon Cart 3 permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro ProductID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:charon_internet:charon_cart:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923502DF-2FD2-48B3-9EA5-4AC599F1FDA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21987",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446254/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20083",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28980",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446254/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php or (2) the message parameter in status.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IDevSpot BizDirectory permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección vía (1) el parámetro stylesheet en Feed.php o (2) el parámetro message en status.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:bizdirectory:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA28DED-F6F0-48BD-97B5-C88D51A556DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016876",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446223/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446223/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title parameter in index.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IDevSpot iSupport 1.8 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección vía (1) el parámetro suser en support/rightbar.php, (2) el parámetro ticket_id en support/open_tickets.php, y (3) el parámetro cons_page_title en index.php. NOTA: la procedencia de esta información es desconocida; los detalles están obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:isupport:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0460575B-6746-4BEA-B5F6-1C13110EDC7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/19963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information. The bottom.php parameter is already covered by CVE-2006-4826."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en Shadowed Portal 5.599 y anteriores permite a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro root en (1) footer.php y (2) header.php. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros. El parámetro bottom.php está ya cubierto por CVE-2006-4826."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowed_portal:shadowed_portal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.599",
            "matchCriteriaId" : "7BE0E77C-90C6-4CE8-B192-A781D91A8983"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28836",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/84177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/84177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 allows local privileged users to bypass security restrictions and disable the On-Access Scan option by opening the program via the task bar and quickly clicking the Disable button, possibly due to an interface-related race condition."
      }, {
        "lang" : "es",
        "value" : "El componente VirusScan On-Access Scan en McAfee VirusScan Enterprise 7.1.0 y Scan Engine 4.4.00 permite a usuarios locales con privilegios evitar restricciones de seguridad y desactivar la opción On-Access Scan abriendo el programa desde la barra de tareas y haciendo clic rápidamente en el botón Disable, posiblemente debido a una \"race condition\" relacionada con la interfaz."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:scan_engine:4.4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD1ABAD-780A-49A7-AD1A-1B8E9BFB644D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan_enterprise:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E797D6C7-39FE-4A2D-B1CF-32FE75DBB8E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446220/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446220/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation.  NOTE: it could be argued that the issue is not in Remote Desktop itself, but in applications that are installed while using it."
      }, {
        "lang" : "es",
        "value" : "Apple Remote Desktop (ARD) para Mac OS X 10.2.8 y posteriores no quita privilegios en la máquina remota al instalar ciertas aplicaciones, lo cual permite a usuarios locales evitar la autenticación y obtener privilegios seleccionando el icono durante la instalación.\r\nNOTA: Se podría discutir que esta vulnerabilidad no se produce en el mismo Remote Desktop, si no en aplicaciones que son instaladas cuando se está usando."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:apple_remote_desktop:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC05949B-1245-428D-AE4D-424AC2DE816C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:apple_remote_desktop:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41469972-986E-4AB0-BF44-F81FD786C4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:apple_remote_desktop:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E315CDB-EABA-4632-A4E2-F207695D9139"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.8",
            "matchCriteriaId" : "61DAEA2E-5E72-4997-8C8F-5C354B29A488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/32260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446371/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446751/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447043/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446371/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446751/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447043/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT."
      }, {
        "lang" : "es",
        "value" : "Microsoft Internet Explorer 6 y anteriores permite a atacantes remotos provocar una denegación de servicio (aplicación que no responde) vía un elemento INPUT HTML con formato CSS dentro de un elemento DIV que tiene un tamaño mayor que el INPUT."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:*:windows_server_2003_sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "6",
            "matchCriteriaId" : "66815960-CEFF-477A-A147-963A112206CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0199.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jonas.elunic.de/blog/index.php/2006/07/14/ie-freeze-bug/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0199.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jonas.elunic.de/blog/index.php/2006/07/14/ie-freeze-bug/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functions.gb.php, (3) includes/functions.admin.php, (4) includes/admin.inc.php, (5) help.php, (6) smile.php, (7) entry.php; (8) adminhelp0.php, (9) adminhelp1.php, (10) adminhelp2.php, and (11) adminhelp3.php in (a) help/en and (b) help/de directories; and the (12) preview.php, (13) log.php, (14) index.php, (15) config.php, and (16) admin.php in the (c) admin directory, a different set of vectors than CVE-2006-4788."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Telekorn SignKorn Guestbook (SL) 1.3 y anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro dir_path en (1) index.php, (2) includes/functions.gb.php, (3) includes/functions.admin.php, (4) includes/admin.inc.php, (5) help.php, (6) smile.php, (7) entry.php; (8) adminhelp0.php, (9) adminhelp1.php, (10) adminhelp2.php, y (11) adminhelp3.php en directorios (a) help/en y (b) help/de; y el (12) preview.php, (13) log.php, (14) index.php, (15) config.php, y (16) admin.php en el (c) directorio admin, un conjunto de vectores diferente que CVE-2006-4788."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telekorn:signkorn_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "D48C9281-9B77-4A77-9823-9CAF14C0A010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telekorn:signkorn_guestbook:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58D0577-76B7-4ACB-BEA5-31DE19E4EA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telekorn:signkorn_guestbook:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF2D4CFA-C9DA-4EC2-A1F6-A6355D9475E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32216",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446086/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19977",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.telekorn.com/forum/showthread.php?t=1427",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446086/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.telekorn.com/forum/showthread.php?t=1427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to (1) fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or (2) fckeditor/editor/dialog/fck_link.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en UNAK-CMS 1.5 y anteriores permiten a atacantes remotos ejecutar código de su elección vía una URL en el parámetro dirroot a (1) fckeditor/editor/filemanager/browser/default/connectors/php/connector.php o (2) fckeditor/editor/dialog/fck_link.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unak:unak_cms:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C1C9ED-B1FD-4E83-8C7A-7847EE8F7354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unak:unak_cms:1.5_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF7D75F-AC82-4C8B-9A44-7F51F94792AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21957",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.unak.net/forum/viewtopic.php?id=165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.unak.net/forum/viewtopic.php?id=165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en ArticlesTableview.asp en Techno Dreams Articles & Papers Package 2.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_dreams:articles_and_papers_package:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "2ED44B03-D281-4B6A-828D-D1C96BD66AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21976",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446312/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20073",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446312/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en faqview.asp en Techno Dreams FAQ Manager Package 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_dreams:faq_manager_package:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B0F6B3-989F-4F52-A90B-A9B4D10A59E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21977",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446259/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20074",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2385",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446259/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en bb_usage_stats/includes/bb_usage_stats.php en phpBB XS 0.58 y anteriores permite a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro phpbb_root_path, un vector diferente que CVE-2006-4780."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_xs:phpbb_xs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.58",
            "matchCriteriaId" : "65A4EFB2-092D-482C-BCB9-E323A83D3BE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nyubicrew.org/adv/Noge_adv_02.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/21970",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446108/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452469/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20046",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://nyubicrew.org/adv/Noge_adv_02.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/21970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446108/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452469/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en forms/lostpassword.php en iDevSpot NixieAffiliate 1.9 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección vía el parámetro error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:nixieaffiliate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "8B80741A-98FC-4471-BA6C-06594412F631"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446306/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20084",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446306/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php."
      }, {
        "lang" : "es",
        "value" : "IDevSpot NexieAffiliate 1.9 y anteriores permite a atacantes remotos borrar afiliados de su elección vía el parámetro id modificado a delete.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idevspot:nixieaffiliate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "8B80741A-98FC-4471-BA6C-06594412F631"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446306/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20086",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446306/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4896",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2023-11-07T01:59:24.487",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4785.  Reason: This candidate is a duplicate of CVE-2006-4785.  Notes: All CVE users should reference CVE-2006-4785 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password."
      }, {
        "lang" : "es",
        "value" : "CMtextS 1.0 y anteriores almacena users_logins/admin.txt bajo el web document root con insuficiente control de acceso, lo cual permite a atacantes remotos obtener la contraseña de administrador."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmtexts:cmtexts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "314A551E-2B93-4A8C-9E2C-CC0BFB4FE242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21988",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-19T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appconf[rootpath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en include/phpxd/phpXD.php en guanxiCRM 0.9.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro appconf[rootpath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guanxicrm:guanxicrm_business_solution:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54A87799-BD92-4C82-B3AE-A4E523899AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20071",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-20T23:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en SpIDer para Dr.Web Scanner para Linux 4.33, y posiblemente para veriones anteriores, permite a un atacante remoto ejecutar código de su elección a través de un archivo LHA con una cabecera extendida que contiene un nombre de directorio largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_web_ltd:dr.web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.33_for_linux",
            "matchCriteriaId" : "7D61774C-9B40-4670-8E9B-54C87A930129"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcart_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de evaluación dinámica de variable en cmpi.php en Qualiteam X-Cart 4.1.3 y anteriores permite a atacantes remotos sobreescribir variables de programa de su elección y ejecutar código PHP de su elección, como se ha demostrado en la inclusión de un fichero PHP remoto vía el parámetro xcart_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualiteam:x-cart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.3",
            "matchCriteriaId" : "62C83F42-7EE7-4715-A268-8FDF5CE81C21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00113-09182006&",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00113-09182006&",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, which is processed by the readfile function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en Artmedic Links 5.0 permite a atacantes remotos ejecutar código PHP de su elección vía una URL en el parámetro id, el cual es procesado por la función readfile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artmedic_webdesign:artmedic_links:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E1FDC4-5444-4F1A-98CF-D3ACFC76B739"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-27-artmedic-links.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446329/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-27-artmedic-links.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446329/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbitrary SQL commands via the new_calendarid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en modules/calendar/week.php en More.groupware 0.74 permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro new_calendarid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_logemann:more.groupware:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6F27A2-B120-4CC5-8D4D-A5AC5290FDFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22007",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20100",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2394",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a non-existent file, which displays the web root path in the resulting error message."
      }, {
        "lang" : "es",
        "value" : "OSU 3.11alpha y 3.10a permite a atacantes remotos obtener información sensible vía una URL a un fichero inexistente, lo cual muestra la ruta raíz del web en el mensaje de error resultante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ohio_state_university:osu_httpd:3.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81CEC1F7-3969-49B8-ADEE-67A761280AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ohio_state_university:osu_httpd:3.11alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85564D34-E4FE-4914-97A2-C73899459FBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446372/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446372/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL containing an * (asterisk) wildcard, which displays all matching file and directory information."
      }, {
        "lang" : "es",
        "value" : "OSU 3.11 alpha y 3.10a permite a un atacante remoto obtener información sensible a través de una URL conteniendo un * (asterisco) comodín, el cual muestra toda la información del archivo y del directorio que empareja."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ohio_state_university:osu_httpd:3.10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81CEC1F7-3969-49B8-ADEE-67A761280AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ohio_state_university:osu_httpd:3.11alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85564D34-E4FE-4914-97A2-C73899459FBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22016",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446372/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446372/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Cisco Guard DDoS Mitigation Appliance anterior a 5.1(6), cuando anti-spoofing está habilitado, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección vía cierta secuencia de caracteres en una URL que no es manejada adecuadamente cuando el aparato envía un meta-refresh."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:guard_ddos_mitigation_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1\\(5\\)",
            "matchCriteriaId" : "F762FEF8-9B73-4301-816A-4602C4CE6F15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060920-guardxss.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060920-guardxss.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) via a crafted SSLv2 Client Hello packet."
      }, {
        "lang" : "es",
        "value" : "La interfaz web(mainApp)para administrar a Cisco IDS nateriores a 4.1(5c), e IPS 5.0 anteriores a 5.0(6p1) y 5.1 anteriores a 5.1(2)permite a un atacante remoto provocar una denegación de servicio (dispositivo sin respuesta) a través de  un paquete artesanal SSLv2 Client Hello."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ids_sensor_software:4.1\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF16B4D-9B97-452F-9FC5-67F27C0CB3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.0\\(6\\)p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEC4E54-69C0-4115-8F57-6B25694BA07D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:5.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC9FE98-33D1-4072-A9AE-91E014227599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016891",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/642076",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/642076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a \"crafted sequence of fragmented IP packets\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Cisco IPS 5.0 anterior a 5.0(6p2) y en 5.1 anterior a 5.1(2), cuando se ejecuta en modo inline o promiscuo, permite a atacantes remotos evitar la inspección del tráfico vía una \"secuencia artesanal de paquetes IP fragmentados\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.0\\(6p2\\)",
            "matchCriteriaId" : "A17165F9-508D-4A38-AC9E-8AFAF37BAD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ips_sensor_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "5.1\\(2\\)",
            "matchCriteriaId" : "9AFFF424-174F-4A70-8FFD-620DF177012A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22022",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016891",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/658884",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29036",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20127",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3721",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29058",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/22022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/658884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en PHP DocWriter 0.3 y anteriores permite a un atacante remoto ejecutar código PHP  de su elección a través de un URL en el parámetro de secuencia de comandos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_docwriter:php_docwriter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "9ED1F490-8EBF-465C-9413-70AAA1F74097"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20041",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2373",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. (dot dot) sequence and trailing null (%00) byte in the lang parameter, as demonstrated by injecting PHP code into a log file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en chat/getStartOptions.php en AlstraSoft E-friends 4.85 permite a un atacante remoto incluir archivos de su elección de forma local y la posibilidad de ejecutar código de su elección a través de la secuencia .. (punto punto) y el byte nulo que se arrastra en el parámetro lang, según se demostró inyectando código PHP en un fichero log."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alstrasoft:e-friends:4.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010792C7-94BF-401E-A853-BDC1418A4F25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via \"..\" sequences in the ze_langue_02 cookie, as demonstrated by using the choix_lng parameter to choix_langue.php to indirectly set the cookie, then accessing livre_dor.php to trigger the inclusion from inc/change_lang_ck.php, possibly related to livre_livre.php.  NOTE: the livre_livre.php relationship has been reported by some third party sources."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en A.l-Pifou 1.8p2 permite a atacantes remotos leer ficheros de su elección vía secuencias \"..\" en la cookie ze_langue_02, como se ha demostrado usando el parámetro choix_lng a choix_langue.php para establecer indirectamente la cookie, entonces accediendo a livre_dor.php para disparar la inclusión desde inc/change_lang_ck.php, posiblemente relativo a livre_livre.php.\r\nNOTA: la relación con livre_livre.php ha sido documentada por terceras partes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a.l-pifou:a.l-pifou:1.8p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEC1642-9059-4FFC-A881-053598967EF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2006/Sep/0341.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22038",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2006/Sep/0341.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Innovate Portal 2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección vía el parámetro content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:innovate_portal:innovate_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F65DC0-7915-4F8C-9BD3-D784CD7DC309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446422/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20104",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446422/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQL commands via the uye_id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en uye_profil.asp en Tekman Portal (TR) 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección vía el parámetro uye_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asp_indir:tekman_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6158B688-308B-455A-BB98-67187395A105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web script or HTML via the pgname parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en PT News 1.7.8 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro pgname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pt_news:pt_news:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4EFD4CB-9C33-4B02-97D6-1B7EE57D4994"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446417/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20090",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29043",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446417/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) env_dir parameter to (a) blank.php, (b) admin.php, or (c) builddb.php, and the (2) script_root parameter to blank.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades PHP de inclusión remota de archivo en Simple Discussion Board 0.1.0 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el (1) parámetro env_dir a (a) blank.php, (b) admin.php, o (c) builddb.php. y el (2) parámetro  a blank.php"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_discussion_board:simple_discussion_board:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661782F0-3107-4F60-A460-6221BEE58B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en starnet/editors/htmlarea/popups/images.php en Site@School (S@S) 2.4.02 y anteriores, permite a un atacante remoto leer archivos arbitrarios a través de .. (punto punto) en el parámetro dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteatschool:siteatschool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.02",
            "matchCriteriaId" : "99D6F2F0-D8C5-4DD6-8ED4-0D9F0BD06FE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115869368313367&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115869368313367&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4920",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Site@School (S@S) 2.4.02 y anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL con el parámetro cmsdir a (1) starnet/modules/sn_allbum/slideshow.php, y (2) starnet/themes/editable/main.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteatschool:siteatschool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.02",
            "matchCriteriaId" : "99D6F2F0-D8C5-4DD6-8ED4-0D9F0BD06FE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115869368313367&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115869368313367&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota en archivo en Site@School (S@S) 2.4.03 y anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro cmsdir a starnet/modules/include/include.php. NOTA: algunos de estos detalles se obtuvieron a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteatschool:siteatschool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.03",
            "matchCriteriaId" : "767C840C-ED61-4E3A-A294-982A2B43E020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteatschool:siteatschool:2.4.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A921BE-6DBB-4271-8A03-698A9F4A66FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115869368313367&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/28941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115869368313367&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/28941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de actualización sin restricción  de archivo de starnet/editors/htmlarea/popups/images.php en Site@School (S@S) 2.4.02 y anteriores, permite a un atacante remoto actualizar y ejecutar arhcivos de su elección con extensiones ejecutables."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteatschool:siteatschool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.02",
            "matchCriteriaId" : "99D6F2F0-D8C5-4DD6-8ED4-0D9F0BD06FE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=115869368313367&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=115869368313367&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) de search.php en eSyndiCat Portal System permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro what."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esyndicat_portal_system:esyndicat_portal_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3713BC3-8AC5-4EF2-B732-349C5B2B28E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446377/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446377/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by injecting crafted frames into a wireless network."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basados en pila en el controlador wireless AirPort en Apple Mac OS X 10.3.9 y 10.4.7 permiten a atacantes físicamente próximos ejecutar código de su elección inyectando tramas artesanales dentro de la red wireless."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923EE1A-DD48-4EC8-8698-A33093FD709C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/867796",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/867796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service (crash), gain privileges, and execute arbitrary code via a crafted frame that is not properly handled during scan cache updates."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en el controlador wireless AirPort en Apple Mac OS X 10.4.7 permite a atacantes físicamente próximos provocar una denegación de servicio (caída), obteniendo privilegios, y ejecutando código de su elección mediante una trama artesanal que no es manejada adecuadamente durante las actualizaciones de escaneo de cache."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/589540",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/589540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-21T21:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service (crash) or execute arbitrary code in third-party wireless software that uses the API via crafted frames."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en la API para el controlador de AirPort Wireless sobre Apple Mac OS X 10.4.7 que permitirían a un atacante cercano fisicamente provocar denegación de serivicio(caida) o ejecutar código de su elección con un software de terceros que utiliza el API a través de marcos artesanales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC9692A-CE81-446D-B136-449662C4B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/563492",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/563492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-22T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a \"'\" (single quote) in the PIProfile function, which leaks the path in an error message."
      }, {
        "lang" : "es",
        "value" : "La secuencia de comandos ePPIServlet en ssociates (CA) eTrust Security Command Center 1.0 y r8 hasta SP1 CR2, cuando funciona sobre Windows, permite a un atacante remoto obtener la ruta del servidor web a través de \"'\" (comilla simple) en la función PIProfile, lo cual filtra la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C363D8B-1022-4C2A-BEDE-34EAB274D9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8C8321-1BE6-476D-910E-6BBDBE683309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr1:*:*:*:*:*",
            "matchCriteriaId" : "054689EB-D43E-4C0F-B504-FE615607332A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr2:*:*:*:*:*",
            "matchCriteriaId" : "40DC453F-12F6-4D51-ADFF-71D2628F3CD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446611/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446611/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-22T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via \"..\" sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not properly handled by the getadhochtml function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de directorio transversal en Computer Associates (CA) eTrust Security Command Center 1.0 y r8 hasta SP1 CR2, permite a un usuario remoto validado leer y borrar archivos de sue elección a través de la secuancia \"..\" en el parámetro eSCCAdHocHtmlFile a eSMPAuditServlet, lo cual no es manejado adecuadamente a través de la función getadhochtml."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8C8321-1BE6-476D-910E-6BBDBE683309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr1:*:*:*:*:*",
            "matchCriteriaId" : "054689EB-D43E-4C0F-B504-FE615607332A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr2:*:*:*:*:*",
            "matchCriteriaId" : "40DC453F-12F6-4D51-ADFF-71D2628F3CD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29010",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446611/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34617",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446611/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-22T22:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments."
      }, {
        "lang" : "es",
        "value" : "Computer Associates (CA) eTrust Security Command Center 1.0 y r8 hasta SP1 CR2, y eTrust Audit 1.5 y r8, permite a un atacante remoto suplantar alertas y guíar ataques de repetición a través de la invocación de eTSAPISend.exe con los argumentos deseados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_client:1.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF88C7-8F85-4FA9-82DD-4896404A92C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_client:1.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "315F1B77-C655-4131-87DA-EBC171FEDEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_client:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555B7B8E-8047-4890-810D-DECDFC730BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_datatools:1.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "209DFBD5-5E38-42A1-945D-4879C5FAFDE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_datatools:1.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDC23AF-EEC3-4DF9-8EC6-A7B094224EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_datatools:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB1A4631-D677-468C-9A31-DD5C4BBDDF28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_policy_manager:1.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "25AEF3E6-1113-41A5-9357-96F8374C4A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_policy_manager:1.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "2749B665-DA7F-4F6A-9F52-3A4D0A10BAFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_audit_policy_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AD8658-B2BB-4E60-8EAA-7B491F2D6027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C363D8B-1022-4C2A-BEDE-34EAB274D9D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8C8321-1BE6-476D-910E-6BBDBE683309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr1:*:*:*:*:*",
            "matchCriteriaId" : "054689EB-D43E-4C0F-B504-FE615607332A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr2:*:*:*:*:*",
            "matchCriteriaId" : "40DC453F-12F6-4D51-ADFF-71D2628F3CD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22073",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016910",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29011",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446611/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446716/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446611/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446716/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "El módulo Database en Moodle anterior a 1.6.2 no maneja adecuadamente la actualización de ficheros, lo que permite un impacto no especificado y ataques de vectores remotos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors."
      }, {
        "lang" : "es",
        "value" : "Moodle anterior a 1.6.2 no valida adecuadamente el modulo de instancia id cuando crea un objeto del módulo en curso, lo cual tiene un impacto no especificado y vectores remotos de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages."
      }, {
        "lang" : "es",
        "value" : "lib/setup.php en Moodle anterior a 1.6.2 fija el nivel del informe de error a 7 a mostrar los mensajes E_WARNING a los usuarios si la depuración está desactivada,lo cual permite a los usuarios remotos validados obtener información sensible disparando los mensajes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message."
      }, {
        "lang" : "es",
        "value" : "help.php en Moodle before 1.6.2 no valida la existencia de ciertos ficheros de ayuda antes de incluirlos, lo cual permitiría a usuarios remotos validados obtener la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname."
      }, {
        "lang" : "es",
        "value" : "backup/backup_scheduled.php en Moodle anterior a 1.6.2 genera un rastro de datos con el nombre de la ruta de la copia de seguridad siempre que el depurador se encuentre desactivado, lo cual podría permitir a un atacante obtener el nombre de la ruta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action."
      }, {
        "lang" : "es",
        "value" : "login/forgot_password.php en Moodle anterior a 1.6.2 permite a un atacante remoto obtener información sensible (dirección de correo electrónico y nombres de la cuentas en Moodle) a través de una acción de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Moodle anteriores a 1.6.2 podrían permitir a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro choose en files/index.php y(2) el parámetro sub en doc/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top level of the dataroot directory via (a) filter/algebra/pix.php or (b) filter/tex/pix.php."
      }, {
        "lang" : "es",
        "value" : "Moodle anterior a 1.6.2, cuando la configuración no tiene (1) algebra o (2) filtros de texto, permite a un usuario validado escribir ficheros de salida LaTex o MimeTex al nivel más alto del directorio dataroot a través de (a) filter/algebra/pix.php o (b) filter/tex/pix.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter."
      }, {
        "lang" : "es",
        "value" : "course/jumpto.php en Moodle anterior a 1.6.2 no valida la llave de sesión (sesskey) antes de proporcionar el contenido de URIs locales de su elección, que permite que atacantes remotos obtengan información sensible a través del parámetro jump."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "8F20C403-413B-4474-8E4A-B6E0845F493C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680CE396-5F61-409C-A152-4D1E1CB44EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4944",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/pear/Net/DNS/RR.php en ProgSys 0.151 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro phpdns_basedir ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boesch_it-consulting:progsys:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.151",
            "matchCriteriaId" : "C24C9EA6-4E28-4109-ADB8-36687CD66420"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20141",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _PHPLIB[libdir] parameter to (1) rechnung.php or (2) prepend.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivos en Cardway (también conocido cómo Frederic Boudaud) DigitalWebShop 1.128 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro _PHPLIB[libdir] a (1) rechnung.php o (2) prepend.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cardway:digitalwebshop:1.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269A142C-83D7-40D4-83DA-BDA6A939F8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cardway:digitalwebshop:1.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A75ADE-94DA-4A22-8AD1-B9E45D4B3CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cardway:digitalwebshop:1.128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "635F12E7-11A2-43A0-BD86-12A463052B1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22026",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en include/startup.inc.php en CMSDevelopment Business Card Web Builder (BCWB) 0.99, y posiblemente 2.5 Beta y anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsdevelopment:business_card_web_builder:*:beta:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "30A470EA-D286-45C3-A065-863538CE1E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsdevelopment:business_card_web_builder:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA69894B-2D8E-4060-8178-FB2E66F585FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsdevelopment:business_card_web_builder:2.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "8E142791-7F5A-49FE-A3D1-903D2698B899"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22024",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20116",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"lack of validation on output.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Drupal 4.7 Search Keywords anterior a 1.15 de 15/09/2006, permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de vectores sin especificar relacionados con \"la carencia de la validación en salida\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:search_keyword_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15",
            "matchCriteriaId" : "EE1E5A00-B6E8-47A2-9B35-FB59E193CC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:search_keyword_module:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A98C629-87A9-4268-B95A-C2805A329BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:search_keyword_module:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CB85E8-CE25-48FC-8563-F9A4B7C0B609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:search_keyword_module:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3076CA9-1CBF-4FF5-8032-AF549C6C0BCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/85050",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22021",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20126",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/85050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Drupal core is not affected. If you do not use the Search Keywords module there is nothing you need to do.\r\nThis issue may allow an attacker to gain administrative privileges, provided that certain conditions are met.\r\nThis vulnerability is addressed in the following module update:\r\nDrupal, Search Keyword Module, 1.15 (patch 2006/09/15)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en tftpd.exe en ProSysInfo TFTP Server TFTPDWIN 0.4.2 y anteriores, permite a un atacante remoto ejecutar código de su elección o provocar denegación de servicio a través de un nombre de fichero grande. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prosysinfo:tftp_server_tftpdwin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.2",
            "matchCriteriaId" : "B8B8EB60-C9E6-4659-9212-5631B4BA7653"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21854",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1 and the Drupal 4.7 Site Profile Directory (profile_pages.module) before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"lack of validation on output,\" possibly in the name and title parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Drupal 4.6 Site Profile Directory (profile_pages.module) anterior a 1.1.2.1 y en Drupal 4.7 Site Profile Directory (profile_pages.module) anteriores a 1.2.2.1, permite a un atacante remto inyectar secuencias de comandos web o HTML a través de vectores no especificados relacionados con \"la carencia de validación en salida\", posiblemente en los parámetros name y title."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:site_profile_directory_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29ED3A37-B781-4C91-9E5E-3D2BC2C72630"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/85048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22035",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29061",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/85048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables."
      }, {
        "lang" : "es",
        "value" : "Cisco IOS 12.2 hasta 12.4 anteriores al 20/09/2006, usados por Cisco IAD2430, IAD2431, y IAD2432 Integrated Access Devices, el VG224 Analog Phone Gateway, y el MWR 1900 y 1941 Mobile Wireless Edge Routers, está identificado de forma incorrecta como soporte DOCSIS, lo que permiet a un atacante remoto conseguir acceso lectura-escritura a través de una secuencia de hard-coded cable-docsis y leer o modificar variables SNMP de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.3",
            "matchCriteriaId" : "E3C9293E-8A2C-41FA-84F1-25752BA19339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2928F8-6C6B-4C3F-BBE7-EAE8A0C47E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC51475-7819-4C46-AF3C-251520C3EEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)ja5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5538B7E-6AB4-4DB5-920F-EC2BA61DF73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8011951-B642-4706-8936-74DCB59304C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)jk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042B6178-F186-40F3-A1AB-51AEAFCB7244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19940BFF-0888-4717-AC5F-87A85BE165A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C4D3D1-5E63-4A1E-BF9B-588FFE5790B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94D6CD6-3AF5-4CC6-991D-3D8C229A1C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xa5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60704633-BFAB-486F-A613-A806733E9AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5A2A58-D7B2-4018-BAAE-D6CB49A3A709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C268494-F83A-488D-AEE6-AF7D319B6F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484207D7-0AC2-48B6-B86F-182651B6BBB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC53452-31E6-4C9D-88DF-4AD17609DBFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF6C6D9-A2BD-469E-AA75-18C063A435D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(2\\)xe4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE48276-21BF-4275-8512-4C5401423064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40DD5508-B8BF-435C-B316-42FEDDDBA859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "114B5329-6A76-4BE9-AA57-3463D614D495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC06EA9-D4D9-42EE-8A98-598356707894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)eo1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF2F9E9-AA00-4A78-A32C-14CAA1C171A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DEA47B2-B51E-4C9C-A9C7-DFC680B32986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2530834-81C3-4524-A4F0-B4F77DBAEB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BCC003-3F88-4369-A387-6B8D0FDFBE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD45AA0-EEE1-43FF-B04D-4063769D71AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7873D1DB-80D0-4076-8716-7618D7161EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF292613-B9BC-4CF1-A6FA-4AFC077D8632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "208EF5CB-8131-443A-928B-391104DC1C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3115134B-46F9-40F0-9ABD-3F35EE635EA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)tpc11a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B810AFB-3555-4882-B12B-9DA52AD37AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B1AF9D-106A-43CB-972C-5E85ADFC355D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C6BBA6-8D45-4BA7-B88E-44D9ECE88009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D460AE-3B86-4178-A9D4-172AD4AF1DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xe4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552EB570-BFD6-4BBE-805B-41A9A5AE35B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DFEF95-E48F-4586-9D70-89C192FD21E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E1EA17-0717-4715-9F2E-48264E18885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACA1E35-3681-4E2C-BAB2-DAD99F24F8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB85916-14A8-4D16-8BE0-D99B8E5B020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC5ED4F-1905-4EAA-8AFF-BC50B879725C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F672CDF2-ACC2-485E-89C6-42E47974C8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C47064-BDD5-4EE7-BAB1-E8FE21EB7DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC204B9A-1C01-4900-B515-5796B0B06E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xk4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A06F5D-ADA4-44C6-84EA-7229428B7AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67151B56-DD5F-4384-9651-FA927CE73D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(4\\)xq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111C62A4-9DF0-4317-9F95-0112BE24D727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF0189B-964F-46EC-BE5F-8076CFE7AB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5\\)b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691E3441-AF70-4959-BBA0-60F5328F8FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "53430E70-FBAD-42F7-8614-7AB04E566810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B670057C-7A86-4F61-8FF5-88E6BFE2B5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC9F410-782A-416C-9E10-AF43D5BD44FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5a\\)b5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27107AB2-87AB-4909-9F6D-352BA94F8032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4403BFFB-8A89-4512-8030-5DEDC0C0FF93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE38549C-107E-4350-90F2-BA928E3872AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7601422B-1C22-44D2-A398-1586814A9F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(5f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B9FEE8-FFBB-46E6-A1EA-A243A0073853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9B4FE3-7A03-430F-AE68-743559D74DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5C4FD2-E4BC-447D-8B3B-0248BFBE9121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BBFB86-2745-4817-9516-50CB08AAA82D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F645CEE-083C-412E-BCEF-2761AC266CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(6f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CCD5B9-0771-47B3-A280-6566A489A5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56529125-65D8-4900-A741-0AE18852B7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF14EE4-1D49-4E1B-9589-2F3A8BF3E3E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3029C050-D02D-4DA3-B8B9-901F808BBDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEADF66-3434-41E0-9527-4D97F1836A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C82EB5-8397-4C0D-8074-7B55D83708B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6735142-065C-4AA2-B78A-FCD7CA8CB50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337C0195-34F6-4683-A944-2F698A677476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75901574-5BDD-4388-96F9-A2B4E9970F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)t12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBCC011-54AB-4E8E-BC20-68E6F274D323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0A3B5B-4E6B-437A-B355-D9DCDF078201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689D066C-972F-4868-A6A3-2F5522489D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xi7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CA13FE-93EF-414A-A8D5-333D4A5B9320"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19F9376-BE29-4F08-B86F-E1634FF750F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68DC1732-CED8-4FA6-9A75-000BABBEA5C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7\\)xr6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570AF3F9-D3F5-44B1-82A1-3C7966A27BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(7.7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5719F49C-0BCC-40F9-825A-4C3C9D4D2239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4701FFB8-6361-4B0F-B413-2649A6FC650E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC4D9F-F7C1-4887-BDC6-62F4BDFE5079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21932884-D10B-4C2D-99C5-ED4DE3DA38E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4C56D7-435E-4AE3-BAE8-96A6EAB57488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44A3B72-EFF5-460D-8EE0-13782AAFDB20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378FFEBE-3815-4293-943E-86771AB6D63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)t11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB99DAF-0BF1-43FE-8263-AF8F5EEA7D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78D2BD4-CD3F-40D2-8F0F-FC765A9B1ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66A1B2C-D653-4275-ADC5-6298A70C939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76DFDE5D-231C-4B79-85CF-2B2097E12437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)xy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6F2B19-7FF1-45E7-91B6-A427343099DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)ya1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F0AD5B-4C2D-4C9D-8207-0A67F9AF995A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91192EA-0320-43D1-8D73-FAD57CC18259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC57A97-0A3C-466F-AA15-5D97AC528503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581D9245-944E-4464-924B-6CB1E874FFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE205377-1B09-4498-8538-F2B7DF91E579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBBB1FA-5FA9-4042-AE12-F39307C27F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8108DEF0-102A-452B-9B94-D5AAA3918322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4666469-0A0F-4D28-8A1E-39D82ED210CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61130D36-B1EF-41F1-AF14-57475BE25FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD8A9BF-F084-447C-B28C-2736E8C3A83D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(8\\)yi3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A515A997-5922-4C07-9C68-0D071E811F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21837255-F23B-488A-A9FB-ED984020147D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F92965-6498-40EC-8AF7-D31466F973A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9417A9B3-CAD8-4E69-9871-484DED263683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39601936-034D-4F48-9F02-0F0E251E34F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3761893-292D-41E8-9800-C888B235E6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EE4026-2A06-4E63-924C-43E663EA47DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(9e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF8B6B9-3023-4C33-AFB1-C8C4E1504178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "697C9EFC-7B70-438F-A418-AEFA22841655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF6B0F5-0E61-4ECC-B329-80ABCAED3057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F6275E-146F-4B70-B14C-D857DDA13819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(10e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F590204-33CC-4A6A-9C37-380ADC15813A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDCFFDE0-284E-4107-98DA-C30724E4BF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4F50FF-2A42-4BE6-84D8-C6C2A5938125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48ACEA8-6E12-40CF-868B-DE343BEBFE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71775098-8BA1-442F-9709-0BCE255DD773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8355DB7C-2E2C-4108-BD0F-361B0B898D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80E065F-ABB5-4824-9C59-A53690B0CD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)t9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4E3DC5-0F83-42DE-9482-92DB413DCDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FEE13-5E2A-4011-B720-63EFAFF55049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)xl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81FACB05-B13D-494E-8AA3-5590391E6F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E27655-2889-4B2A-9C48-ADD48ED5B365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F58FC83-C321-4A9F-8EE2-1531B73E064C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7D8166-6522-437F-AEDE-2AC02913FC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yf4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B805F909-5650-4884-9990-F3776DF203AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C705B7F5-2BE4-45F9-8B5F-9FAC900FF6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5610D63-0E50-4AB3-A6F7-36BCF7F69EF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F5092A-473E-4356-9EFB-9E3EBFCD5F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF310185-68F5-48BB-8E11-E38E1961B380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E24302-D04B-45D1-AC6A-0CE45F9B9F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723B58EA-9686-425C-99DD-FBECDF6E2225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3EA745A-8AFE-4461-AB53-1FC71E080BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E109B3D5-90BB-45B6-8265-B32465AC85E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)ys1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C441F423-86ED-49DF-8BFC-3CA988C9177A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(11\\)yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D39082-D9B4-4AD2-BA93-D688E098F037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F0BFAB-D26C-4D17-B5AB-647780423E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59A3B6E-59F6-47B1-BC28-C0B171F1E1F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(12e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3FBFC2-0628-4A56-A96C-904807E85B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B69920A-6775-4D3B-81A8-F971875C43D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4093FE1B-3B95-4F25-AAF5-329FEBE0F0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9411EF8-54EF-49CB-BA09-3AE1133D3146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AA815E-CD4A-44D5-A772-93CB340E7998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(13b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AB99B6-84C5-426A-A037-5022FD00E6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32302AE-54E2-423A-A418-6C7EAE2CDF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F616AE0-42B4-403B-B610-99DE15EE490D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCEBBD5-FA7F-4478-8F00-AC6CA598CADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)t5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A83281-667D-4D1A-9F76-CFF3E5AD560F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)ym4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FD8309-111A-45BC-819A-99FE9E002ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C7F308-DB1C-4500-81E4-9E3325D58A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD9C9A9-9B90-479A-9D2D-8681056892AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19661048-2B60-437E-9D56-9189BFC4C8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yq4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF870144-DFCD-4ADC-A695-3DF9266890EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D389A57A-005E-40B1-8DFC-3347F67F19F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7CEBAF-65BB-4A89-8C3B-CEF1052D99E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B311DEA-F602-49DA-8208-353D2D33283F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(14\\)yu1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14407B6-FEC1-4FD8-8359-CA3EC5477B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(15\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD190476-DC7A-4033-9149-062D75704AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(15b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4510B95-F9F7-4407-B00F-F91B352C99C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3\\(16\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E236CDE4-3369-4CDF-B0F0-4888610CCFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292F6F99-19B3-4106-A432-5DE916CCDD56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40183EF8-BD19-49AD-9E55-7FCCA635327F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E40D5D-F46E-4098-A46A-1A52A343310D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550709E5-9302-4FCB-A969-2DA54BCB2184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D73E5138-016A-48EC-A367-3D3285AAFED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332B0446-4D8B-414B-B572-84B45D5643AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D40FB896-E20C-46B1-BF59-FBB42295F9C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C3B413-76F7-413B-A51F-29834F9DE722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F12741-69FB-46DD-A670-8461492B338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2D158-6174-4AE8-83DA-125B072B6980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5688D88-A550-43EB-8854-2E132EC71156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218E2D3-4F1E-440F-A2B2-A68D4692BB17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E3044F-3CE8-4970-9A7F-FDF555F622A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1018E04C-5575-4D1A-B482-D1CDB9AD6A50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68FC4904-1F4D-4E10-AF95-911B07827598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB57AAA9-4715-468F-A734-A12209A6069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480D480A-80A3-4113-A1A6-194A8DD47F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B9E611-3F06-424C-96EF-EE4997C70AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FE195E-084B-4F4C-800D-850165DED48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A310F30-F94D-4A70-94BD-6B94D7B5F5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB74F350-37F8-48DF-924E-415E51932163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xv:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72732395-1B82-4E4F-9D63-D1CA0C6BD929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E618BF54-56DC-40FC-A515-3BFB4366F823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1976E53-85A6-494F-B8AC-847E7988850C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A668D08-14C4-4438-A59C-CE60498BEF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56032FBD-FEE7-4B38-B35E-CD277B931DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CF930C-6871-4BCB-8605-B71F82455123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520304A4-EB15-42A8-A402-8251A4D2076D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ye:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A9B6F-A5D8-403C-9018-0E627FBC9A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46B66D6-1BF1-4DCA-868F-BADE3CB96063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA88C064-898F-4C0D-A266-D7B3509C28A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139B1182-61A3-4F3D-9E29-758F27917646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3706F-B00A-405E-917E-7FD5217E0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yl:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F2BCA9F-5D56-4EF4-8675-7B76129B994B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595DCBA-E6F2-4551-A804-4DBB137F076B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09698AAF-F4D1-41EE-A960-38FAB645B5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DF12B-2A20-4AC5-8EC5-729008D87736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B75FC35-2B4D-4CEE-BE71-D497DF787123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8711A47-ABD5-40ED-847A-8D1663E3D819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2958873B-A0AB-4EAF-A5CF-8423739FAB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B65738-134F-4C1A-916B-D6CD6365CB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5331586-8380-4F77-8735-17EC0D0E503A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "93024CE7-DBA3-4C25-B7D4-4D2DA6AB880D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5769F6-8C69-4AC7-A3E3-75D275B2AC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)mr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35536E91-A58D-40F7-A256-34128E64B920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F69329B-4D37-428E-B467-E3B9314A4D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9615B275-5748-46CC-8A77-4A9550A39050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421CD923-6282-4404-A642-C04E1F57F12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADF72EC-43B4-4FC0-9BA0-7CC91D4745B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(2\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDB772E-F9A9-4EBA-958F-CDFCB2DA6BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0D6801-E9A8-416B-830B-7682A9AF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B2F9E0-E5FF-42D7-8CEF-359FDDFB4059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(4\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10AADAC-4687-4308-8E4F-B7F9549556DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6483CB-7838-45F7-AE28-824AD71172A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7414D32-88A1-416E-A717-3F47B6D1BE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21974",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/123140",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20125",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/123140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename."
      }, {
        "lang" : "es",
        "value" : "Neon WebMail para Java anterior a 5.08 permite a un atacante remoto ejecutar código Java (JSP) de su elección a través del envio de un correo electrónico con un un fichero JSP adjuntado, el cual es almacenado bajo la raiz del web con un nombre de archivo prefijado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*",
            "matchCriteriaId" : "11B4EF7A-0FBC-47B8-9655-987B9E176E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*",
            "matchCriteriaId" : "9841D3E7-74B1-48A6-A840-D429C75921CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter."
      }, {
        "lang" : "es",
        "value" : "El servlet updatemail en Neon WebMail para Java anterior a 5.08 permite a un atacante remoto mover mensajes de correo electrónico de usuarios de su elección entre diferentes carpetas de correo, especificados a través de los parámetros folderid y tofolderid, a través del parámetro ID."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*",
            "matchCriteriaId" : "11B4EF7A-0FBC-47B8-9655-987B9E176E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*",
            "matchCriteriaId" : "9841D3E7-74B1-48A6-A840-D429C75921CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the (a) addrlist servlet, and the (3) sortkey and (4) sortkey_desc parameters in the (b) maillist servlet."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Neon WebMail para Java anterior 5.08 permite a un atacante remoto ejecutar comandos SQL de su elección a través de los parámetros (1) adr_sortkey y (2) adr_sortkey_desc en el servlet (a) addrlist, y el (3) sortkey y (4) los parámetros sortkey_desc en el servlet(b) maillist."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*",
            "matchCriteriaId" : "11B4EF7A-0FBC-47B8-9655-987B9E176E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*",
            "matchCriteriaId" : "9841D3E7-74B1-48A6-A840-D429C75921CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying (1) passwords and (2) permissions, (3) viewing profile settings, and (4) creating and (5) deleting users."
      }, {
        "lang" : "es",
        "value" : "El servlet updateuser en Neon WebMail para Java anterior a 5.08  no valida el parámetro in_id, lo que permite a un atacante remoto modificar información de usuarios de su elección, como se demuestra con la modificación de (1) contraseñas y (2) permisos, (3)ajustado el perfil de visionado, y (4) creando y (5)elminando usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*",
            "matchCriteriaId" : "11B4EF7A-0FBC-47B8-9655-987B9E176E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*",
            "matchCriteriaId" : "9841D3E7-74B1-48A6-A840-D429C75921CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en el servlet downloadfile en Neon WebMail pra Java anterior a 5.08 permite a un atacante remoto leer ficheros de su elección a través de la secuencia ..(punto punto) en los parámetros (1)savefolder y (2) savefilename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*",
            "matchCriteriaId" : "11B4EF7A-0FBC-47B8-9655-987B9E176E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*",
            "matchCriteriaId" : "9841D3E7-74B1-48A6-A840-D429C75921CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arbitrary web script or HTML via the in_name parameter, as used by the Name field."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el servlet updateuser en Neon WebMail para Java anterior 5.08 permite a un atacante remoto inyectat secuencias de comandos web o HTML de su elección a través del parámetro in_name, que se usa en el campo Name."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.06:*:java:*:*:*:*:*",
            "matchCriteriaId" : "11B4EF7A-0FBC-47B8-9655-987B9E176E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neosys:neon_webmail:5.07:*:java:*:*:*:*:*",
            "matchCriteriaId" : "9841D3E7-74B1-48A6-A840-D429C75921CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://vuln.sg/neonmail506-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de inyección SQL en la función GetMember en functions.php en MyReview 1.9.4 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro email en Admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the_myreview_system:myreview:1.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE31B74A-AC97-48D5-A80D-CB8BA2883774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21991",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi.  NOTE: This information is based upon a vague initial disclosure.  Details will be updated as they become available."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sun Secure Global Desktop (SSGD, también conocido como Tarantella) anterior a 4.20.983  permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados, posiblemente afecte a (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, o (7) test-cgi. NOTA: Esta información se basa sobre en una información básica.  Los detalles serán puestos al día cuando se encuentren disponibles."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:secure_global_desktop:3.42:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "6DCA2744-A4A1-497D-A133-9D2B4E56BAF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:secure_global_desktop:4.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D957237E-B27F-4830-94C9-4C2ACE107AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102650-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446566/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102650-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446566/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi.  NOTE: This information is based upon a vague initial disclosure.  Details will be updated as they become available."
      }, {
        "lang" : "es",
        "value" : "Sun Secure Global Desktop (SSGD, también conocido como Tarantella) anterior a 4.3 permite a un atacante remoto obtener información sensible, incluyendo el nombre del servidor, versiones, y detalles de configuración, a través de vectores no especificados, posiblemente afecte a 1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, o (7) test-cgi. NOTA: Esta información esta basa en una información inicial. Los detalles serán actualizados cuando se encuentren disponibles."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:secure_global_desktop:3.42:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "6DCA2744-A4A1-497D-A133-9D2B4E56BAF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:secure_global_desktop:4.0:*:enterprise:*:*:*:*:*",
            "matchCriteriaId" : "D957237E-B27F-4830-94C9-4C2ACE107AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446566/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446566/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an error message resulting from a failed SQL query."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en index.php Php Blue Dragon 2.9.1 y anteriores, permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro m, el cual se refleja en un mensaje de error como resultado de un fallo en una consulta SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_dragon:php_blue_dragon:platinum_2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95710926-EE8E-4FC9-8098-2A41EE73D4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_dragon:php_blue_dragon:platinum_2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A967BA-4749-4265-90B4-D97020045C97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la función GetModuleConfig en public_includes/pub_kernel/pbd_modules.php en Php Blue Dragon 2.9.1 y anteriores, permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro m en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_dragon:php_blue_dragon:platinum_2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95710926-EE8E-4FC9-8098-2A41EE73D4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_dragon:php_blue_dragon:platinum_2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A967BA-4749-4265-90B4-D97020045C97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22031",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en pbd_engine.php en Php Blue Dragon 2.9.1 y anteriores permite a un atacante remoto leer y ejecutar código archivos de su elección a través de la secuencia ..(punto punto) a través del parámetro phpExt, como se demuestra con la ejecución de código PHP en un fichero grande."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_dragon:php_blue_dragon:platinum_2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95710926-EE8E-4FC9-8098-2A41EE73D4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_dragon:php_blue_dragon:platinum_2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A967BA-4749-4265-90B4-D97020045C97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22031",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/25264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/25264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de directorio transversal en index.php en Exponent CMS 0.96.3 permite a un atacante remoto leer y ejecutar archivos locales de su elección a través de la secuencia ..(punto punto) en el parámetro view en la acción show_view en el módulo calendarmodule, como se demostró con la ejecución de código PHP a través de los ficheros de sesión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exponent:exponent_cms:0.96.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05D36B5-F8FA-4D88-8417-898DDC6B6802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-23T10:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function, and (2) unspecified vectors related to the AntiCracker."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MAXdev MDPro 1.0.76 anterior a  18/09/2006 permite a un atacante remoto inyectar secuencias de comandos web o HTMl de su elección (1) a través de los vectores que evitan los mecanismos de protección del XSS de la función  pnVarCleanFromInput, y (2) vectores sin especificar relacionados con el AntiCracker."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.76",
            "matchCriteriaId" : "2361458F-28EB-450F-A3B2-5F64EE350734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99020306-8FD3-4544-B64E-79CBBBD052EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D8CEF6-E28C-4F21-B71D-F82272AA7A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:1.0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A196FEF-6FF1-4486-9E9B-E468942B0703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2346630603/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22050",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.maxdev.com/Article605.phtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.maxdev.com/Downloads-index-req-dldet-lid-497-ttitle-Security_fix_for_MDPro_1.076.phtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20133",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2346630603/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.maxdev.com/Article605.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.maxdev.com/Downloads-index-req-dldet-lid-497-ttitle-Security_fix_for_MDPro_1.076.phtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nMAXdev, MDPro, 1.0.76 (patch 20060918)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain.  NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer."
      }, {
        "lang" : "es",
        "value" : "Apple QuickTime 7.1.3 Player y sus plug-ins permiten a un atacante remoto ejecutar código JavaScript de su elección y posiblemente llevar a cabo otros ataques mediante un archivo QuickTime Media Link (QTL) con un elemento XML embebido y un parámetro qtnext que identifica recursos fuera del dominio original. NOTA: a fecha del 12-09-2007, este problema fue demostrado utilizando instancias de Components.interfaces.nsILocalFile y Components.interfaces.nsIProcess para ejecutar archivos locales de su elección en Firefox y posiblemente Internet Explorer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A8015-B18B-481C-AC17-60F0D7EEE085"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22048",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27414",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gnucitizen.org/blog/backdooring-mp3-files/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/751808",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446750/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453756/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/479179/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20138",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gnucitizen.org/blog/backdooring-mp3-files/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/751808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446750/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453756/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/479179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4966",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T00:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[phpQRootDir] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en inc/ifunctions.php en chumpsoft phpQuestionnaire (phpQ) 3.12 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro GLOBALS[phpQRootDir]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chumpsoft:phpquestionnaire:3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B058AE88-82FC-4142-80F3-AFFAF6F07CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22042",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-08.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446748/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-08.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446748/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category action in index.php or (2) the SearchWd parameter in an index search action in index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comnados en sitios cruzados (XSS) en NextAge Cart permite a un atacante remoto insertar secuencias de comandos web o HTML de su elección a través del (1) parámetro CatId en la acción de categoria de un producto en index.php o (2) el parámetro SearchWd en una acción de búsqueda en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextage:nextage_shopping_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D9A7CC-B151-45CC-874A-80699A87FA71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22030",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446412/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446412/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/functions_admin.php en PNphpBB 1.2g permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:pnphpbb:1.2g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D6B5596-152F-46CC-8BF8-3CB9A55A09C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://noc.postnuke.com/frs/download.php/1094/patch_1.2g-1.2i.diff.gz",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446267/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446568/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20097",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://noc.postnuke.com/frs/download.php/1094/patch_1.2g-1.2i.diff.gz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446267/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446568/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en WAHM E-Commerce Pie Cart Pro permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro Inc_Dir parameter en (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, o (17) error.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wahm_e-commerce:pie_cart_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1514E01-CB82-41C6-A8F2-02D88DBBF6E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20099",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the Home_Path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en enc/content.php en WAHM E-Commerce Pie Cart Pro permite a un atcante remoto ejecutar código PHP de su elección a través de una URL en el parámetro Home_Path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wahm_e-commerce:pie_cart_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1514E01-CB82-41C6-A8F2-02D88DBBF6E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446419/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20112",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446419/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "MyBB (también conocido cómo MyBulletinBoard) permite a un atacante remoto obtener información sensible a través de una respuesta directa para inc/plugins/hello.php, lo que revela la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4409B6-9F4D-4136-BA74-43736215A122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EC0E67-111A-4989-A311-6B051D37CEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42490451-EA60-4C61-99FB-526EFA3CBA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956399FC-9377-478D-98E9-0024C61CA7E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446093/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446093/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote attackers to inject arbitrary web script or HTML via the navbits[][name] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en archive/index.php/forum-4.html en MyBB (también conocido cómo MyBulletinBoard) permite a un atacante remoto inyectar una secuencia de comandos web o HTML de su elección a través del parámetro navbits[][name]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B187F-D0C5-4001-B877-3B0122784BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04152D8-60BE-4362-BF68-688DE53A066C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98789943-2C7D-404E-B61E-04C436C1681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9114F7E3-D7E4-4DDF-8826-195EC63117E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8FD48E-3B6A-4FD9-AA65-CCED2CC6E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A8A8C-24BE-4B28-9CF4-46DD04ED38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1079E0F-7B89-45A9-83AD-F72470A63B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3A929-B608-42FC-BB31-7599146E8CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F4409B6-9F4D-4136-BA74-43736215A122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D70B64CF-6EF1-487A-9617-68F904ACE727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94EC0E67-111A-4989-A311-6B051D37CEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0846A9BC-9FFC-4C93-911D-431688A6FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42490451-EA60-4C61-99FB-526EFA3CBA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybulletinboard:mybulletinboard:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956399FC-9377-478D-98E9-0024C61CA7E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1628",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446093/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446093/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-24T17:34:37.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Default.aspx en Perpetual Motion Interactive Systems DotNetNuke anteriores a 3.3.5, y 4.x anteriores a 4.3.5, permite a un atacante remoto inyectar HMTL de su elección a través de un parámetro de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2548573E-7FDD-425D-95B6-ADCEAA77F722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2577EF82-53B4-4214-89EA-A292DE87F30B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E536AA-D810-4D2D-BF58-A1CDB37D9B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E04BBB1-E7C2-44E5-AAD7-405EC5CEE5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.10d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF31E99C-DD44-4016-82C2-9F52D54C691F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:1.0.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED5EEC4-20B7-40A8-AF4F-34A3520F5011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE6E92-32F1-4388-89A3-386D6054A274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1310A0F-89BC-4199-9588-A676A65B8985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:3.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A385977D-BE60-4EA3-B416-D2D33B1616CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63CE487-4186-4264-9E65-39B3F4ABC3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B169A9F8-CEB6-4F99-B0BE-A25BEF964208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2824231-B0CD-46A2-967E-93691A53F30B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22051",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.secureshapes.com/advisories/vuln20-09-2006.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20117",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.secureshapes.com/advisories/vuln20-09-2006.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Ipswitch WS_FTP Limited Edition (LE) 5.08  permite a un a servidores FTP remotos ejecutar código de su elección a través de un repuesta grande a un comando PASV."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:5.08_limited_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8C33D9-E18C-4520-BF34-4EF04F0825A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22032",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service."
      }, {
        "lang" : "es",
        "value" : "Yahoo! Messenger para WAP permite guardar mensajes que contienen JavaScript, lo cual permite a atacantes con la complicidad del usuario inyectar secuencias de comandos web o HTML de su elección a través de una URL en el servicio en linea."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F32DA0-0851-4093-8380-F4EA5F53F47C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv47-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446414/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv47-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446414/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) server.php, (2) adodb-errorpear.inc.php, (3) adodb-iterator.inc.php, (4) adodb-pear.inc.php, (5) adodb-perf.inc.php, (6) adodb-xmlschema.inc.php, and (7) adodb.inc.php; files in datadict including (8) datadict-access.inc.php, (9) datadict-db2.inc.php, (10) datadict-generic.inc.php, (11) datadict-ibase.inc.php, (12) datadict-informix.inc.php, (13) datadict-mssql.inc.php, (14) datadict-mysql.inc.php, (15) datadict-oci8.inc.php, (16) datadict-postgres.inc.php, and (17) datadict-sybase.inc.php; files in drivers/ including (18) adodb-access.inc.php, (19) adodb-ado.inc.php, (20) adodb-ado_access.inc.php, (21) adodb-ado_mssql.inc.php, (22) adodb-borland_ibase.inc.php, (23) adodb-csv.inc.php, (24) adodb-db2.inc.php, (25) adodb-fbsql.inc.php, (26) adodb-firebird.inc.php, (27) adodb-ibase.inc.php, (28) adodb-informix.inc.php, (29) adodb-informix72.inc.php, (30) adodb-mssql.inc.php, (31) adodb-mssqlpo.inc.php, (32) adodb-mysql.inc.php, (33) adodb-mysqli.inc.php, (34) adodb-mysqlt.inc.php, (35) adodb-oci8.inc.php, (36) adodb-oci805.inc.php, (37) adodb-oci8po.inc.php, (38) adodb-odbc.inc.php, (39) adodb-odbc_mssql.inc.php, (40) adodb-odbc_oracle.inc.php, (41) adodb-oracle.inc.php, (42) adodb-postgres64.inc.php, (43) adodb-postgres7.inc.php, (44) adodb-proxy.inc.php, (45) adodb-sapdb.inc.php, (46) adodb-sqlanywhere.inc.php, (47) adodb-sqlite.inc.php, (48) adodb-sybase.inc.php, (49) adodb-vfp.inc.php; file in perf/ including (50) perf-db2.inc.php, (51) perf-informix.inc.php, (52) perf-mssql.inc.php, (53) perf-mysql.inc.php, (54) perf-oci8.inc.php, (55) perf-postgres.inc.php; tests/ files (56) benchmark.php, (57) client.php, (58) test-datadict.php, (59) test-perf.php, (60) test-pgblob.php, (61) test-php5.php, (62) test-xmlschema.php, (63) test.php, (64) test2.php, (65) test3.php, (66) test4.php, (67) test5.php, (68) test_rs_array.php, (69) testcache.php, (70) testdatabases.inc.php, (71) testgenid.php, (72) testmssql.php, (73) testoci8.php, (74) testoci8cursor.php, (75) testpaging.php, (76) testpear.php, (77) testsessions.php, (78) time.php, or (79) tmssql.php, which reveals the path in various error messages."
      }, {
        "lang" : "es",
        "value" : "La Date Library in John Lim ADOdb Library para PHP permite a un atacante remoto obtener información sensible a través de una respuesta directa para (1) server.php, (2) adodb-errorpear.inc.php, (3) adodb-iterator.inc.php, (4) adodb-pear.inc.php, (5) adodb-perf.inc.php, (6) adodb-xmlschema.inc.php, and (7) adodb.inc.php; files in datadict including (8) datadict-access.inc.php, (9) datadict-db2.inc.php, (10) datadict-generic.inc.php, (11) datadict-ibase.inc.php, (12) datadict-informix.inc.php, (13) datadict-mssql.inc.php, (14) datadict-mysql.inc.php, (15) datadict-oci8.inc.php, (16) datadict-postgres.inc.php, and (17) datadict-sybase.inc.php; files in drivers/ including (18) adodb-access.inc.php, (19) adodb-ado.inc.php, (20) adodb-ado_access.inc.php, (21) adodb-ado_mssql.inc.php, (22) adodb-borland_ibase.inc.php, (23) adodb-csv.inc.php, (24) adodb-db2.inc.php, (25) adodb-fbsql.inc.php, (26) adodb-firebird.inc.php, (27) adodb-ibase.inc.php, (28) adodb-informix.inc.php, (29) adodb-informix72.inc.php, (30) adodb-mssql.inc.php, (31) adodb-mssqlpo.inc.php, (32) adodb-mysql.inc.php, (33) adodb-mysqli.inc.php, (34) adodb-mysqlt.inc.php, (35) adodb-oci8.inc.php, (36) adodb-oci805.inc.php, (37) adodb-oci8po.inc.php, (38) adodb-odbc.inc.php, (39) adodb-odbc_mssql.inc.php, (40) adodb-odbc_oracle.inc.php, (41) adodb-oracle.inc.php, (42) adodb-postgres64.inc.php, (43) adodb-postgres7.inc.php, (44) adodb-proxy.inc.php, (45) adodb-sapdb.inc.php, (46) adodb-sqlanywhere.inc.php, (47) adodb-sqlite.inc.php, (48) adodb-sybase.inc.php, (49) adodb-vfp.inc.php; file in perf/ including (50) perf-db2.inc.php, (51) perf-informix.inc.php, (52) perf-mssql.inc.php, (53) perf-mysql.inc.php, (54) perf-oci8.inc.php, (55) perf-postgres.inc.php; tests/ files (56) benchmark.php, (57) client.php, (58) test-datadict.php, (59) test-perf.php, (60) test-pgblob.php, (61) test-php5.php, (62) test-xmlschema.php, (63) test.php, (64) test2.php, (65) test3.php, (66) test4.php, (67) test5.php, (68) test_rs_array.php, (69) testcache.php, (70) testdatabases.inc.php, (71) testgenid.php, (72) testmssql.php, (73) testoci8.php, (74) testoci8cursor.php, (75) testpaging.php, (76) testpear.php, (77) testsessions.php, (78) time.php, or (79) tmssql.php, lo cual revela la ruta en varios mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:john_lim:adodb_date_library:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D13AE8-2A79-4497-AE65-093955C1CE58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445995/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/445995/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4977",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image, and (d) path parameters, possibly requiring directory traversal sequences in the path parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en actualizaciones de archivos no restrictivas en (1) back/upload_img.php y (2) admin/upload_img.php en Walter Beschmout PhpQuiz 1.2 y anteriores permite a un atacante remoto actualizar código PHP de su elección a la carpeta phpquiz/img_quiz  a través de los parámetros (a) upload, (b) ok_update, (c) image, y (d) path, posiblemente necesitando de secuencias de atravesamiento de directorios en el parámetro path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:walter_beschmout:phpquiz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "B32B2FFF-2965-4343-AA75-4964DA65C564"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22015",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.morx.org/phpquiz.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446315/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.morx.org/phpquiz.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Walter Beschmout PhpQuiz 1.2 y anteriores, permite a un atacante remoto ejecutar comandos SQL de su elección a través de (1) el parámetro univers en score.php y (2) el parámetro quiz_id en home.php, y que se accede a través de front/URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:walter_beschmout:phpquiz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "B32B2FFF-2965-4343-AA75-4964DA65C564"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22015",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.morx.org/phpquiz.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446315/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.morx.org/phpquiz.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4979",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-25T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático directo en cfgphpquiz/install.php en Walter Beschmout PhpQuiz 1.2 y anteriores, permite a un atacante remoto inyectar código PHP de su elección en config.inc.php a través de las opciones de configuración modificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:walter_beschmout:phpquiz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "B32B2FFF-2965-4343-AA75-4964DA65C564"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22015",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.morx.org/phpquiz.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446315/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2376",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.morx.org/phpquiz.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446315/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-4178."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por desbordamiento de entero en la llamada i386_set_ldt en FreeBSD 5.5, y posiblemente versiones anteriores desde la 5.2, permite a usuarios locales provocar denegación de servicio (caída) y posiblemente ejecutar código mediante vectores no especificados, una vulnerabilidad diferente a CVE-2006-4178."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "54404517-CA93-438F-9ED2-489B03251BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD73CDB-94C5-4DBF-8B4C-DD3E4E399445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-09/0376.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446945/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-09/0376.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446945/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) via unspecified arguments that use negative signed integers to cause the bzero function to be called with a large length parameter, a different vulnerability than CVE-2006-4172."
      }, {
        "lang" : "es",
        "value" : "Error de presencia de signo (signedness) de entero en la llamada i386_set_ldt  en FreeBSD 5.5, y posiblemente versiones anteriores desde la 5.2, permite a usuarios locales provocar una denegación de servicio (caída) mediante argumentos no especificados que usan enteros con signo negativo para provocar la llamada a la función bzero con un parámetro de gran longitud, una vulnerabilidad diferente a CVE-2006-4172."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "54404517-CA93-438F-9ED2-489B03251BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7C441E-444B-4DF5-8491-86805C70FB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD73CDB-94C5-4DBF-8B4C-DD3E4E399445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A80E6A-6502-4A33-83BA-7DCC606D79AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD85B1ED-1473-4C22-9E1E-53F07CF517E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=415",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446946/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446946/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4981",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that (1) permits all non-Windows devices or (2) whitelists certain sets of Organizationally Unique Identifiers (OUIs)."
      }, {
        "lang" : "es",
        "value" : "Symantec Sygate NAC permite a atacantes físicamente próximos evitar los métodos de control y unirse a la red local seleccionando una dirección MAC falsificada asociada con una regla de excepción que (1) permite todos los dispositivos no Windows o (2) pone en la lista blanca (whitelist) cierto grupo de Identificadores Organizacionales Únicos (OUIs)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:sygate_network_access_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5F5306-29D6-405A-9789-B907E433B000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address of a disconnected printer."
      }, {
        "lang" : "es",
        "value" : "Cisco NAC mantiene una lista de excepciones que no guarda propiedades de dispositivo que no sean direcciones MAC, lo que permite a atacantes físicamente próximos evitar los métodos de control y unirse a la red local suplantando la dirección MAC de un tipo diferente de dispositivo, como se ha demostrado usando la dirección MAC de una impresora desconectada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:network_access_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA567228-118D-4A98-BFCC-D86F12F39D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4983",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco NAC allows quarantined devices to communicate over the network with (1) DNS, (2) DHCP, and (3) EAPoUDP, which allows attackers to bypass control methods by tunneling network traffic through one of these protocols."
      }, {
        "lang" : "es",
        "value" : "Cisco NAC permite a dispositivos en cuarentena comunicarse a través de la red con (1) DNS, (2) DHCP, y (3) EAPoUDP, lo cual permite a atacantes remotos evitar los métodos de control pasando el tráfico de la red a través de uno de estos protocolos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:network_access_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA567228-118D-4A98-BFCC-D86F12F39D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446421/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446421/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter in (1) adminpanel/includes/mailinglist/mlist_xls.php and (2) adminpanel/includes/add_forms/addmp3.php.  NOTE: the other vectors from the original disclosure are already covered by CVE-2006-3193."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Grayscale BandSite CMS permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro GLOBALS[root_path] en (1) adminpanel/includes/mailinglist/mlist_xls.php y(2) adminpanel/includes/add_forms/addmp3.php. NOTA: los otros vectores del acceso original son ya cubiertos por CVE-2006-3193."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grayscale:bandsite_cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE10712-893A-4EB9-AF9D-446362E4E111"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446576/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML via (1) the max_file_size_purdy parameter in adminpanel/includes/helpfiles/help_mp3.php, (2) the message_text parameter in adminpanel/includes/mailinglist/sendemail.php, (3) the this_year parameter in includes/footer.php, and the band parameter in (4) adminpanel/includes/helpfiles/help_news.php (5) adminpanel/includes/helpfiles/help_merch.php, (6) adminpanel/includes/header.php, and (7) adminpanel/login_header.php; and includes/content/ files including (8) bio_content.php, (9) gbook_content.php, (10) interview_content.php, (11) links_content.php, (12) lyrics_content.php, (13) member_content.php, (14) merch_content.php, (15) mp3_content.php, (16) news_content.php, (17) pastshows_content.php, (18) photo_content.php, (19) releases_content.php, (20) reviews_content.php, (21) shows_content.php, and (22) signgbook_content.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Grayscale BandSite CMS permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) the max_file_size_purdy en adminpanel/includes/helpfiles/help_mp3.php, (2) el parámetro message_text en adminpanel/includes/mailinglist/sendemail.php, (3) el parámetro this_year en includes/footer.php, y el parámetro the_band en (4) adminpanel/includes/helpfiles/help_news.php (5) adminpanel/includes/helpfiles/help_merch.php, (6) adminpanel/includes/header.php, y (7) adminpanel/login_header.php; y los ficheros incluidos en includes/content/ (8) bio_content.php, (9) gbook_content.php, (10) interview_content.php, (11) links_content.php, (12) lyrics_content.php, (13) member_content.php, (14) merch_content.php, (15) mp3_content.php, (16) news_content.php, (17) pastshows_content.php, (18) photo_content.php, (19) releases_content.php, (20) reviews_content.php, (21) shows_content.php, y (22) signgbook_content.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grayscale:bandsite_cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE10712-893A-4EB9-AF9D-446362E4E111"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446576/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/content directory, (2) includes/shows_preview.php, and (3) adminpanel/configform.php; and files in adminpanel/includes/ including (4) mailinglist/disphtmltbl.php, (5) mailinglist/dispxls.php, (6) mailinglist/sendshows.php, (7) previews/preview_bio.php, (8) previews/preview_genmerch.php, (9) previews/preview_fliers.php, (10) previews/preview_gbook.php, (11) previews/preview_interviews.php, (12) previews/preview_links.php, (13) previews/preview_lyrics.php, (14) previews/preview_membio.php, (15) previews/preview_merchphotos.php, (16) previews/preview_mp3s.php, (17) previews/preview_news.php, (18) previews/preview_photos.php, (19) previews/preview_releases.php, (20) previews/preview_relmerch.php, (21) previews/preview_relphotos.php, (22) previews/preview_reviews.php, (23) previews/preview_shows.php, (24) previews/preview_wearmerch.php, (25) change_forms/change_bio.php, (26) change_forms/change_fliers.php, (27) change_forms/change_gbook.php, (28) change_forms/change_gen_merch.php, (29) change_forms/change_interview.php, (30) change_forms/change_links.php, (31) change_forms/change_lyrics.php, (32) change_forms/change_members.php, (33) change_forms/change_merch.php, (34) change_forms/change_merch_pic.php, (35) change_forms/change_mp3s.php, (36) change_forms/change_news.php, (37) change_forms/change_photos.php, (38) change_forms/change_rel_merch.php, (39) change_forms/change_rel_pic.php, (40) change_forms/change_releases.php, (41) change_forms/change_reviews.php, (42) change_forms/change_shows.php, and (43) change_forms/change_wear_merch.php, which reveals the path in various error messages."
      }, {
        "lang" : "es",
        "value" : "Grayscale BandSite CMS permite a un atacante remoto obtener información sensible a través de una pregunta directa para (1) ficheros concretos en el directorio includes/content, (2) includes/shows_preview.php, y (3) adminpanel/configform.php; y ficheros en adminpanel/includes/ including (4) mailinglist/disphtmltbl.php, (5) mailinglist/dispxls.php, (6) mailinglist/sendshows.php, (7) previews/preview_bio.php, (8) previews/preview_genmerch.php, (9) previews/preview_fliers.php, (10) previews/preview_gbook.php, (11) previews/preview_interviews.php, (12) previews/preview_links.php, (13) previews/preview_lyrics.php, (14) previews/preview_membio.php, (15) previews/preview_merchphotos.php, (16) previews/preview_mp3s.php, (17) previews/preview_news.php, (18) previews/preview_photos.php, (19) previews/preview_releases.php, (20) previews/preview_relmerch.php, (21) previews/preview_relphotos.php, (22) previews/preview_reviews.php, (23) previews/preview_shows.php, (24) previews/preview_wearmerch.php, (25) change_forms/change_bio.php, (26) change_forms/change_fliers.php, (27) change_forms/change_gbook.php, (28) change_forms/change_gen_merch.php, (29) change_forms/change_interview.php, (30) change_forms/change_links.php, (31) change_forms/change_lyrics.php, (32) change_forms/change_members.php, (33) change_forms/change_merch.php, (34) change_forms/change_merch_pic.php, (35) change_forms/change_mp3s.php, (36) change_forms/change_news.php, (37) change_forms/change_photos.php, (38) change_forms/change_rel_merch.php, (39) change_forms/change_rel_pic.php, (40) change_forms/change_releases.php, (41) change_forms/change_reviews.php, (42) change_forms/change_shows.php, y (43) change_forms/change_wear_merch.php, lo cual revela la ruta en varios mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grayscale:bandsite_cms:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE10712-893A-4EB9-AF9D-446362E4E111"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446576/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20137",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globals[content_dir] parameter in (1) example-view/templates/article.php, (2) example-view/templates/root.php, and (3) example-view/templates/dates_list.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivos en Patrick Michaelis Wili-CMS  permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro globals[content_dir] en (1) example-view/templates/article.php, (2) example-view/templates/root.php, y (3) example-view/templates/dates_list.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patrick_michaelis:wili-cms:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D5DB52-3117-4AA3-AD59-16F2BDA53764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4988",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via (1) the query string to relocate.php, (2) the globals[pageid] parameter in example-view/inc/print_button.php, and other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades se secuencias de comandos en sitios cruzados (XSS) en Patrick Michaelis Wili-CMS permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de una (1) pregunta de cadena a (1)relocate.php, (2) el parámetro globals[pageid] en example-view/inc/print_button.php, y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patrick_michaelis:wili-cms:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D5DB52-3117-4AA3-AD59-16F2BDA53764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbnail.php, (2) functions/admin/all.php, (3) functions/admin/init_session.php, (4) functions/all.php, and (5) certain files in example-view/admin_templates/, which reveals the path in various error messages."
      }, {
        "lang" : "es",
        "value" : "Patrick Michaelis Wili-CMS permite a un atacante remoto obtener información sensible a través de una pregunta directa para (1) thumbnail.php, (2) functions/admin/all.php, (3) functions/admin/init_session.php, (4) functions/all.php, y (5)ciertos ficheros en example-view/admin_templates/,lo cual revelan la ruta en varios mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patrick_michaelis:wili-cms:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D5DB52-3117-4AA3-AD59-16F2BDA53764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446575/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446575/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter in (1) addfav.php, (2) adm-admlog.php, (3) adm-approve.php, (4) adm-backup.php, (5) adm-cats.php, (6) adm-cinc.php, (7) adm-db.php, (8) adm-editcfg.php, (9) adm-inc.php, (10) adm-index.php, (11) adm-modcom.php, (12) adm-move.php, (13) adm-options.php, (14) adm-order.php, (15) adm-pa.php, (16) adm-photo.php, (17) adm-purge.php, (18) adm-style.php, (19) adm-templ.php, (20) adm-userg.php, (21) adm-users.php, (22) bulkupload.php, (23) cookies.php, (24) comments.php, (25) ecard.php, (26) editphoto.php, (27) register.php, (28) showgallery.php, (29) showmembers.php, (30) useralbums.php, (31) uploadphoto.php, (32) search.php, or (33) adm-menu.php, different vectors than CVE-2006-4828."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en PhotoPost permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro PP_PATH en (1) addfav.php, (2) adm-admlog.php, (3) adm-approve.php, (4) adm-backu\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EC4189-43E3-4E9A-A3B0-958A2C0F1116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:photopost:photopost_php_pro:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F04E77C-C9ED-4CAE-964C-6AB395BFEBE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32234",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32240",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32243",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/32253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446224/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/32253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446224/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs without detection by (1) modifying or deleting a <LOG BLOCK> and its signature from the XML log in a way that is not detected by the integrity check function that operates on the entire pool, or (2) modifying entries in the live log file, which is only signed during rotation."
      }, {
        "lang" : "es",
        "value" : "RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 y 6.6 permite que los usuarios locales privilegiados ocultar actividades malévolas del Certificate Authority (CA) modificando los registros del interventor del CA sin su detección por (1) modificación o supresión de <LOG BLOCK> y su firma del registro XML abre una sesión de manera que no sea detectada por la función de chequeo de integridad que funciona sobre toda el fondo, o (2) entradas de modificación en el fichero de registro directo, que se firma solamente durante la rotación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:keon_certificate_authority_manager:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADDB62CF-F83E-4B57-AE5A-210D46E5FFE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsa:keon_certificate_authority_manager:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "822111CD-A016-4749-9FB8-25A534D12FCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049592.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446742/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049592.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446742/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4992",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) wp-comments-post.php, (2) wp-feed.php, or (3) wp-trackback.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en JD-WordPress para Joomla! (com_jd-wp) 2.0-1.0 RC2 permite a un atacante remoto ejecutar código PHP de su elección través de una URL en el parámetro mosConfig_absolute_path en (1)wp-comments-post.php, (2) wp-feed.php, o (3) wp-trackback.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:jd-wordpress:2.0.1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA1B329-2E02-4A76-9156-F5577B05237E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C81064.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.babilonics.com/?q=node/1802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28997",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28998",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28999",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19209",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C81064.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.babilonics.com/?q=node/1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4993",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _AMGconfig[cfg_serverpath] parameter in (1) modules/AllMyGuests/signin.php (aka the Nuke module) and (2) AllMyGuests/signin.php (aka the standalone)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en AllMyGuests 0.4.1 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro _AMGconfig[cfg_serverpath] en modules/AllMyGuests/signin.php (también conocido como el módulo Nuke) y (2) AllMyGuests/signin.php (también conocido como el autónomo)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allmyguests_project:allmyguests:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.1",
            "matchCriteriaId" : "C340FD19-43D3-4CA4-A1AA-1E97492F3C45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22095",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20303",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3863",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29064",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2405",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://secunia.com/advisories/22095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicious program file in %SYSTEMDRIVE%, which is run when XAMPP attempts to execute (1) FileZillaServer.exe, (2) mysqld-nt.exe, (3) Perl.exe, or (4) xamppcontrol.exe with an unquoted \"Program Files\" pathname."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de ruta de búsqueda Windows no entrecomillada en Apache Friends XAMPP 1.5.2 permite a usuarios locales obtener privilegios mediante un fichero de programa malicioso en %SYSTEMDRIVE%, el cual es ejecutado cuando XAMPP intenta ejecutar (1) FileZillaServer.exe, (2) mysqld-nt.exe, (3) Perl.exe, o (4) xamppcontrol.exe con un nombre de ruta \"Program Files\" no entrecomillado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apachefriends:xampp:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08FD137A-79D7-4D87-9E9B-D29BE6F6DCAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046218.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secdev.zoller.lu/research/xamp1.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.apachefriends.org/en/news-article%2C75557.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434699/30/4860/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046218.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secdev.zoller.lu/research/xamp1.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.apachefriends.org/en/news-article%2C75557.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/434699/30/4860/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en BSQ Sitestats (bsq_sitestats) anterior a 2.1.1 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:bsq_sitestats:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFE1D6-DA3C-48D1-8E26-27E6A532E99F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T02:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in JoomlaLib (com_joomlalib) before 1.2.2 for Joomla! allows remote attackers to have an unknown impact, related to \"Joomla globals hacked by script kiddies.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en JoomlaLib (com_joomlalib) anterior a 1.2.2 para Joomla! permite a atacantes remotos tener un impacto desconocido, relacionado con \"Joomla globals hacked by script kiddies.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomlalib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0_beta",
            "matchCriteriaId" : "78601DE8-D0EA-466C-9415-153F44A292D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomlalib:1.0.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CCA626-3E57-4136-878C-8667BAD24BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomlalib:1.1.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187AC2F3-706E-443C-BD21-7EEF5E72FD75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forge.joomla.org/sf/projects/joomlalib",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C77899.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forge.joomla.org/sf/projects/joomlalib",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C77899.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T20:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands.  NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en WS_FTP Server 5.05 anterior a Hotfix 1, y posiblemente otras versiones anteriores a la 5.0, tienen impacto y vectores de ataque remotos autenticados desconocidos mediante los comandos (1) XCRC, (2) XMD5, y (3) XSHA1. NOTA: en la publicación anterior de este identificador en 26/09/2006, la descripción fue usada por el asunto equivocado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0A22A5-FBBB-4B7D-A64D-8F021B60181F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:5.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA85C3EF-DAD2-4383-9E97-65B4D77A73E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:5.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C708EB23-580C-4925-BBD8-ED4C8A69A688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4F7DAA-DB7C-4CCC-9521-131FEFC776FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447077/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-029.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/41829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447077/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/41829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-26T20:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being displayed in the (1) Files and (2) Summary tabs.  NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el analizador de log en WS_FTP Server 5.05 anterior a Hotfix 1, y posiblemente versiones anteriores a la 5.0, previene que cierta información sensible sea mostrada en las pestañas (1) Files y (2) Summary. NOTA: en la publicación anterior de este identificador en 26/09/2006, la descripción fue usada para el asunto equivocado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:5.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0A22A5-FBBB-4B7D-A64D-8F021B60181F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipswitch:ws_ftp_server:5.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA85C3EF-DAD2-4383-9E97-65B4D77A73E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.05",
            "matchCriteriaId" : "50BFB437-2855-401A-AD99-D20A51F2DA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4F7DAA-DB7C-4CCC-9521-131FEFC776FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4924",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector."
      }, {
        "lang" : "es",
        "value" : "sshd en OpenSSH en versiones anteriores a 4.4, cuando se utiliza la versión 1 del protocolo SSH, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de un paquete SSH que contiene bloques duplicados, los cuales no se manejan correctamente por el detector de ataque de compensación CRC."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316C8534-9CE3-456C-A04E-5D2B789FBE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB67BB-A442-46C2-8BC1-BBEB009AC532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E307F1-C765-409C-835C-133026A5179C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA997F5E-29FE-454A-9006-001D732CD4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114134F3-BDFD-465D-8317-82F9D6EFA5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED5E506-9D2B-4CAF-8455-B9BE7696E49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7CB94E-0479-4939-86F6-0B4BEDE2E739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78135400-BA1A-42AA-BE17-5588442BCF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F2EDC0-3189-4523-882B-9188C852F793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2991C07-5486-4590-A74E-46A379DD3339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB9BE06-0A36-4853-ADF4-9C1A1854278A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC57F38-6545-497B-B6DA-FCAF51755988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DF4CE-E71C-4C10-9F82-B9ECDC94933F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C55B73-497D-4A22-9230-A4160BF97344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0238F009-4BBA-4E6B-9E2A-6045BA9BBE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B235167-9554-4431-88C5-9472DD36FCDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580008AC-2667-4708-8F7E-D70416A460EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05D8E86-EC01-4589-B372-4DEB7845C81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764AD252-CA2F-4A87-BCAA-7747E8C410E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BB9F7-55E5-4CB3-8429-C37C7132799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E6F639-31A0-4026-B6D4-51BA79FB1D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0211BCE3-0DED-40BA-8A21-1A97B91F71C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD7BB30-AC79-4153-852C-1053DCF4DE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48519C6-0C28-49A5-94C7-EF3AA88E2667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9039BE91-AF0A-41E7-8F9F-15375890E120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BCB2EA-DF9D-4853-805B-29FA6274E2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F93417F-2498-4576-9F5D-B59F77D39669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3AB42C-B614-4746-99AD-E94140D91BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458167E5-9BC2-40BE-AC8A-9761A4F19494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86ACA0ED-A3D0-48A7-B06F-13709AD23B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB9262-D05E-4610-9C79-3EDE44AC7C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8176879B-1875-4AC9-B15A-2ABCFCD04F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA26A12-F96A-4025-BBCA-72B7A3B1E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02751E9-2D38-4495-9572-8D84D71D4773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A36BEA2-DAE4-423C-8D85-0F6036351F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DC64F6-FE28-44BA-91D1-EC2DB11B2CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF23EBA1-D3A9-413F-9E83-43A91492C031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CCF5CD-B434-4392-A79A-C1945D2AE30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB456B8-9D8B-4985-858D-6A43FA5EE2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD4E0F6-4EEA-4EC7-83E7-FC6F7D2E7A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35F4ABE-1B0C-4195-8F99-BF993A17882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC7352D-2916-47F7-A256-F897D763DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC3FC36-B246-4DCB-8984-228525D9A356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC861000-37D8-4B0F-BFA0-57E9BE125B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E003AB3C-8DF3-4AE8-82A3-984F30E5599B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBE75FE-DDE2-43BA-80EF-15A6698EABC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683B26F0-5EA2-455A-8948-27C100BBA3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A75B23-2DD7-4EB2-BEAA-049FF4E51A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7279E1EC-DEBC-4ACC-925D-06A7697C162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7910598E-BEC1-4644-9DE4-D8BE505A4F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB416D0C-6C86-450F-8917-D4B1BD82AB1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=148228",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/21923",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22091",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22158",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22164",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22196",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22208",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22236",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22245",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22270",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22352",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22362",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22495",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22926",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24805",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25608",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/29371",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/34274",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-17.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016931",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=681763",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102962-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1189",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/787448",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_62_openssh.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openbsd.org/errata.html#ssh",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/29152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0697.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0698.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447153/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-355-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3777",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1332",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2119",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0740",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29158",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10462",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=148228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/29371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/34274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-17.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=681763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102962-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/787448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_62_openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/errata.html#ssh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0697.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0698.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447153/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-355-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2009/0740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 (invscoutClient_VPD_Survey) allows attackers to overwrite arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM Inventory Scout para AIX 2.2.0.0 hasta 2.2.0.9 (invscoutClient_VPD_Survey) permite a atacantes sobreescribir ficheros de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.0:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "6819D3DC-7C37-4DE0-A5A2-A0A850801C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.1:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "403B99AF-FB6B-4B78-9A78-E20D8D7600CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.2:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "931609EC-75D3-4A6F-AE12-CCB380991910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.3:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "5C154773-FDC4-4F6B-9180-B5F5294C526F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.4:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "16FD3373-7C05-4F6C-858F-35E42CE5FBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.5:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "D1FB413D-08FB-49A3-9AE0-CAF8460B87BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.6:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "6F64050A-8FB4-41F0-8CC9-E14197752FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.7:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "401F55CF-C541-4155-8A25-511F15B081E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.8:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "BF57A103-E9CE-4769-A85D-A7438BB019C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:inventory_scout:2.2.0.9:*:aix:*:*:*:*:*",
            "matchCriteriaId" : "A585C6EB-2120-473A-860E-3C2BC15CC529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22062",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20199",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-16T00:27:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el comando named8 en IBM AIX 5.2.0 y 5.3.0 permite a usuarios locales ejecutar comandos de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22102",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY76102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY76483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20198",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY76102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY76483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the rdist command in IBM AIX 5.2.0 and 5.3.0 allows local users to overwrite arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el comando rdist en IBM AIX 5.2.0 y 5.3.0 permite a usuarios locales sobreescribir ficheros de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22099",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20194",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors involving /etc/slip.login."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en bos.net.tcp.client en IBM AIX 5.2.0 y 5.3.0 permite a usuarios locales ejecutar comandos de su elección mediante vectores no especificados implicando /etc/slip.login."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22111",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20191",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long directory path argument."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en cfgmgr en IBM AIX 5.2.0 y 5.3.0 permite a usuarios locales ejecutar código de su elección mediante un argumento largo de ruta de directorio."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22112",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20190",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29153",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in uucp in IBM AIX 5.2.0 and 5.3.0 allows local users to local users to gain privileges via a Trojan horse program involving uux."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda en un fichero no confiable en uucp en IBM AIX 5.2.0 y 5.3.0 permite a un usuario local obtener privilegios a través de un programa de caballo de troya afectando a uux."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20196",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in utape in IBM AIX 5.2.0 and 5.3.0 allows attackers to execute arbitrary commands and overwrite arbitrary files via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "VUlnerabilidad no especificada en utape en IBM AIX 5.2.0 y 5.3.0 permite a un atacante remoto ejecutar comandos de su elección y lo sobreescritura de archivos de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22119",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20187",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in xlock in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands and overwrite arbitrary files via unspecified vectors, possibly involving a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en xlock en IBM AIX 5.2.0 y 5.3.0 permite a un usuario local ejecutar comandos de su elección y sobre escribir archivos de su elección a través de vectores no especificados, posiblemente involucrando al desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22098",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY87894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY87943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY87894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY87943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda en un fichero no confiable en acctctl en IBM AIX 5.3.0 permite a un usuario local ejecutar comandos de su elección a través de la modificación de la ruta para señalar a un programa mkdir malicioso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in snappd in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via a Trojan horse program, involving the \"system subroutine\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda no confiable en nappd en IBM AIX 5.2.0 y 5.3.0 permite a un usuario local ejecutar comandos de su elección a través de un programa de caballo de troya, involucrando a la  \"subrutina del sistema\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A7DBFF-B11B-47EC-9E52-C12B156739D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6DE57C2-E728-4016-9774-28FB4B0509AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22108",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20193",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://aix.software.ibm.com/aix/efixes/security/README",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=isg1IY88820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service (disable syslog) and prevent security messages from being logged via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Solaris 8, 9, y 10 anteiror a  25/09/2006, permite a un usuario local provocar una denegación de servicio (deshabilitar el registro del sistema) y evitar que los mensajes de la seguridad sean registrados a trvavés de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "32CF7469-6D2F-4E34-8013-7F0D3433D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "11847B60-D66B-4386-940A-C53B11853E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F305CBD-4329-44DE-A85C-DE9FF371425E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:64_bit:*:*:*:*:*",
            "matchCriteriaId" : "63874B2D-AD5D-4BB4-A83B-7B717E570191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86_sparc:*:*:*:*:*",
            "matchCriteriaId" : "AD642D32-1E04-45B3-B799-0440E9EEED9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:hw2:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEB91FE-FB39-4AB2-8172-2A47EC59861B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22083",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102510-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102510-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Solaris 10 before patch 118855-16 (20060925), when run on x64 systems using IPv6, allows remote attackers to cause a denial of service (kernel panic) via crafted IPv6 packets."
      }, {
        "lang" : "es",
        "value" : "Sun Solaris 10 anterior al parche 118855-16 (25/09/2006), cuando se ejecuta sober sistemas x64 usando IPv6 permite a un atacante remoto provocar denegación de servicio (kernel panic) a través de paquetes artesanales IPv6."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:64_bit:*:*:*:*:*",
            "matchCriteriaId" : "63874B2D-AD5D-4BB4-A83B-7B717E570191"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22103",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102568-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102568-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en cPanel anterior a 10.9.0 12 Tree permite a usuarios remotos autenticados obtener privilegios mediante vectores no especificados en (1) mysqladmin y (2) hooksadmin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B33AE8-75A8-4454-A1A3-33F4034015FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4394768-37BE-4FC5-A65A-28C0295A33B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC52A018-43E8-4D86-A84C-81064B6ACD74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC66D8D-01B8-4312-A311-ACAB43699071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E892FB52-DB84-422F-ABB6-29AB95726138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC5C591-69F3-411F-A53A-72D17687CA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92D81000-1A7C-4465-9EE2-E651AED09F82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09258895-32E6-49AC-8C96-D2838A0C8E6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4F9F98-08A2-430B-BC96-B30DCA165F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D546C9-674B-4683-9EC5-18156CE04B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E915DEA-1BA9-429D-97D5-CA3D37C969B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.1.0_r85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9DDCBE-8A9C-44FC-8A24-47933CE057F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.4.1_r64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE8C284-5264-4AEB-B8F8-4A58B021A9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:9.9.1_r3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "414CFCA8-87FC-436E-9C41-ACB316578E3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10.2.0_r82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA952D50-2FB6-4517-98D4-8D345056EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10.6.0_r137:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BFD7C-EF52-4B5D-981F-947FB328EE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10.8.1_113:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CD9052-093E-4B8D-8ABE-43CD6156CAD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10.8.2_118:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC79360-2E49-420A-A3D0-1CF54CAE7CE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://changelog.cpanel.net/?build=&showall=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.cpanel.net/showthread.php?t=58134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22072",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://changelog.cpanel.net/?build=&showall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forums.cpanel.net/showthread.php?t=58134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in hit.php in Kietu 3.2 allows remote attackers to execute arbitrary PHP code via an FTP URL in the url_hit parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en hit.php en Kietu 3.2 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL FTP en el parámetro url_hit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kietu:kietu:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1485CF3-BDCC-4DB1-80C8-5D07318437AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/8071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001053.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446930/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/8071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446930/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4694",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-09-27T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en PowerPoint en Microsoft Office 2000, Office XP y Office 2003 permite a un atacante remoto con la intervención del usuario ejecutar código de su elección a través de un archivo PPT artesanal, según lo explotado por el malware como por ejemploExploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, y Exploit-PPT.d/Trojan.PPDropper.F."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49AD45BF-8A91-4C87-AF15-D38D8468A4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB85A3C-EFA3-485D-84C5-7976718AEAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9D02D769-061D-44A5-B019-F4E653DF615A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22127",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016937",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://vil.nai.com/vil/content/v_140666.htm",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.avertlabs.com/research/blog/?p=95",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/231204",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/925984.mspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/29259",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447831/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20226",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-283A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3794",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29225",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A269",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/22127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://vil.nai.com/vil/content/v_140666.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.avertlabs.com/research/blog/?p=95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/231204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/925984.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447831/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-283A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in admin/x_image.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory."
      }, {
        "lang" : "es",
        "value" : "vulnerabilidad de actualización de archivo no restrictivo en admin/x_image.php en Szava Gyula y Csaba Tamas e-Vision CMS, probablemente 1.0, permite a un atacante remoto actualizar ficheros de su elección en el directorio /imagebank.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-vision:e-vision_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE3FC69-8453-4688-989F-54BE641C1CBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446706/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admin/all_users.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admin/all_users.php en Szava Gyula y Csaba Tamas e-Vision CMS, probablemente 1.0, permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro from."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-vision:e-vision_cms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE3FC69-8453-4688-989F-54BE641C1CBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446706/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446706/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI."
      }, {
        "lang" : "es",
        "value" : "ContentKeeper 123.25 y contraseñas anteriores de los lugares en texto plano en un elemento de la en cgi-bin/ck/changepw.cgi, permite que  usuarios remotos validados obtengan contraseñas a través de esta URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contentkeeper_technologies:contentkeeper:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "123.25",
            "matchCriteriaId" : "25574E4D-B204-4F32-BFA7-CADC434DCE5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1639",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aushack.com/advisories/200606-contentkeeper.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446719/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aushack.com/advisories/200606-contentkeeper.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446719/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /search with an invalid client parameter, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "Google Mini 4.4.102.M.36 y anteriores, permite a un atacante remoto obtener información sensible a través de una petición directa a /search con un parámetro client no válido, lo cual revela la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:mini_search_appliance:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.102.m.36",
            "matchCriteriaId" : "DD4D7ECA-1F45-43F2-BD5F-F872BE6A419C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://users.tpg.com.au/adsl2dvp/advisories/200609-googlemini.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446728/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://users.tpg.com.au/adsl2dvp/advisories/200609-googlemini.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446728/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en SolidState 0.4 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro base_path en las secuencias de comandos manager/pages incluyendo \r\n1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, y (73) modules/authorizeaim/pages/AAIMConfigPage.class.php.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solidstate:solidstate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "3926D4E5-71C8-4871-BD2D-8450F8EF9B43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2007-January/001210.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31144",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31192",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31201",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/21934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2007-January/001210.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in (1) the root parameter in imgen.php, and the root_path parameter in (2) admin/config.php, (3) common.php, and (4) admin/index.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivos en redgun RedBLoG 0.5 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en (1) el parámetro root en (2) admin/config.php, (3) common.php, y (4) admin/index.php. NOTA: el origen de esta información es desconocido; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redblog:redblog:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C3F687-96FF-499D-A22C-B84071BD5B52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/global.php in Joshua Wilson pNews System 1.1.0 (aka PowerNews) allows remote attackers to execute arbitrary PHP code via a URL in the nbs parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/global.php en Joshua Wilson pNews System 1.1.0 (también conocido como PowerNews) permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro nbs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnews_systems:pnews:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DB0D6A-B61C-4507-8BB2-2EC79B9EB493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/446929/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20140",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446929/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the kategori parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en kategori.asp en xweblog 2.1 y anteriores permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro kategori."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aspindir:xweblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "4A33F1DC-7D20-4F42-BB2C-038CE11D090E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20145",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.4 have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificas en Paisterist Simple HTTP Scanner (sHTTPScanner) anteriores a 0.4 tienen un impacto desconocido y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paisterist:simple_http_scanner:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B92E87-56E1-41EF-B4C9-FBA597124172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paisterist:simple_http_scanner:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D916E69-8F3D-4EBB-B0DD-2A2BCAACBFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paisterist:simple_http_scanner:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D65F67-8BAD-46CA-82AD-67B5970D9744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21952",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20151",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/21952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no espeficas en Paisterist Simple HTTP Scanner (sHTTPScanner) anteriores a 0.2 tienen un impacto desconocido y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paisterist:simple_http_scanner:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B92E87-56E1-41EF-B4C9-FBA597124172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.3 have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no específicas en Paisterist Simple HTTP Scanner (sHTTPScanner) anterior 0.3 tienen un impacto desconocido y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paisterist:simple_http_scanner:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B92E87-56E1-41EF-B4C9-FBA597124172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paisterist:simple_http_scanner:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D916E69-8F3D-4EBB-B0DD-2A2BCAACBFC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jeroen Vennegoor JevonCMS, possibly pre alpha, allows remote attackers to obtain sensitive information via a direct request for php/main/phplib files (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysql.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, and (7) db_pgsql.inc; and (8) db_sybase.inc, which reveals the path in various error messages."
      }, {
        "lang" : "es",
        "value" : "Jeroen Vennegoor JevonCMS, posiblemente pre alpha, permite a un atacante remoto obtener información sensible a través de una petición directa a los archivos php/main/phplib (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysql.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, y (7) db_pgsql.inc; y (8) db_sybase.inc, lo cual revela la ruta en varios mensajes de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeroen_vennegoor:jevoncms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6E12C7-A0CF-4BC8-AA65-B9597533243C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1638",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446741/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446741/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en SWsoft Plesk 7.5 Reload y Plesk 7.6 para Microsoft Windows permite a un atacante remoto listar directorios de su elección a través de la secuencia ../ (punto punto barra) en el parámetro file en una acción chdir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:plesk:7.6:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "62C8133D-3BFF-45DB-A9BD-CD90CD9B4955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swsoft:plesk_reload:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8567F4E9-D17D-482E-89D1-BBC9B32203BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446730/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/470509/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446730/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/470509/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter.  NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en thread.php en WoltLab Burning Board (wBB) 2.3.x permite a un atacante remoto obtener la versión de número de PHP MySQL, y wBB a través del parámtro page. NOTA: este asunto pudo ser un error forzado del SQL. También, el informe original fue disputado por terceros para 2.3.3 y 2.3.4."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67BF2C7A-2689-4760-8CD9-387BD497789E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40CCEE5-4B68-4F45-911F-0A7089A0609D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5773FB-E267-4546-9E14-782F652C5916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CAAE7C-258A-47E0-B832-642C1C466EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380709B2-5458-46B9-8B23-9F53A15462E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_board:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94ED665B-3297-4B2E-95DE-DCBAF63D17F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/446743/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446937/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446938/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447069/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446743/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446937/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446938/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447069/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sort parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en modules/messages/index.php en exV2 2.0.4.3 y anteriores permite a un usuario remoto validado ejecutar comandos SQL de su elección a través del parámetro sort."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exv2:content_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.4.3",
            "matchCriteriaId" : "42524DE8-FCDD-4E7E-8B58-0980C488848D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22045",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20143",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with \"%00\" and a .js filename."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en app/webroot/js/vendors.php en Cake Software Foundation CakePHP anterior a 1.1.8.3544 permite a un atacante remoto leer archivos de su elección a través de la secuencia ..(punto punto) en el parámetro file, seguido de un nombre de fichero finalizado con \"%00\" y un nombre de archivo .js."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.7.3363",
            "matchCriteriaId" : "16A9857D-C37F-4C46-AD2C-F5D53AA064C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cakeforge.org/frs/shownotes.php?release_id=134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22040",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00114-09212006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20150",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cakeforge.org/frs/shownotes.php?release_id=134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00114-09212006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in dix.php3 in PHPartenaire 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the url_phpartenaire parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en dix.php3 en PHPartenaire 1.0 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro url_phpartenaire."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpartenaire:phpartenaire:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B845B7B-6C4F-406B-BDE9-EDF162225BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22053",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en StoresAndCalendarsList.cgi en Paul Smith Computer Services vCAP 1.9.0 Beta y anteriores permite a un atacante remoto atacar provocando una denegación de servicio a través del parámetro session, relacionado posiblemente con los requisito del formato de cadena o la codificación URL mal formada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_smith_computer_services:vcap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.0_beta",
            "matchCriteriaId" : "3519521C-A3E7-4241-88B8-C10FA2325C32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21862",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.morx.org/vcap.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19959",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.morx.org/vcap.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de directorio tranversal en Paul Smith Computer Services vCAP 1.9.0 Beta y anteriores permite a un atacante remoto leer ficheros de su elección a través de una secuencia .. (punto punto) en la URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_smith_computer_services:vcap:1.9.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4D3F5F-7E1D-4365-8E43-4BBECCB72468"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21862",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.morx.org/vcap.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.morx.org/vcap.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the statusmsg parameter in RegisterPage.cgi or (2) a URI corresponding to a nonexistent file. NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Paul Smith Computer Services vCAP 1.7.0 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro statusmsg en RegisterPage.cgi o (2) un URI correspondiente a un fichero no exitente. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_smith_computer_services:vcap:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72042D3A-DAF8-4013-A14E-7AB0236D5D93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21862",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28809",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28810",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/28809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/28810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that \"The vendor does not consider this a vulnerability."
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDO ** MySource Matrix 3.8 y anteriores, y MySource 2.x, permite a un atacante remoto osar la palicación como un servidor proxy HTTP a través del parámetro sq_remote_page_url para acceder sitios de su elección con la dirección IP del servidor y dirigir ataques de secuencias de comandos de sitios cruzados (XSS). NOTA: el investigador dice que “el vendedor no considera esto una vulnerabilidad.”"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_classic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16.2",
            "matchCriteriaId" : "1E27CB0D-3CC2-47EF-96C8-78AA1F69FD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8",
            "matchCriteriaId" : "DDAD6DD0-C287-465F-A30D-6A1704BF7790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aushack.com/advisories/200607-mysourcematrix.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446722/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aushack.com/advisories/200607-mysourcematrix.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446722/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks.  NOTE: the researcher reports that \"The vendor does not consider this a vulnerability."
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDA ** MySource Matrix after 3.8 permite a un atacante usar la aplicación como un servidor proxy HTTP a través de la codificación MIME de la URL en el parámetro sq_content_src para acceder a sitios de su elección con la dirección IP del servidor y dirigir ataques de secuencias de comandos de sitios cruzados (XSS). NOTA: el investigador divulga que “el vendedor no considera esto una vulnerabilidad.”"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3F45D9-E466-418F-A888-145846953804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:3.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90FBF70-9353-421D-A343-3275AC33FF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:3.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B505F63-F59C-41A0-A826-F7612C6D20C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:3.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84615D2C-751E-47CE-A085-F7D81264A8E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:3.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14CFF841-072A-48D5-8A63-40D433F4B01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:3.8.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67606FD4-042A-46A6-BDC4-564F6128D920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B49E3D-B001-48D9-8425-756AAE69496E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squiz:mysource_matrix:3.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F15D8FFF-7B4C-4332-8E16-91C7A63BC50B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22060",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.aushack.com/advisories/200607-mysourcematrix.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446722/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.aushack.com/advisories/200607-mysourcematrix.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446722/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 01_02_07, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet."
      }, {
        "lang" : "es",
        "value" : "El FiWin SS28S WiFi VoIP SIP/Skype Phone, con firmware version 01_02_07, tiene una nombre de usuario y contraseña altamente codificada, lo cual permite a un atacante remoto obtener accesoa a través de telnet."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:fiwin:ss28s_wifi_voip_sip_skype_phone:2007-02-01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903443EC-8B49-4868-BECE-81B226C7911E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0391.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osnews.com/story.php/15923/Review-FiWin-SS28S-WiFi-VoIP-SIPSkype-Phone/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29114",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0391.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osnews.com/story.php/15923/Review-FiWin-SS28S-WiFi-VoIP-SIPSkype-Phone/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Events 1.3 beta module (com_events) for Joomla! has unspecified impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo Events 1.3 beta (com_events) para Joomla! tiene un impacto no especificado y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_events:1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0F505566-5FD8-42B0-95C0-C7C81A2E0AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:events_module:1.3_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B709B279-BDB3-4EEE-AC27-A4AC9D508F38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C80411.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C80411.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in SEF404x (com_sef) for Joomla! has unspecified impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en SEF404x (com_sef) para Joomla! tiene un impacto no especificado y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_sef:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF1DFD3-FE56-4720-A159-7B8B4C12B1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:sef4040x:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B6BD28-5606-4DC0-8736-B4FFACD9B883"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Hot Properties (possibly com_hotproperties) 0.97 and earlier for Joomla! has unspecified impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Hot Properties (posiblemenet com_hotproperties) 0.97 y anteriores para Joomla! tiene un impacto no especificado y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_hotproperties:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.97",
            "matchCriteriaId" : "18B516A1-8560-4C86-A586-EABFA982A402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:hot_properties:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.97",
            "matchCriteriaId" : "D9F1A83F-5223-4F10-8E1F-2627E7D9ACC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in mosMedia (com_mosmedia) 1.0.8 and earlier for Joomla! has unspecified impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en mosMedia (com_mosmedia) 1.0.8 y anteriores para Joomla! tiene un impacto no especificado y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_mosmedia:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "D9BB1F0D-3D41-47BB-A301-334CA4A987C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:mosmedia:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.8",
            "matchCriteriaId" : "4AE41FFB-15F6-4658-9494-3C79D810836C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C78533.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C78533.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to (1) file_upload.php or (2) image_upload.php, a variant of CVE-2006-3528."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión de archivo PHP remoto en el componente Joomlaboard Forum (com_joomlaboard) anterior a 1.1.2 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro sbp a (1) file_upload.php o (2) image_upload.php, una variante de CVE-2006-3528."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlaboard:joomlaboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "7D5F05F2-AEC7-4498-A3BC-13521345BF16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C76852.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jext.info/builds/joomlaboard/joomlaboard-1.1.1-stable.tgz",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=117468769820721&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21059",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.howtoria.com/index.php?option=com_docman&task=doc_download&gid=32&Itemid=27",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/23129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C76852.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://jext.info/builds/joomlaboard/joomlaboard-1.1.1-stable.tgz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=117468769820721&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.howtoria.com/index.php?option=com_docman&task=doc_download&gid=32&Itemid=27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/23129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada enPrince Clan (Princeclan) Chess componente (com_pcchess) 0.8  y anteriores para Mambo y Joomla, tiene un impacto no especificado y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:prince_clan_chess_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8",
            "matchCriteriaId" : "AA7BD3EB-7E88-4DA1-AD79-3C9BA28F354D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambo:prince_clan_chess_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8",
            "matchCriteriaId" : "5B0014E5-0E9A-4DEC-AE12-4310A6D9D77E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.princeclan.org",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.princeclan.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and attack vectors, probably related to PHP remote file inclusion in the mosConfig_absolute_path to conf.pollxt.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en PollXT componente (com_pollxt) 1.22.07 y anteriores para Joomla! tiene un impacto no especificado y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomlaxt:com_pollxt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.22.07",
            "matchCriteriaId" : "39656748-6094-40FC-B5C2-E2592927726A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C77975.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2843",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C77975.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in RS Gallery2 (com_rsgallery2) 1.11.3 and earlier for Joomla! has unspecified impact and attack vectors, related to lack of \"hardened language files.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en RS Gallery2 (com_rsgallery2) 1.11.3 y anteriores para Joomla! tiene un impacto no especificado y vectores de ataque, relacionado con la carencia de “archivos de lenguaje fortalezidos.”"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.3_alpha",
            "matchCriteriaId" : "8EC09923-3C4D-478D-A575-BAC4D78B492B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.9.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49ADD586-E37A-4D68-B963-66F98ADC41CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.9.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DCB43E-6473-4A49-ACB0-FCEC7C51B5BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD3FF32-D7D0-44FB-807C-E69647A527BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44065C4C-2131-40CD-BFFA-69F4FB51F9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B187E73-FC72-4BA7-85AA-EF7552F9273C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D189904-2276-4343-99D0-3B21720BC78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEF1C69-E79E-4E77-963C-EC1CDFEDE6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADCD609-D334-4EC0-B141-FFF184ED216D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D12600-F07E-4355-9112-ED883A12527F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E310E57C-1E5B-414A-9BEE-D2CB16ECD685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D726CF26-5668-4A44-9D78-A9D1309B8609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA2CC45-B49F-49AE-87AE-944846B5C8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.11_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2421759D-B654-4ED1-9B93-3352645037E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.12_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA1827D-914F-4E9E-BE58-911C53DC69F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.13_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC1CE52-8563-4181-9C1F-483C0DC1EDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.14_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBA0281-A11A-4945-A8DF-61F93E85BAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.11.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C5BF3FA-8731-40DF-A41F-DC20D9997FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.11.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C74CE945-4ABA-4D0D-99DB-F710434886EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.11.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF1C3E6-EC3A-49F4-ABE8-DF413723BDC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C73453.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rsgallery2.net/component/option%2Ccom_rsgallery2/Itemid%2C7/page%2CviewChangelog/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C73453.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rsgallery2.net/component/option%2Ccom_rsgallery2/Itemid%2C7/page%2CviewChangelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in rsgallery2.html.php in RS Gallery2 component (com_rsgallery2) before 1.11.3 for Joomla! allows attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en rsgallery2.html.php en RS Gallery2 componente (com_rsgallery2) anterior a 1.11.3 para Joomla! permite a un atacante remoto ejecutar código de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.2_alpha",
            "matchCriteriaId" : "A7E6C04C-A720-4DA5-8D03-560290C05741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.9.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49ADD586-E37A-4D68-B963-66F98ADC41CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.9.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DCB43E-6473-4A49-ACB0-FCEC7C51B5BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD3FF32-D7D0-44FB-807C-E69647A527BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44065C4C-2131-40CD-BFFA-69F4FB51F9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.3_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B187E73-FC72-4BA7-85AA-EF7552F9273C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.4_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D189904-2276-4343-99D0-3B21720BC78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.5_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEF1C69-E79E-4E77-963C-EC1CDFEDE6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.6_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADCD609-D334-4EC0-B141-FFF184ED216D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.7_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D12600-F07E-4355-9112-ED883A12527F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.8_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E310E57C-1E5B-414A-9BEE-D2CB16ECD685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.9_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D726CF26-5668-4A44-9D78-A9D1309B8609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.10_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA2CC45-B49F-49AE-87AE-944846B5C8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.11_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2421759D-B654-4ED1-9B93-3352645037E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.12_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA1827D-914F-4E9E-BE58-911C53DC69F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.13_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC1CE52-8563-4181-9C1F-483C0DC1EDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.10.14_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DBA0281-A11A-4945-A8DF-61F93E85BAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.11.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C5BF3FA-8731-40DF-A41F-DC20D9997FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:rs_gallery2:1.11.1_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C74CE945-4ABA-4D0D-99DB-F710434886EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rsgallery2.net/component/option%2Ccom_rsgallery2/Itemid%2C7/page%2CviewChangelog/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rsgallery2.net/component/option%2Ccom_rsgallery2/Itemid%2C7/page%2CviewChangelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter in (1) configinsert.php, (2) lang.php, (3) client.php, and (4) server.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Security Images (com_securityimages) componente 3.0.5 y anteriores para Joomla! tiene un impacto no especificado y vectores de ataque, posiblemente vulnerabilidad PHP de inclusión remota de archivos en el parámetro mosConfig_absolute_path  en configinsert.php, lang.php, client.php, y server.php. NOTA: el origen de esta información es desconocida; los detalles se obtuvieron de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waltercedric:com_securityimages:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "EFF00748-6CAF-4E9D-A92B-37E77C96636A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waltercedric:com_securityimages:2.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1573A25-751D-4C84-9275-4F7F75E91BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waltercedric:com_securityimages:2.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D4B123-6270-44CA-B4B7-9FBEF145E4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waltercedric:com_securityimages:3.00:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4129EE47-1BA1-4C49-B2F9-0B6522FE2DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waltercedric:com_securityimages:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F008CF10-A23A-4B56-8773-5627DB4ACE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waltercedric:com_securityimages:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0F908C-6B8F-411E-9A0E-1F73F4B7C436"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C81589.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/27658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/19217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3062",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C81589.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/21260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/27655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/27658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/19217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5049",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Classifieds (com_classifieds) component 1.3 and earlier for Joomla! has unspecified impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Classifieds (com_classifieds) componente 1.3 y anteriores para Joomla! tiene un impacto no especificado y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:classifieds_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "896C3384-F8FF-44BC-9C0F-27749EC51AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:com_classifieds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "A7B387DC-E92C-429F-8C7D-E930CD6D4B1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C82457.0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/84256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C79477.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://forum.joomla.org/index.php/topic%2C82457.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/84256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5050",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded \"%2e%2e/\" sequences in the URI."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en httpd en Rob Landley BusyBox permite a un atacante remoto leer ficheros de su elección a través de la secuencia de codificación URL \"%2e%2e/\" en el URI."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_landley:busybox:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F2F438-6949-440D-9232-D2D5E37D64FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016875",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446228/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446228/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5051",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el manejador de señal OpenSSH en versiones anteriores a 4.4 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario si la autenticación GSSAPI está habilitada, a través de vectores no especificados que conducen a una doble liberación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4",
            "matchCriteriaId" : "3E3FE4E6-870E-4F84-9D50-7BF48ADFB380"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.9",
            "matchCriteriaId" : "6CE37418-3D19-483A-9ADE-2E38272A4ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4",
            "versionEndIncluding" : "10.4.8",
            "matchCriteriaId" : "39D14EF2-E8E0-4021-A493-E822612FFB35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.9",
            "matchCriteriaId" : "3E9A9D63-EEA1-4289-8382-6CC91D2241A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4",
            "versionEndIncluding" : "10.4.8",
            "matchCriteriaId" : "D0D26E9A-DF4A-4795-BE74-2196127BB3E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openssh.org/txt/release-4.4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://secunia.com/advisories/22158",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22173",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22196",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22208",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22236",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22245",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22270",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22352",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22362",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22495",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22823",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22926",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24799",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24805",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-06.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016940",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=681763",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1189",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/851340",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_62_openssh.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#ssh",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/07/01/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/07/28/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/29264",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0697.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0698.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20241",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-355-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4018",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1332",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29254",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2024/07/28/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://openssh.org/txt/release-4.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://secunia.com/advisories/22158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=681763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/851340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_62_openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openbsd.org/errata.html#ssh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/07/01/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/07/28/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0697.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0698.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-355-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2024/07/28/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Successful code execution exploitation requires that GSSAPI authentication is enabled.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5052",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI \"authentication abort.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en OpenSSH portable anterior a 4.4, cuando funciona sobre algunas plataformas permite a un atacante remoto determinan la validación de los nombres de usuario a través de vectores desconocidos afectando a GSSAPI \"aborto de validacion.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316C8534-9CE3-456C-A04E-5D2B789FBE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEB67BB-A442-46C2-8BC1-BBEB009AC532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E307F1-C765-409C-835C-133026A5179C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA997F5E-29FE-454A-9006-001D732CD4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114134F3-BDFD-465D-8317-82F9D6EFA5A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED5E506-9D2B-4CAF-8455-B9BE7696E49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE7CB94E-0479-4939-86F6-0B4BEDE2E739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78135400-BA1A-42AA-BE17-5588442BCF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F2EDC0-3189-4523-882B-9188C852F793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2991C07-5486-4590-A74E-46A379DD3339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB9BE06-0A36-4853-ADF4-9C1A1854278A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC57F38-6545-497B-B6DA-FCAF51755988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DF4CE-E71C-4C10-9F82-B9ECDC94933F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C55B73-497D-4A22-9230-A4160BF97344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0238F009-4BBA-4E6B-9E2A-6045BA9BBE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B235167-9554-4431-88C5-9472DD36FCDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "580008AC-2667-4708-8F7E-D70416A460EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05D8E86-EC01-4589-B372-4DEB7845C81F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764AD252-CA2F-4A87-BCAA-7747E8C410E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269BB9F7-55E5-4CB3-8429-C37C7132799F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E6F639-31A0-4026-B6D4-51BA79FB1D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0211BCE3-0DED-40BA-8A21-1A97B91F71C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD7BB30-AC79-4153-852C-1053DCF4DE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48519C6-0C28-49A5-94C7-EF3AA88E2667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9039BE91-AF0A-41E7-8F9F-15375890E120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BCB2EA-DF9D-4853-805B-29FA6274E2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F93417F-2498-4576-9F5D-B59F77D39669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3AB42C-B614-4746-99AD-E94140D91BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458167E5-9BC2-40BE-AC8A-9761A4F19494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86ACA0ED-A3D0-48A7-B06F-13709AD23B55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB9262-D05E-4610-9C79-3EDE44AC7C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8176879B-1875-4AC9-B15A-2ABCFCD04F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA26A12-F96A-4025-BBCA-72B7A3B1E60C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02751E9-2D38-4495-9572-8D84D71D4773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A36BEA2-DAE4-423C-8D85-0F6036351F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80DC64F6-FE28-44BA-91D1-EC2DB11B2CFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF23EBA1-D3A9-413F-9E83-43A91492C031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CCF5CD-B434-4392-A79A-C1945D2AE30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB456B8-9D8B-4985-858D-6A43FA5EE2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD4E0F6-4EEA-4EC7-83E7-FC6F7D2E7A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35F4ABE-1B0C-4195-8F99-BF993A17882B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC7352D-2916-47F7-A256-F897D763DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC3FC36-B246-4DCB-8984-228525D9A356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC861000-37D8-4B0F-BFA0-57E9BE125B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E003AB3C-8DF3-4AE8-82A3-984F30E5599B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBE75FE-DDE2-43BA-80EF-15A6698EABC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "683B26F0-5EA2-455A-8948-27C100BBA3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A75B23-2DD7-4EB2-BEAA-049FF4E51A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7279E1EC-DEBC-4ACC-925D-06A7697C162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7910598E-BEC1-4644-9DE4-D8BE505A4F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.3p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB416D0C-6C86-450F-8917-D4B1BD82AB1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openssh.org/txt/release-4.4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0697.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22158",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22173",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22823",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/27588",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/28320",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016939",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_62_openssh.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/29266",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0540.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0703.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447861/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20245",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29255",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-681",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10178",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openssh.org/txt/release-4.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0697.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/27588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/28320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_62_openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0540.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0703.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447861/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue did not affect Red Hat Enterprise Linux 2.1 and 3.\n\nThis issue was addressed in Red Hat Enterprise Linux 4 and 5 via\nhttps://rhn.redhat.com/errata/RHSA-2007-0703.html and https://rhn.redhat.com/errata/RHSA-2007-0540.html respectively.",
        "lastModified" : "2009-09-24T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5053",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content_page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en webnews/template.php en Web-News 1.6.3 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro content_page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-news:web-news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.3",
            "matchCriteriaId" : "0F210AB1-A3F2-40EF-91D2-131C1D6F1D38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22075",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20166",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uye_nu parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en uye/uye_ayrinti.asp en iyzi Forum 1 Beta 2 y anteriores permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro uye_nu."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iyzi_forum:iyzi_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1_beta_2",
            "matchCriteriaId" : "81C524BC-9CDB-4DBD-9827-E9BAE3B4C612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the init_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en admin/testing/tests/0004_init_urls.php en syntaxCMS 1.1.1 hasta la versión 1.3 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro init_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum_one:syntaxcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "6A90FFE4-DADD-4FFF-9CDF-E495FF733D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum_one:syntaxcms:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63047CC-E4F3-45A1-8409-BE2380E53807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum_one:syntaxcms:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A8FF60-1BB4-4945-B751-9D33C6F42CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum_one:syntaxcms:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F1908D-A9D7-4DAF-A604-E594CAB6B306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115913461828660&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.syntaxcms.org/content/article/detail/513",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3760",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115913461828660&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.syntaxcms.org/content/article/detail/513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attackers to inject arbitrary web script or HTML via the destination parameter in the Login view."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)  en index.php en Opial Audio/Video Download Management 1.0 y anteriores permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro destinantion en la vista de entrada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opial:opial_audio_video_download_management:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C87747-A166-4232-B6A3-2547A430B104"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446896/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20174",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446896/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Ktools.net PhotoStore permite a un atacante remoto inyectar secuencias de comandos web de su elección o HTML a través del (1) parámetro gid en details.php, (2)el parámetro photogid en view_photog.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ktools.net:photostore:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "471DB769-C620-47E7-A88E-F3A397B5FBB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446909/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20172",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446909/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and earlier allows remote attackers to execute arbitrary code via a long map argument to the \"callvote map\" command."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en (1)Call of Duty 1.5b y anteriores, (2) Call of Duty United Offensive 1.51b y anteriores, y (3) Call of Duty 2 1.3 y anteriores, permite a un atacante remoto ejecutar código de sue elección a través del gran argumento map en el comando \"callvote map\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5b",
            "matchCriteriaId" : "B12C4C1F-9A92-43B7-BDC8-0EF2B3D3B6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56174554-305C-44B2-84AC-1FBFB2630806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "662E2000-476E-425C-8905-9E6D1B16E9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty_united_offensive:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.51b",
            "matchCriteriaId" : "35B326D4-FD28-4509-A5CE-BA802A0CCF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activision:call_of_duty_united_offensive:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794E93AF-7815-4C7B-B1F5-B24C6C8BFA90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aluigi.altervista.org/adv/codmapbof-adv.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22078",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20180",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aluigi.altervista.org/adv/codmapbof-adv.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en WWWthreads 5.4.2 y anteriores, permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro Cat a (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, o (10) postlist.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wired_community_software:wwwthreads:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.2",
            "matchCriteriaId" : "387CB8E8-C6DB-4979-B4C4-747DF29D90ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wired_community_software:wwwthreads:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14269C40-6DCA-4FA5-AAC0-F901F4493FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wired_community_software:wwwthreads:rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773253B4-17E1-435E-9744-076AF5CCF031"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22211",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446911/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20178",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3858",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446911/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login.php en Jamroom 3.0.16 y posiblemente anteriores permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro forgot en el modo forgot."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22077",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446879/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20162",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446879/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in mcf.php in Advanced-Clan-Script (AVCX) 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en mcf.php en Advanced-Clan-Script (AVCX) 3.4 y anteriores permite a un atacante remto ejecutar código PHP de su elección a través de una URL en el parámetro content."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced-clan-script:advanced-clan-script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4",
            "matchCriteriaId" : "E45863BB-3AB9-4810-96A7-C4CE031561E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22070",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2422",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows remote attackers to execute arbitrary PHP code via a URL in the temppath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en templates/pb/language/lang_nl.php en PBLang (PBL) 4.66z y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro temppath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.66z",
            "matchCriteriaId" : "39787444-AC44-4BCD-A426-4E85FA1B975A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8436698F-444F-479A-A559-487AD4DB99B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BDBEE7-263B-40E7-8492-B452BDCE32C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.56_4.5_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD40331D-7781-44F2-9D83-88235A450860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE462871-487D-4D7A-8EC0-8B6C62B091B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8178A159-1008-4DC9-A7EC-17C051D21896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pblang:pblang:4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FA4730-2A9F-452B-B311-0F4109D97417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20184",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML by editing log entries in HTML mode."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Elog 2.6.1 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de la edición de las entradas del log en modo HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stefan_ritt:elog_web_logbook:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA669F5E-B250-4467-B09D-F0ACCB5ED81F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22057",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1242",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entryid parameter in comment.php, (2) page parameter in index.php, or the (3) uid parameter in user.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en BirdBlog 1.4 y anteriores permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del (1) parámetro entryid en comment.php, (2) el parámetro de página en index.php, p (3) el parámetro uid en user.php. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE95DA3-47CF-4756-935E-8F4A6CA995EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25C8F90-AA95-4466-8A2B-6D4E3A9B912F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A97221-1BEC-4E51-A20C-2CE83CFA5A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00115B8-4876-45DB-B99A-219BCC49680B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "524DBD93-0778-4C52-87B6-060284092958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A0BD22-C568-4259-9933-B6A505A22B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birdblog:birdblog:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B24132-D1AA-44AF-8BE0-24FFF9118BCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31369",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1017258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[lib][db][path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en libs/dbmax/mysql.php en ZoomStats 1.0.2 y anteriores, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro GLOBALS[lib][db][path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoomstats:zoomstats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "D32013AE-15E8-4B97-9549-F2EFC6D2F5A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20165",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://zoomstats.cvs.sourceforge.net/zoomstats/zoomstats/libs/dbmax/mysql.php?view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://zoomstats.cvs.sourceforge.net/zoomstats/zoomstats/libs/dbmax/mysql.php?view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in index.php or the (2) do parameter in admin.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en DanPHPSupport 0.5 y otras versiones anteriores a 1.0, permiten a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través (1) del parámetro page en index.php o el parámetro (2) do en admin.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:danphpsupport:danphpsupport:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBF5274-2D80-4B8A-9070-B31F53E0C7D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447002/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448693/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447002/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448693/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter.  NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDA ** Vulnerabilidad PHP de inclusión remota de archivo en loader.php en PHP System Administration Toolkit (PHPSaTK) permite a un atacante remoto ejecutar código PHP de su elección a través de un URL en el parámetro GLOBALS[config]. NOTA: Este asunto está cuestionado por la CVE; el análisis muestra que la variable GLOBALS[config] está inicializada antes de ser usada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_system_administration_toolkit:php_system_administration_toolkit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E28D9809-3F0C-40F8-BEC6-9719CAC57CA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001054.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446882/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450936/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-September/001054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446882/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the o parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en admin/index.php en Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.1 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través deuna URL en el parámetro o."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brudaswen:brudanews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "D9CB2FBA-0FF8-458A-9655-EB06813ACA96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29176",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20192",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2432",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de XSS en class.tx_indexedsearch.php en la extensión Indexed Search 2.9.0 para Typo3 en versiones anteriores a 4.0.2 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "DF9C28A4-7F2C-492D-8514-63C598DC8BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25EAE65C-1E17-48CD-B48C-E0BC09FB6596"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=115918334930694&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22071",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-20060911-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446885/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20173",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=115918334930694&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://typo3.org/teams/security/security-bulletins/typo3-20060911-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446885/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[fsinit][objpath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en fsl2/objects/fs_form_links.php en faceStones Personal 2.0.42 y anteriores permite a un atacante remoto ejecutar código PHP de su eleción a través de una URL en el parámetro GLOBALS[fsinit][objpath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facestones:facestones:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "personal_2.0.42",
            "matchCriteriaId" : "847386A4-141B-418C-9825-FDF812175811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29178",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20188",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) eyeNav and (2) system/baixar.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en eyeOS anterior a 0.9.1 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados que afectan a (1) eyeNav y (2) system/baixar.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0.6",
            "matchCriteriaId" : "0E263F87-5802-48B7-B8CD-4A758DBA462B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3260F95-A78A-4115-9C93-6731218A4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.3_r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E79EAD-72FD-4843-8852-441FEF825D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "021FDB55-22B2-4A39-A5FD-E85EFB4024D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.4_r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B150B0-0AC8-4F67-AB97-5113E1B542E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AACA458-4CE7-4DCA-AA04-D31530318B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BE703A-8086-4EE2-83F1-646B95DB52ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.8.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08633346-561B-455A-AA5E-A4B7CDDECC8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCBC312-159F-45E9-BB14-C2EFBF7739BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37E7F8B-E4A7-463A-BECB-FE687B3D5014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8773B004-1F3D-4F6A-9FA6-D55D254C2BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A46A8F-306F-4383-9509-7E673C335B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:eyeos_project:eyeos:0.9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269A1AF5-7149-48B9-901F-C04BF80A57E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eyeos.blogspot.com/2006/09/eyeos-091-released.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22117",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=145027&release_id=450490",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20213",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://eyeos.blogspot.com/2006/09/eyeos-091-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=145027&release_id=450490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\neyeOS Project, eyeOS, 0.9.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2937",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-28T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition."
      }, {
        "lang" : "es",
        "value" : "OpenSSL 0.9.7 en versiones anteriores a 0.9.7l y 0.9.8 en versiones anteriores a 0.9.8d permite a atacantes remotos provocar una denegación de servicio (bucle infinito y consumo de memoria) a través de estructuras ASN.1 mal formadas que desencadenan una condición de error manejada incorrectamente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A518E8-21BE-4C5C-B425-410AB1208E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E79A05-64F3-4397-952C-A5BB950C967D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98693865-2E79-4BD6-9F89-1994BC9A3E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6476506-EC37-4726-82DC-D0E8254A8CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C81EF3D-4DB7-4799-9670-8D79E28CA184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8116A66-175C-4E6D-9A9B-D54C1D97D213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382C1679-DA1D-4FA4-9D5E-B86CC5052D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA28812-8A24-4FE1-BED9-D6D5BB023645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4EA988-FC80-4170-8933-7C6663731981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F53B-24A1-4877-B16E-F1917C4E4E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D3ACD5-905F-42BB-BE1A-8382E9D823BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-613",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-11.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bind-announce&m=116253119512445&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openbsd.org/errata.html#openssl2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22094",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22165",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22166",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22172",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22186",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22193",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22240",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22330",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22544",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22772",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23131",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23309",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25889",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/30124",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31531",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2374.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-6.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/247744",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:172",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_58_openssl.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060928.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29260",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0695.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447318/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447393/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20248",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/28276",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/player/doc/releasenotes_player.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/server/doc/releasenotes_server.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3860",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4019",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4761",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4980",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2315",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0905/references",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29228",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bind-announce&m=116253119512445&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openbsd.org/errata.html#openssl2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2374.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.f-secure.com/security/fsc-2006-6.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/247744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_58_openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060928.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0695.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447393/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/28276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/player/doc/releasenotes_player.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/server/doc/releasenotes_server.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0905/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2940",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-28T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification."
      }, {
        "lang" : "es",
        "value" : "OpenSSL 0.9.7 en versiones anteriores a 0.9.7l, 0.9.8 en versiones anteriores a 0.9.8d y versiones anteriores permite a atacantes provocar una denegación de servicio (consumo de CPU) a través de claves públicas parasitarias con valores grandes de (1) \"exponente público\" o (2) \"módulo público\" en certificados X.509 que requiere tiempo extra de procesamiento cuando utiliza una verificación de firma RSA."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D983EC-61B0-4FD9-89B5-9878E4CE4405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4C5F05-BC0B-478D-9A6F-7C804777BA41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F417A1-5D97-4BC4-8B97-5AC40236DA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDB5A09-BE86-4352-9799-A875649EDB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6231CAA-00A8-41CE-8436-B84518014CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "A70AD93B-E876-4EAB-9970-752D42E15E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03FA9C0-24C7-46AC-92EC-7834BC34C79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "716ADA01-38B8-4C15-A3BB-D9688DA30599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "B73326F7-7DCE-4EDE-95D7-AE7AED263A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E4742C-A983-4F00-B24F-AB280C0E876D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2D251C-9C45-4EFE-8262-E88AB7CE713A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "6D81E175-E698-40EF-9601-425893FFB1FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0F25B7-A172-4300-8718-112E817A6165"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A0628DF-3A4C-4078-B615-22260671EABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "52B1BE89-BAE0-4656-943B-B9B81D9B54B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "D097222B-ED20-459C-9167-55751FA2C87A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "86DDC8F2-7920-4A73-927E-562C89806972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962FCB86-15AD-4399-8B7D-EC1DEA919C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180D07AE-C571-4DD6-837C-43E2A946007A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90789533-C741-4B1C-A24B-2C77B9E4DE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1520065B-46D7-48A4-B9D0-5B49F690C5B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494E48E7-EF86-4860-9A53-94F6C313746E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2636B92E-47D5-42EA-9585-A2B84FBE71CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A518E8-21BE-4C5C-B425-410AB1208E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E79A05-64F3-4397-952C-A5BB950C967D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98693865-2E79-4BD6-9F89-1994BC9A3E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6476506-EC37-4726-82DC-D0E8254A8CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C81EF3D-4DB7-4799-9670-8D79E28CA184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8116A66-175C-4E6D-9A9B-D54C1D97D213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382C1679-DA1D-4FA4-9D5E-B86CC5052D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA28812-8A24-4FE1-BED9-D6D5BB023645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4EA988-FC80-4170-8933-7C6663731981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F53B-24A1-4877-B16E-F1917C4E4E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D3ACD5-905F-42BB-BE1A-8382E9D823BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-613",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-11.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bind-announce&m=116253119512445&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openbsd.org/errata.html#openssl2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22094",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22165",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22166",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22172",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22186",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22193",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22240",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22330",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22500",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22544",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22671",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22772",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23309",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23351",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25889",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/26893",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/30124",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31531",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016943",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2374.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:172",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_58_openssl.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060928.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/29261",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0695.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447318/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447393/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/22083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/28276",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/player/doc/releasenotes_player.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/server/doc/releasenotes_server.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3860",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4019",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4327",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4980",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2315",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0905/references",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29230",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1633",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bind-announce&m=116253119512445&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openbsd.org/errata.html#openssl2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.attachmate.com/techdocs/2374.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_58_openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060928.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0695.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447393/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/22083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/28276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/player/doc/releasenotes_player.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/server/doc/releasenotes_server.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0905/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/2396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3738",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-28T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función SSL_get_shared_ciphers en OpenSSL 0.9.7 anterior a 0.9.7l, 0.9.8 anterior a 0.9.8d, y versiones anteriores tiene impacto y vectores de ataque no especificados implicando una lista de cifras larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A518E8-21BE-4C5C-B425-410AB1208E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E79A05-64F3-4397-952C-A5BB950C967D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98693865-2E79-4BD6-9F89-1994BC9A3E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6476506-EC37-4726-82DC-D0E8254A8CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C81EF3D-4DB7-4799-9670-8D79E28CA184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8116A66-175C-4E6D-9A9B-D54C1D97D213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382C1679-DA1D-4FA4-9D5E-B86CC5052D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA28812-8A24-4FE1-BED9-D6D5BB023645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4EA988-FC80-4170-8933-7C6663731981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F53B-24A1-4877-B16E-F1917C4E4E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D3ACD5-905F-42BB-BE1A-8382E9D823BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-613",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-11.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://openbsd.org/errata.html#openssl2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22094",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22165",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22166",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22172",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22186",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22193",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22240",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22330",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22385",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22460",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22500",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22544",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22633",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22654",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22772",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22791",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23309",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23794",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24930",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25889",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/30124",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/30161",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1195",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/547300",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:172",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_58_openssl.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060928.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/29262",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0695.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447318/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447393/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/470460/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20249",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22083",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3820",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3860",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3869",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3902",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4036",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4314",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4443",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2315",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=498093&RenditionID=&poid=8881",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29237",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4256",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://openbsd.org/errata.html#openssl2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/30161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/547300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_58_openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060928.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0695.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447393/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/470460/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=498093&RenditionID=&poid=8881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Failed exploit attempts may crash applications, denying service to legitimate users.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4343",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-28T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference."
      }, {
        "lang" : "es",
        "value" : "La función get_server_hello código del cliente SSLv2 en OpenSSL 0.9.7 anterior a 0.9.7l, 0.9.8 anterior a 0.9.8d, y versiones anteriores permite a servidores remotos provocar una denegación de servicio (caída del cliente) mediante vectores desconocidos que disparan un referencia a un puntero nulo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A518E8-21BE-4C5C-B425-410AB1208E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E79A05-64F3-4397-952C-A5BB950C967D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98693865-2E79-4BD6-9F89-1994BC9A3E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6476506-EC37-4726-82DC-D0E8254A8CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C81EF3D-4DB7-4799-9670-8D79E28CA184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8116A66-175C-4E6D-9A9B-D54C1D97D213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "382C1679-DA1D-4FA4-9D5E-B86CC5052D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA28812-8A24-4FE1-BED9-D6D5BB023645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4EA988-FC80-4170-8933-7C6663731981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F8F53B-24A1-4877-B16E-F1917C4E4E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75D3ACD5-905F-42BB-BE1A-8382E9D823BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47538-08EE-4DC1-AC17-883C44CF77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-613",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-11.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata.html#openssl2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22094",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22130",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22165",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22166",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22172",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22186",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22193",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22212",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22216",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22240",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22330",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22460",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22500",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22544",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22772",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22791",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23309",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23794",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25420",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25889",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30124",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-11.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1017522",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1185",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1195",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ingate.com/relnote-452.php",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/386964",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:172",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_58_openssl.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060928.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29263",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0695.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447318/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447393/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20246",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22083",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/28276",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/player/doc/releasenotes_player.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/server/doc/releasenotes_server.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3820",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3860",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3869",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3902",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4036",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4443",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1973",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0905/references",
        "source" : "secalert@redhat.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29240",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10207",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4356",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/4773",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-11.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://openbsd.org/errata.html#openssl2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://openvpn.net/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/30124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1017522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ingate.com/relnote-452.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/386964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_58_openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openssl.org/news/secadv_20060928.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0695.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447318/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447393/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/22083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/28276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.serv-u.com/releasenotes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-353-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/player/doc/releasenotes_player.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/server/doc/releasenotes_server.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2008/0905/references",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/4773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nOpenSSL Project, OpenSSL, 0.9.7l (or later)\r\nOpenSSL Project, OpenSSL, 0.9.8d (or later)",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4925",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL."
      }, {
        "lang" : "es",
        "value" : "packet.c en ssh en OpenSSH permite a atacantes remotos provocar una denegación de servicio (caída) mediante el envío de una secuencia de protocolo inválida con USERAUTH_SUCCESS antes de NEWKEYS, lo que provoca que newkeys[mode] sea nulo (NULL)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B72CFB3-39C7-469C-AA59-69F5B8993BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=148228",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22245",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22495",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_62_openssh.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/packet.c.diff?r1=1.144&r2=1.145&f=h",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447153/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447861/100/200/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-661",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-681",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=148228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_24_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_62_openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/packet.c.diff?r1=1.144&r2=1.145&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447153/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447861/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this flaw a security issue. This flaw can cause an OpenSSH client to crash when connecting to a malicious server, which does not result in a denial of service condition.",
        "lastModified" : "2006-10-31T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than CVE-2006-5013."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sun Solaris 8, 9 y 10 permite a atacantes remotos provocar una denegación de servicio (panic) mediante paquetes IPv6 construidos artesanalmente, una vulnerabilidad distinta de CV6-2006-5013."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22581",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102144-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102144-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en home.php en PHP Invoice 2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro alert."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_invoice:php_invoice:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EB51C-8FC1-47F5-B395-658347989B2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447015/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20221",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447015/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service (system crash) via unspecified vectors related to an SSL client."
      }, {
        "lang" : "es",
        "value" : "El servicio Kernel SSL Proxy (svc:/network/ssl/proxy) en Sun Solaris 10 anterior al 26/09/2006 permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de vectores no identificados relacionados con un cliente SSL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0C0C3793-E011-4915-8F86-CE622A2D37D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102563-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102563-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter in (1) admin/index.php, (2) Facts.php, or (3) search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en OpenConcept Back-End 0.4.5 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro includes_path en (1) admin/index.php, (2) Facts.php, o (3) search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:back-end:back-end_cms:0.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8DDC53-A11F-4ACA-9392-EF2B21C84CDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447005/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448776/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450031/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20207",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29172",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447005/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448776/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450031/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en admin/admin_topic_action_logging.php en Crish Smith Minerva Build 238 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minerva:minerva:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F31F2FEB-96C1-40E1-946D-45808FF8CDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minerva:minerva:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75AE1501-3765-4240-89C5-CEF03D04E12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minerva:minerva:2.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5030C063-00BB-447F-9B41-6BBB7A4DD035"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20185",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3880",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SESSION[dirMain] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en view/general.php en Kristian Niemi Polaring 00.04.03 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro _SESSION[dirMain]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polaring:polaring:00.04.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF9B457-3F5B-4AFE-9A4C-9B9B2564555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=620481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=620481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_to_bt_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en class.mysql.php en Matt Humphrey paBugs 2.0 Beta 3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro path_to_bt_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_arena:pabugs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0_beta_3",
            "matchCriteriaId" : "66DB4508-3F09-493D-B5A8-16ACA575FCF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20222",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función de búsqueda en Six Apart Movable Type 3.3 a 3.32, y Movable Type Enterprise 1.01 y 1.02, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE37614D-A959-4B4A-BF2E-9F3C1072BA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13132B94-C271-46F7-9450-FBA1FCBB914E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:enterprise_1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DE5399-013C-431F-A893-1F2D34AC6DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:six_apart:movable_type:enterprise_1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A338416F-166B-4D47-BBD5-A9B2068E4BE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2368295640/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22109",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20228",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2368295640/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en acc.php en QuickBlogger (QB) 1.4 permite a atacantes remotos ejecutar código PHP arbitrario mediante una URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jl_webworks:quickblogger:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06539CE7-9E8E-4195-8FF0-3F7FC30FD82C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016934",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447003/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29173",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447003/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact, related to code execution, and unspecified attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Sugar Suite Open Source (SugarCRM) anterior a 4.2.1 Patch C (20060917) tiene impacto no especificado, relacionado con ejecución de código, y vectores de ataque no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7326570-63A6-40F0-86B0-EAB257C8714F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFBC41E-AAB6-4ABE-BA1A-3AB69CE34115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1CA3724-D8A7-46B7-8F3F-15CF8F5125E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:4.0_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C952E38-DA14-4E1C-A49B-4A87919AC00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C601C56-1A4D-4FFA-8759-A5B6D6EE4302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984B1C19-C040-4227-B8CA-992EFBEF9B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugar_suite:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8438367F-82D3-4BF9-98CF-280F211B1FAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22110",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20217",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sugarcrm.com/forums/showthread.php?t=16348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3783",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.sugarcrm.com/forums/showthread.php?t=16348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_portal.php in Integrated MODs (IM) Portal 1.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión de archivo en includes/functions_portal.php en Integrated MODs (IM) Portal 1.2.0 y anteriores permite a atacantes remotos ejecutar código PHP arbitrario mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_security:importal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "E33440D4-0E48-4640-B6C6-D0FBE00FCE49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22113",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84255",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/84255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de formato de cadena en la función NSRunAlertPanel en eBay Skype para Mac 1.5.*.79 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código arbitrario a través de una URL de Skype mal formada, como se reportó originalmente para involucrar una referencia null."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skype_technologies:skype:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.79",
            "matchCriteriaId" : "94AAFA98-9830-41D1-961C-21AB850A4A7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22185/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security-protocols.com/vids/skype_osx_0day.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/202604",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.skype.com/security/skype-sb-2006-002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3895",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22185/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security-protocols.com/vids/skype_osx_0day.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/202604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.security-protocols.com/modules.php?name=News&file=article&sid=3259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.skype.com/security/skype-sb-2006-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código estático en config.php en Blog Pixel Motion 2.1.1 permite a atacantes remotos ejecutar código PHP arbitrario mediante el parámetro nom_blog, el cual es inyectado en include/variables.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel_motion:pixel_motion_blog:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F57422-58D2-46D9-880B-556AE4B8950B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/12060927.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22163",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447167/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20235",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/12060927.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447167/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass parameters.  NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not."
      }, {
        "lang" : "es",
        "value" : "Blog Pixel Motion 2.1.1 permite a atacantes remotos cambiar el nombre de usuario y la contraseña del usuario administrador mediante una petición directa a insere_base.php con parámetros (1) login y (2) pass modificados. NOTA: este problema fue considerado inyección SQL por el investigador original, pero no lo es."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixel_motion:pixel_motion_blog:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F57422-58D2-46D9-880B-556AE4B8950B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/12060927.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22163",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447167/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/12060927.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447167/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4247",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-09-29T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to \"an erroneous security declaration.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el Password Reset Tool anterior a 0.4.1 sobre Plone 2.5 y 2.5.1 Release Candidate, permite a un atacante remoto reiniciar las contraseñas de otros usuarios, relacionado con \"una declaración erronea de seguridad\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9762C674-380B-4831-BBA1-3B27742121B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:2.5.1_rc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C01E0884-D0A4-4511-AD4B-DBB09CB8080E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://plone.org/about/security/advisories/cve-2006-4247",
        "source" : "security@debian.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://plone.org/about/security/advisories/cve-2006-4247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in (1) track.php or (2) connect.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en evoBB 0.3 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro path en (1) track.php o (2) connect.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evobb:evobb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3",
            "matchCriteriaId" : "7A2C9699-20F5-4BC3-8352-33EE8C73B858"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20189",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en connected_users.lib.php3 en phpHeaven phpMyChat 0.1 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro ChatPath"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpheaven:phpmychat:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E0B7D2-BF70-4D6B-B903-6FB195BC421D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-09.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447012/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20219",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-09.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this vulnerability because the file variable is defined before use in a way that prevents arbitrary inclusion"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad PHP de inclusión remota de archivo en mybic_server.php en Jim Plush My-BIC 0.6.5 permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro file. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información. CVE impugna esta vulnerabilidad porque la variable file se define antes de ser usada de modo que previene inclusiones arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my-bic:my-bic:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40DEA2E0-D239-447F-96D7-571DF3B19198"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/downloading.php?group_id=164457&filename=mybic_0_6_5.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20208",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://sourceforge.net/project/downloading.php?group_id=164457&filename=mybic_0_6_5.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject arbitrary web script or HTML via the (1) mod or (2) action parameters in index.php, or the (3) pageid parameter in modules/pageedit/index.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Phoenix Evolution CMS (PECMS) permite a un atacante remoto inyectar secuencias de comandos web o HTML de sue elección a través de los parámetros (1)mod o (2)action en index.php, o el parámetro (3)pageid en modules/pageedit/index.php. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenix_evolution:phoenix_evolution_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3A0DD00-B89D-4662-87FD-53C3723D1173"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/33676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/33677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20212",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/33676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/33677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obtain \"unauthorized access\" via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en  HP-UX B.11.11 y B.11.23 CIFS Server (Samba) permite a un usuario local subir privilegios u obtener \"acceso no autorizado\" a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22079",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446941/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446941/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigation_start parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en navigation/menu.php en A-Blog 2 permite a un atacante remoto ejecutar código PHP de su elección a través de la URL en el parámetro navigation_start."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a-blog:a-blog:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D5FAA8-77C6-412A-B206-27A4CC865882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29164",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en Tagmin Control Center en el TagIt! Tagboard 2.1.B Build 2 permite a un atacante remoto ejecutar código PHP de su elección a través de  una URL en parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paul_schudar:tagmin_control_center:2.1.b_build_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F1E823-D4FF-4F21-9073-664D82431D38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel-32.blogspot.com/2006/09/tagmin-cc-21b-remote-file-include.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22189",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20260",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3850",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29257",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel-32.blogspot.com/2006/09/tagmin-cc-21b-remote-file-include.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780 or CVE-2006-4893."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/functions_kb.php en el phpBB XS 2 (version española)  permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro phpbb_root_path, un vector diferente que CVE-2006-4780 o CVE-2006-4893."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_xs:phpbb_xs:2:*:spain_version:*:*:*:*:*",
            "matchCriteriaId" : "B7CF725A-A81D-4B11-A3F8-E04F3C70D645"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22177",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-10.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447292/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nyubicrew.org/adv/solpot-adv-10.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447292/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitrary PHP code via the includesdir parameter.  NOTE: this issue is disputed by CVE on 20060927, since the includesdir is defined before being used when the product is installed according to the provided instructions"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDO ** Vulnerabilidad PHP de inclusión remota de archivo en index.php en MyPhotos 0.1.3b beta permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro includesdir. NOTA: este asunto es discutido por el CVE el 27/09/2006, puesto que el includesdir se define antes de ser utilizado cuando el producto está instalado según las instrucciones proporcionadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myphotos:myphotos:0.1.3b_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89259951-E2FC-4E22-8554-201560BDE374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-September/001057.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446876/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-September/001057.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446876/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Itemid parameter in a (1) com_contact or (2) subscribe action."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en idex.php en VirtueMart (formalmente conocido como mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11, y posiblemente anteriores, permite a un atacante remtoo inyectar secuencias de comandos web o HTML a través del parámetro Itmeid en una acción (1) com_contact o (2) subscribe."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtuemart:virtuemart_joomla_ecommerrce_edition_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.11",
            "matchCriteriaId" : "47B4954D-F272-4E83-97C7-913EF8051946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22162",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447168/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20236",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3848",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447168/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the application_rootdir parameter. NOTE: this issue has been disputed by a third party researcher, CVE, and the vendor.  The vendor says \"the variable is set in settings.inc.php, so this is not a vulnerability."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad PHP de inclusión remota de archivo en index.php de net2ftp, posiblemente 0.1 hasta 0.62, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro application_rootdir. NOTA: este problema ha sido impugnado por un investigador independiente, CVE, y el fabricante. El fabricante dice que \"la variable es establecida en settings.inc.php, así que esto no es una vulnerabilidad\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net2ftp:net2ftp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B01A219D-1542-4BC4-9DB9-8ADF2A7E8570"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001076.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001077.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.net2ftp.org/forums/viewtopic.php?pid=6676",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.net2ftp.org/forums/viewtopic.php?pid=6687",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.net2ftp.org/forums/viewtopic.php?pid=6689",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447156/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447535/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447916/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448037/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29203",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001076.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.net2ftp.org/forums/viewtopic.php?pid=6676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.net2ftp.org/forums/viewtopic.php?pid=6687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.net2ftp.org/forums/viewtopic.php?pid=6689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447156/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447535/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447916/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448037/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption) via large w and h parameters, when resizing an image."
      }, {
        "lang" : "es",
        "value" : "lib/exec/fetch.php en DokuWiki anterior a 09/03/2006 permite a un atacante remoto provocar una denegación de servicio (consumo de CPU) a través de los parámetros w y h, cuando se está redimensionando una imagen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EE1AA-8C74-48F7-8E7D-9668933C7D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00333DC7-F62E-4683-9A8E-10DF0E852D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-09e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218DCEE-59EC-4BDC-A7B2-835568443B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.splitbrain.org/?do=details&id=924",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22192",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22199",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.splitbrain.org/?do=details&id=924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-09-29T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) w and (2) h parameters, which are not filtered when invoking convert."
      }, {
        "lang" : "es",
        "value" : "lib/exec/fetch.php en DokuWiki anterior a 09/03/2006, cuando se configura conf[imconvert] para usar ImageMagick, permite a un atacante remoto ejecutar comandos de su elección a través de los metacaracteres del interprete de comandos  en los parámetros (1)w y (2) h, los cuales no fueron filtrados cuando se invocó la conversión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246EE1AA-8C74-48F7-8E7D-9668933C7D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00333DC7-F62E-4683-9A8E-10DF0E852D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-09e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8218DCEE-59EC-4BDC-A7B2-835568443B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.splitbrain.org/?do=details&id=926",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22192",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22199",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-20.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.splitbrain.org/?do=details&id=926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200609-20.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apple Mac OS X 10.4 through 10.4.7, when the administrator clears the \"Allow user to administer this computer\" checkbox in System Preferences for a user, does not remove the user's account from the appserveradm or appserverusr groups, which still allows the user to manage WebObjects applications."
      }, {
        "lang" : "es",
        "value" : "Apple Mac OS X 10.4 hasta la 10.4.7, cuando un administrador quita en la caja de selección \"Permitir al usuario administrador su ordenador\" en System Preferences para un usuario, no mueve la cuenta de usuario desde los grupos appserveradm o appserverusr, lo cual todavia permite al usuario manejar aplicaciones WebObjects."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CFNetwork in Apple Mac OS X 10.4 through 10.4.7 and 10.3.9 allows remote SSL sites to appear as trusted sites by using encryption without authentication, which can cause the lock icon in Safari to be displayed even when the site's identity cannot be trusted."
      }, {
        "lang" : "es",
        "value" : "CFNetwork en Apple Mac OS X 10.4 hasta la 10.4.7 y 10.3.9, permite a un sitio SSL remoto aparacer como un sitio verdadero a través del uso de codificación sin validación, lo cual puede provocar que el icono de cerradura en Safari se muestre siempre y cuando la identidad del sitio no pueda ser validada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016952",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29267",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Apple ImageIO sobre Apple Mac OS X 10.4 hasta la 10.4.7 permite a un atacante remoto ejecutar código de su elección a través de una imagen JPEG2000 mal formada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016953",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/546772",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29268",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/546772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function."
      }, {
        "lang" : "es",
        "value" : "El núcleo Mach, usado en sistemas operativos que incluyen (1) Mac OS X 10.4 hata 10.4.7 y (2) OpenStep anterior a 4.2, permite a usuarios locales escalar privilegios mediante un proceso padre que fuerza una excepción en un hijo con setuid activado y usa puertos de excepción de Mach para modificar el contexto de hilo y el espacio de dierccionamiento de tarea del hijo de forma que provoca que el hijo llame a una función controlada por el padre."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:next:openstep:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279D9F9B-8C9C-4FF5-B587-F8A362DB79DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/838404",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.matasano.com/log/530/matasano-advisory-macos-x-mach-exception-server-privilege-escalation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447396/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/838404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.matasano.com/log/530/matasano-advisory-macos-x-mach-exception-server-privilege-escalation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447396/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, when Fast User Switching is enabled, allows local users to gain access to Kerberos tickets of other users."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en LoginWindow en Apple Mac OS X 10.4 hasta 10.4.7, cuando el Cambio Rápido de Usuario está habilitado, permite a usuarios locales obtener acceso a las credenciales Kerberos de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016959",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic error in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, allows network accounts without GUIds to bypass service access controls and log into the system using loginwindow via unknown vectors."
      }, {
        "lang" : "es",
        "value" : "Un error lógico en LoginWindow en Apple Mac OS X 10.4 hasta 10.4.7, permite a cuentas de red sin GUIDs (Identificadores Globales Únicos) evitar los controles de acceso a servicios y acceder al sistema usando loginwindow mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016959",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/897628",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/897628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in QuickDraw Manager in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows context-dependent attackers to cause a denial of service (\"memory corruption\" and crash) via a crafted PICT image that is not properly handled by a certain \"unsupported QuickDraw operation.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Quickdraw Manager en Apple Mac OS X 10.3.9 y 10.4 hasta 10.4.7 permite a atacantes (locales o remotos dependiendo del contexto) provocar una denegación de servicio (\"corrupción de memoria\" y caída) mediante una imagen PICT creada artesanalmente que no es manejada adecuadamente por una determinada \"operación QuickDraw no soportada\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016956",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/346396",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/346396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unchecked error condition in LoginWindow in Apple Mac OS X 10.4 through 10.4.7 prevents Kerberos tickets from being destroyed if a user does not successfully log on to a network account from the login window, which might allow later users to gain access to the original user's Kerberos tickets."
      }, {
        "lang" : "es",
        "value" : "Condición de error no comprobada en LoginWindow  en Apple Mac OSX 10.4 hasta 10.4.7 evita que las credenciales Kerberos sean destruidas si un usuario no accede con éxito a una cuenta de red desde la ventana de inicio de sesión, lo que puede permitir a usuarios posteriores obtener acceso a las credenciales Kerberos del usuario original."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016959",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:02:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, when such an operation is not actually supported, which could result in less secure password management than intended."
      }, {
        "lang" : "es",
        "value" : "Inconsistencia de interfaz de usuario en el Administrador de Grupos de Trabajo (Workgroup Manager) en Apple Mac OS X 10.4 hasta 10.4.7 aparece para permitir a los administradores cambiar el tipo de autenticación de contraseñas crypt a ShadowHash para cuentas en un servidor NetInfo padre, cuando dicha operación no está realmente soportada, lo cual podría resultar en una gestión de contraseñas menos segura de lo que se pretendía."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C580935-0091-4163-B747-750FB7686973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016958",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/847468",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/847468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-275A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en parse/parser.php en WEB//NEWS (también conocido como webnews) 1.4 y anteriores permite a atacantes remotos ejecutar código php de su elección mediante una URL en el parámetro WN_BASEDIR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:webnews:1.1h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F07C676-4908-4922-9539-A2280404F914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:webnews:1.1i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F011C3-EC7F-4C6F-96A1-150BB3E4665C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:webnews:1.1j:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C93175-178C-4F49-B613-80D9EF0F4ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:webnews:1.1k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0B0D31-69A2-464C-8A99-47C379AD8319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netwin:webnews:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9553247F-0A7B-47DA-93CE-E0119BD99A3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22076",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446996/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2435",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/446996/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in (1) Comdev Contact Form 3.1, (2) Comdev Customer Helpdesk 3.1, (3) Comdev Events Calendar 3.1, (4) Comdev FAQ Support 3.1, (5) Comdev Guestbook 3.1, (6) Comdev Links Directory 3.1, (7) Comdev News Publisher 3.1, (8) Comdev Newsletter 3.1, (9) Comdev Photo Gallery 3.1, (10) Comdev Vote Caster 3.1, (11) Comdev Web Blogger 3.1, and (12) Comdev eCommerce 3.1, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: it has been reported that 4.1 versions might also be affected."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en include.php en Comdev CSV Importer 3.1 y posiblemente 4.1, utilizado en (1) Comdev Contact Form 3.1, (2) Comdev Customer Helpdesk 3.1, (3) Comdev Events Calendar 3.1, (4) Comdev FAQ Support 3.1, (5) Comdev Guestbook 3.1, (6) Comdev Links Directory 3.1, (7) Comdev News Publisher 3.1, (8) Comdev Newsletter 3.1, (9) Comdev Photo Gallery 3.1, (10) Comdev Vote Caster 3.1, (11) Comdev Web Blogger 3.1, y (12) Comdev eCommerce 3.1, permite a un atacante remoto ejecutar código PHP de su elección a través de un URL en el parámetro path[\"docroot\"]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_csv_importer:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EFE7E5-D332-4436-BE54-B50D4FE94055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_csv_importer:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1B3C80-7ED6-4676-A33D-B658BC1085F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22133",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22134",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22135",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22147",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22149",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22151",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22153",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22154",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22157",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22168",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22169",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22170",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29299",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29302",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447184/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447185/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447186/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447187/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447188/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447190/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447192/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447193/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447194/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447201/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447207/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447209/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447213/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3804",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3807",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3808",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3809",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3813",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3815",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447184/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447185/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447186/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447187/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447188/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447190/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447192/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447193/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447194/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447201/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447207/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447209/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447213/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en include/editfunc.inc.php en Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 y anteriores permiten a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro NWCONF_SYSTEM[server_path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baumedia:newswriter:1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2203F5A4-8C3C-484F-B4A7-00043311E5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baumedia:newswriter:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D7BE4-DA27-4D4A-83A6-BB29B9B1783F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baumedia:newswriter:1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440ED163-B12C-45EF-B296-D9FEF7612A97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/37965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20237",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29200",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/37965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the \"right\" parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index2.php de bbsNew 2.0.1 permite a un atacante remoto ejecutar código PHP de su elección a través de un URL en el parámetro right."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bbsnew:bbsnew:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71BB864B-4DF1-4B0F-9EB9-2BA781B1F60D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-10/0244.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450027/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20204",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-10/0244.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450027/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL commands via the templatesused parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en global.php en Jelsoft vBulletin 2.x permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro templatesused."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799F983E-908D-4B9F-9C99-6422863E7807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE465DFE-6F77-4F8A-B556-A9955B4A0889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29174",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the init_path parameter to admin/testing/tests/0030_init_syntax.php, or (2) an unspecified parameter to admin/testing/index.php.  NOTE: the 0004_init_urls.php vector is already covered by CVE-2006-5055."
      }, {
        "lang" : "es",
        "value" : "Mútiples vulnerabilidades PHP de inclusión remota de archivos en SyntaxCMS 1.1.1 hastala 1.3 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro (1) init_path a admin/testing/tests/0030_init_syntax.php, o (2) un parámetro no especificado a admin/testing/index.php. NOTA: el vector 0004_init_urls.php está actualmente cuberito por  CVE-2006-5055."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum_one:syntaxcms:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63047CC-E4F3-45A1-8409-BE2380E53807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum_one:syntaxcms:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F1908D-A9D7-4DAF-A604-E594CAB6B306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum_one:syntaxcms:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FBD7DB-C276-47F4-BDB6-A676E5BFE9C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22067",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.syntaxcms.org/content/article/detail/513",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.syntaxcms.org/content/article/detail/513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either register_globals or RG_EMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de secuencias de comandos en sitios cruzados (XSS) en FacileForms anterior a 1.4.7 para Mambo y Joomla!, cuando cualquiera register_globals o RG_EMULATION está habilitado, permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de un vector no especificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D911590B-BE38-48B0-9724-26CEB3E158E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56186B2-6E16-4965-B46A-3C84C0E408C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA3EF6-6D6D-4763-AAB3-55C476E3BCEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E80CE6-20DA-42B7-8B58-1CC4F9FE82B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F615AD6-F879-4D56-BD89-84CABE1CDC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2CE911-D07F-4FAF-A467-A917D886121F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0153A7A1-9871-4264-B915-8858EE9CF1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39308F0F-9E86-4CDA-9446-68A18B69C7B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE38570E-E3F6-4D25-A6CD-5BE2D1791E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4869E75-45C2-431B-A35B-833DE6CA9CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253C6E57-E600-4E32-99B9-6817840F4B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3573DC7-2874-4200-8847-6E1DEDB6B211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "519FEFAD-00EB-4D4A-BB98-E76E5A866E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1E94AE-B499-4849-A482-D0FDCA0D1FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4016AD92-891C-4EAF-AEC5-8559F96A85A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facileforms:facileforms:1.4.6g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0C38DF-CDCD-48C5-8FD2-CB9BC3128D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22125",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.facileforms.biz/content/view/108/140/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20254",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.facileforms.biz/content/view/108/140/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via (1) the user_name parameter in admin/forgot_pass.php, (2) the order_id parameter in view_order.php, (3) the view_doc parameter in view_doc.php, and (4) the order_id parameter in admin/print_order.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Devellion CubeCart 2.0.x permite a un atacante remoto ejecutar comandos SQL de su elección a través del (1)parámetro user_name en admin/forgot_pass.php, (2) el parámerto order_id en view_order.php, (3) el parámetro view_doc en view_doc.php, y (4) el parámetro order_id en admin/print_order.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB7161F-55A8-42F3-BB9B-5E7C366EEE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE60304-C846-4670-AC65-FB86EF7A0AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1258D0-EC39-4A58-B74B-F8512154AB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3C6FE2-8074-4C5F-B8F0-6B11E5BC3D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688CF04B-25E8-41EE-A5D3-56D8D5AFE99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE530337-EE60-4CD2-B22E-07DE0F42DB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903816D6-4247-46B9-B82A-DFC6A105C465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20215",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the order_id parameter in (1) admin/print_order.php and (2) view_order.php; the (3) site_url and (4) la_search_home parameters and (5) certain language parameters in admin/nav.php; the (6) image parameter in admin/image.php; the (7) site_name, (8) la_adm_header, (9) charset, and (10) certain other parameters in admin/header.inc.php; the (12) la_pow_by parameter in footer.inc.php; and the (13) site_name parameter and (14) certain other parameters in header.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades se secuencias de comandos en sitios cruzados (XSS) en Devellion CubeCart 2.0.x permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro order_id en (1)admin/print_order.php y (2) view_order.php; los parámetros (3) site_urly (4) la_search_home y ciertos parámetros de lenguaje en admin/nav.php; el parámetro (6) image en admin/image.php;el(7) site_name, (8) la_adm_header, (9) charset, y (10) otros parámetros en admin/header.inc.php; el parámetro(12) la_pow_by parameter en footer.inc.php; y el parámetro (13) site_name y (14) otros parámetros en header.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB7161F-55A8-42F3-BB9B-5E7C366EEE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE60304-C846-4670-AC65-FB86EF7A0AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1258D0-EC39-4A58-B74B-F8512154AB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3C6FE2-8074-4C5F-B8F0-6B11E5BC3D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688CF04B-25E8-41EE-A5D3-56D8D5AFE99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE530337-EE60-4CD2-B22E-07DE0F42DB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903816D6-4247-46B9-B82A-DFC6A105C465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22175",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29246",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29247",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29250",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20215",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29177",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals the path in various error messages.  NOTE: the information.php, language.php, list_docs.php, popular_prod.php, sale.php, check_sum.php, and cat_navi.php vectors are already covered by CVE-2005-0607."
      }, {
        "lang" : "es",
        "value" : "Devellion CubeCart 2.0.x permite a atacantes remotos obtener información sensible a través de la respuesta directa para (1) link_navi.php o (2) spotlight.php, lo cual revela el camino en varios mensajes de error, NOTA: los vectores information.php, language.php, list_docs.php, popular_prod.php, sale.php, check_sum.php, y cat_navi.php están actualmente cubiertos por CVE-2005-0607."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB7161F-55A8-42F3-BB9B-5E7C366EEE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE60304-C846-4670-AC65-FB86EF7A0AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1258D0-EC39-4A58-B74B-F8512154AB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3C6FE2-8074-4C5F-B8F0-6B11E5BC3D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688CF04B-25E8-41EE-A5D3-56D8D5AFE99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE530337-EE60-4CD2-B22E-07DE0F42DB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devellion:cubecart:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "903816D6-4247-46B9-B82A-DFC6A105C465"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20215",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29178",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different vector than CVE-2006-5074.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en home.php en PHP Invoice 2.2 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro msg, un vector diferente que CVE-2006-5074. NOTA: el origen de esta información es desconocida; los detalles se obtuvieron de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_invoice:php_invoice:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EB51C-8FC1-47F5-B395-658347989B2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/33389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22123",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29181",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/33389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service (application crash) via a malformed X.509 certificate in a signature."
      }, {
        "lang" : "es",
        "value" : "La librería libksba 0.9.12 y posiblemente otras versiones, son usadas por gpgsm en el paquete newpg sobre SUSE LINUX, permite a un atacante remoto provocar denegación de servicio (caida de la aplicación) a través del certificado mal formado X.509 en una firma."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libksba_library:libksba_library:0.9.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D5E6A79-2792-419A-9F70-4C7AABF61E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/download/updates/101_x86_64.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-365-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/download/updates/101_x86_64.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_23_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-365-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en InterVations NaviCOPA Web Server 2.01 permite a un atacante remoto ejecutar código de su elección a través de una respuesta larga HTTP GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intervations:navicopa_web_server:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7614B3-E672-42D4-AFC8-E08074F9585F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22124",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/693992",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20250",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2445",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/693992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to include and execute local files via a .. (dot dot) in the lan parameter to includes.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios encommon.php en Yuuki Yoshizawa Exporia 0.3.0 permite a un atacante remoto incluir y ejecutar ficheros locales a través de la secuencia ..(punto punto) en el parámetro lan a includes.php. NOTA: El origen de esta información es desconocido; los detalles se obtuvieron solamente a partir de la información de los terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yuuki_yoshizawa:exporia:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD48D6D8-6EF8-427D-A84B-6E67B514138C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0610-exploits/Exporia-0.3.0.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22146",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29326",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0610-exploits/Exporia-0.3.0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) ~urlmime or (2) ~command parameter, different vectors than CVE-2003-0749."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en wgate en SAP Internet Transaction Server (ITS) 6.1 y 6.2 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de lo parámetros (1)~urlmime o (2) ~command, diferentes vectores que CVE-2003-0749."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_transaction_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B61EFF-39CD-4E7D-8F7D-0751747499F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:internet_transaction_server:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F9F5D72-0974-472D-88A7-904F08CB536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22171",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447262/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20244",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3894",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29245",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447262/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file through the engine parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de directorio transversal en kgcall.php en KGB 1.87 permite a un atacante remoto incluir y ejecutar ficheros locales de su elección a través de la secuencia ..(punto punto) en el parámetro engine, como se demostro con la actualización de un fichero que contenia código PHP con un contenido del tipo image/jpeg, y después refiriéndose a este archivo con el parámetro engine."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kgb:kgb:1.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB23B7C-8A76-4E04-AFF1-AD116598A039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20258",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by (1) directly setting a token in the URL though dynamic variable evaluation and (2) unsetting arbitrary variables via the _REQUEST array, related to (a) libraries/common.lib.php, (b) session.inc.php, and (c) url_generating.lib.php.  NOTE: the PHP unset function vector is covered by CVE-2006-3017."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en phpMyAdmin anteror a 2.9.1-rc1 rem realizar acciones no autorizadas como otro usuario (1) estableciendo directamente un testigo en el URL mediante evaluación dinámica de variable y (2) cambiar variables de su elección mediante el array _REQUEST, relacionado con (a) libraries/common.lib.php, (b) session.inc.php, y (3) url_generating.lib.php. NOTA: el vector de la función unset de PHP se trata en CVE-2006-3017."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9852676-A91F-4FD6-A734-BF7E048411FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC64B22B-E415-4510-A0DF-CE4763A423D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12375469-DD81-42BE-8BC0-FCAB0D2D6253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF6246-C393-41BE-BABC-840585795D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E384B8D4-C72C-4D3D-A25F-26FB5F1D4B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4C98E-D127-40EB-BE71-A6BB91D4392C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C26B2DE-669F-4F79-99AE-3210662AAB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0534C39C-A421-4C97-8A96-A74ABFA78B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001067.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22126",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_072006.130.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447491/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20253",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_072006.130.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447491/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files."
      }, {
        "lang" : "es",
        "value" : "phpMyAdmin anterior a 2.9.1-rc1 tiene un directorio de librerias bajo la raíz de la documentación web con controles de acceso insuficientes, lo caul permiet a un atacante remoto obtener información sensible a través de repuesta directar para cierto archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9852676-A91F-4FD6-A734-BF7E048411FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC64B22B-E415-4510-A0DF-CE4763A423D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12375469-DD81-42BE-8BC0-FCAB0D2D6253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF6246-C393-41BE-BABC-840585795D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E384B8D4-C72C-4D3D-A25F-26FB5F1D4B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4C98E-D127-40EB-BE71-A6BB91D4392C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C26B2DE-669F-4F79-99AE-3210662AAB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0534C39C-A421-4C97-8A96-A74ABFA78B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22126",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20253",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows remote attackers to execute arbitrary PHP code via a URL in the Application_Root parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php3 en el parquete PDD para PHPSelect Web Development Division permite a un atacante remoto ejecutar código PHP a través de una URL en el parámetro Application_Root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpselect:web_development_division:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69204944-A85A-4F62-A892-0F868103DA30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447177/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447177/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name or (2) admin_pass parameter in (a) admin/login.php, or the (3) admin_email parameter in (b) admin/password_forgotten.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Zen Cart 1.3.5 permiten a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro (1) admin_name o (2) admin_pass de (a) admin/login.php, o el parámetro (3) admin_email de (b) admin/password_forgotten.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen_cart:zen_cart:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C3C024-2722-4774-8EE6-24510BE73BC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447286/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20242",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3849",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?p=270823#post270823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?t=47526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447286/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?p=270823#post270823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zen-cart.com/forum/showthread.php?t=47526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) index.php and (2) process_login.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Scott Metoyer Red Mombin 0.7 permiten a un atacante remoto inyectar secuencias de comandos web o HTML a través de vectores no especificados relacionados con (1) index.php and (2) process_login.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scott_metoyer:red_mombin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149D04BF-6E48-43FF-BA18-B77E3A5158AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447255/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20243",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447255/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en modules/Downloads/admin.php en la sección Admin de PostNuke 0.762 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro hits."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.762:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B4716F-F173-4026-87C2-A3A97DA0CB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.postnuke.com/index.php?name=News&file=article&sid=2783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447361/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3886",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29271",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.postnuke.com/index.php?name=News&file=article&sid=2783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447361/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) \"any field create name field\" except \"create new group name\" or (2) any description field."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ercury SiteScope 8.2 (8.1.2.0) permite a un usuario validado inyectar secuencias de comandos web o HTML de su elección a través de (1)\"cualquier campo crea un campo conocido\" excepto \"crear nuevo nombre ed grupo\" o (2) cualquier descripción de campo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:mercury_sitescope:8.2_8.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131AC50-8F4D-45BC-95D7-0B1D8A4B9D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447397/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447397/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Albrecht Guenther PHProjekt 5.1.x before 5.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lib_path or (2) lang_path parameter in unspecified files, related to code changes intended to fix inclusion, a different vulnerability than CVE-2002-0451, CVE-2006-4204, and CVE-2006-4609."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XS) en Albrecht Guenther PHProjekt 5.1.x anterior a 5.1.2 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro (1)lib_path o (2)lang_path en ficheros no especificados, en relacion con los cambios de código se pretendía fijar la inclusión, una vulnerabilidad diferente que CVE-2002-0451, CVE-2006-4204, y CVE-2006-4609."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprojekt:phprojekt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "B89E538A-EE7E-4D25-ABAF-A3CEA2CE6568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprojekt:phprojekt:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C3EA9E-7B9E-4E7F-AAD4-FFB3B7E7AF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprojekt:phprojekt:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0ED0B-1A75-4639-8BF4-6F1A42F6BDF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprojekt:phprojekt:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E1C999-1219-43C7-B081-FBAE702618CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprojekt:phprojekt:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C576BBEB-3180-4825-8F36-890E40C2D412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprojekt:phprojekt:5.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2CBCBB-DC41-458F-8D82-764803046C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22167",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_062006.129.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=259",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447360/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20268",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_062006.129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447360/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) target and (2) action parameters in window.php, and possibly the (3) target parameter in home.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Joshua Muheim phpMyWebmin 1.0 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en los parámetros (1) target y (2)action en window.php, y posiblemente (3) el parámetro target en home.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_muheim:phpmywebmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CCDB69-509C-4F14-8821-E09CF9F66EC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20264",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de atravesamiento de directorios en window.php, posiblemente usado con home.php, en Joshua Muheim phpMyWebmin 1.0 permite a un atacante remoto obtener información sensible a través del nombre de directorio en el parámetro target, lo cual dispara un listado de directorio a través de la función opendir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_muheim:phpmywebmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CCDB69-509C-4F14-8821-E09CF9F66EC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20264",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in John Himmelman (aka DaRk2k1) PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the file_name[] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en John Himmelman (tambiéjn conocido como DaRk2k1) PowerPortal 1.3a permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro file_name[]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerportal:powerportal:1.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C63D62-6E1E-4AC7-8145-807D816B1A6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20262",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Bartels Schoene ConPresso before 4.0.5a allow remote attackers to inject arbitrary web script or HTML via (1) the nr parameter in detail.php, (2) the msg parameter in db_mysql.inc.php, and (3) the pos parameter in index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Bartels Schoene ConPresso before 4.0.5a permite a un atacante inyectar secuencias de comandos web o HTMl a rta´ves del parámetro (1) nr en detail.ph,(2) el parámetro msg en db_mysql.inc.php, y (3) el parámetro pos en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conpresso:conpresso_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.4a",
            "matchCriteriaId" : "6FD2DF13-F411-48AF-BC68-EE559C77EBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.compresso.de/compresso-4.0.5a.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/index_2.php?major_rls=major_rls28",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447358/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20273",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.compresso.de/compresso-4.0.5a.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/index_2.php?major_rls=major_rls28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447358/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en   Bartels Schoene ConPresso anterior a 4.0.5a permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro nr."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:conpresso:conpresso_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.4a",
            "matchCriteriaId" : "6FD2DF13-F411-48AF-BC68-EE559C77EBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.compresso.de/compresso-4.0.5a.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22145",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.majorsecurity.de/index_2.php?major_rls=major_rls28",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447358/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20273",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.compresso.de/compresso-4.0.5a.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.majorsecurity.de/index_2.php?major_rls=major_rls28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447358/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) the message parameter, and possibly other parameters, in module/shout/jafshout.php (aka the shoutbox); and (2) the message body in a forum post in module/forum/topicwin.php, related to the name, email, title, date, ldate, and lname variables."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ph03y3nk just another flat file (JAF) CMS 4.0 RC1 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del (1) parámetro message, y posiblemente otros parámetros, en module/shout/jafshout.php (también conocido cómo the shoutbox); y (2) el cuerpo de mensaje en un correo del foro en module/forum/topicwin.php, relacionado con las variables name, email, title, date, ldate, y lname."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "417E9E71-052A-42E1-BBDD-A83EA0AEFBEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447081/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447081/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) url, (3) title, and (4) about parameters in a forum post.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ph03y3nk just another flat file (JAF) CMS 4.0 RC1 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de los parámetros 1) name, (2) url, (3) title, y (4) about en un correo del foro. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de fuentes de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "417E9E71-052A-42E1-BBDD-A83EA0AEFBEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by \"<?php\" and \"?>\", possibly due to a static code injection vulnerability involving admin/data_inc.php."
      }, {
        "lang" : "es",
        "value" : "module/shout/jafshout.php (aka the shoutbox) en ph03y3nk just another flat file (JAF) CMS 4.0 RC1 permite a un atacante remoto ejecutar código de su elección dentro de la sección limitado por \"<?php\" y \"?>\", posiblemente debido a una vulnerabilidad de inyeción de código estático de que afecte a admin/data_inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salims_softhouse:jaf_cms:4.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "417E9E71-052A-42E1-BBDD-A83EA0AEFBEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447081/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447081/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter to (1) agendaplace.php3, (2) agendaplace2.php3, (3) infoevent.php3, and (4) agenda2.php3, different vectors than CVE-2006-2009."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en phpMyAgenda 3.0 Final y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro rootagenda a (1) agendaplace.php3, (2) agendaplace2.php3, (3) infoevent.php3, y (4) agenda2.php3, vectores diferentes que CVE-2006-2009."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyagenda:phpmyagenda:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0_final",
            "matchCriteriaId" : "63AC8C02-FA34-423B-B23C-595ABF2D41C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/ref/29/2914x-phpmyagenda.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=569237",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29148",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29149",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29150",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29151",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433995",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/ref/29/2914x-phpmyagenda.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=569237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/433995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/26062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing \"globbing chars.\""
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en GuildFTPd 0.999.13 permite a un atacante remoto provocar un impacto desconocido, y posiblemente ejecución de código relacionado con la entrada que contenga \"carácteres globales\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:steve_poulsen:guildftpd:0.999.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E35A0B5-8C53-4CD4-A56E-328C44B57105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forums.guildftpd.com/viewtopic.php?t=452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25721",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://forums.guildftpd.com/viewtopic.php?t=452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/25721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercury SiteScope 8.2 (8.1.2.0) allows remote authenticated users to cause a denial of service (loss of connectivity to the classic interface) via attempted HTML injection into the \"new monitor description\" field."
      }, {
        "lang" : "es",
        "value" : "Mercury SiteScope 8.2 (8.1.2.0) permite a un usuario validado remoto provocar denegación de servicio (pérdida de conectividad en la interfaz clasica) a través de la inyección intencionada del HTML en el campo de “nueva descripción del monitor”."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:mercury_sitescope:8.2_8.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4131AC50-8F4D-45BC-95D7-0B1D8A4B9D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447397/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20275",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447397/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) open_box, (2) middle_box, and (3) close_box parameters in (a) sources/myaccount.php; the (4) navigation_end parameter in (b) navigation/search.php and (c) navigation/donation.php; and the (6) navigation_start and (7) navigation_middle parameters in navigation/donation.php, (d) navigation/latestnews.php, and (e) navigation/links.php; different vectors than CVE-2006-5092."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivos en A-Blog 2 permite a un atacante remoto ejecutar código PHP a través de una URL en los parámetros (1) open_box, (2) middle_box, and (3) close_box en a) sources/myaccount.php; (4)el parámetro navigation_end en (b) navigation/search.php y (c) navigation/donation.php; y los parámetros (6) navigation_start y (7) navigation_middle en navigation/donation.php, (d) navigation/latestnews.php, y (e) navigation/links.php; diferentes vectores que CVE-2006-5092."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a-blog:a-blog:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D5FAA8-77C6-412A-B206-27A4CC865882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20238",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[thispath] or (2) GLOBALS[configdir] parameter."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en ubbt.inc.php en Groupee UBB.threads 6.5.1.1 permite a un atacante remoto ejecutar código PHP de su elección a través de un URL en los parámetros 1) GLOBALS[thispath] o (2) GLOBALS[configdir]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20266",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) inject PHP code via a theme[] array parameter to admin/doedittheme.php, which is injected into includes/theme.inc.php; (2) inject PHP code via a config[] array parameter to admin/doeditconfig.php, and then execute the code via includes/config.inc.php; and inject a reference to PHP code via a URL in the config[path] parameter, and then execute the code via (3) dorateuser.php, (4) calendar.php, and unspecified other scripts."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de código directo estático en Groupee UBB.threads 6.5.1.1 permite a un atacante remoto (1) inyectar código PHP a través de un parámetro array theme[] a admin/doedittheme.php, el cual se inyecta dentro de includes/theme.inc.php; (2) inyectar código PHP a través del parámetro array config[] a admin/doeditconfig.php, y después ejecutar el código a través de includes/config.inc.php; e inyectar una referencia al código PHP a través de una URL en el parámetro config[path], y después ejecutar el código a través de (3)dorateuser.php, (4) calendar.php, y otras secuencias de comandos no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20266",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29274",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Groupee UBB.threads 6.5.1.1 allows remote attackers to obtain sensitive information via a direct request for cron/php/subscriptions.php, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "Groupee UBB.threads 6.5.1.1 permite a un atacante remoto obtener información sensible a través de una petición directa para cron/php/subscriptions.php, lo cual revela la ruta en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447359/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20266",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447359/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impact, via a certain long Message that affects \"Tables,\" related to the Urlobox."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en MkPortal permite a un atacante remoto corromper el contenido de la página web, y posiblemente tenga otros impactos, a través de ciertos mensajes largos que afecta a \"Tablas,\", relacionado con Urlobox."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mkportal:mkportal:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE41A57-FD91-4DC1-9C90-ADB513F95A39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447309/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447309/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/33469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote attackers to execute arbitrary SQL commands via the id parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en display.php en Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lappy512:php_krazy_image_host_script:0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C293AF1A-0499-48C5-9355-D2A6E7491970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20270",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29270",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2456",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-03T04:03:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting (aka geotarget) allows remote attackers to execute arbitrary PHP code via a URL in the anp_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en script.php en Kevin A. Gordon Open Geo Targeting (también conocido como geotarget) permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro anp_path. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kevin_a._gordon:open_geo_targeting:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296B8D7B-614C-4497-A565-6BC183FFDB3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/37969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/37969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to \"zero-size strings in blowfish routines.\""
      }, {
        "lang" : "es",
        "value" : "Messenger Agents (nmma.exe) en Novell GroupWise 2.0.2 y 1.0.6 permite a atacantes remotos provocar una denegación de servicio (caída) mediante una petición HTTP POST a puerto TCP 8300 con una parámetro val modificado, lo cual dispara una referencia nula relacionada con \"cadenas de longitud cero en rutinas blowfish\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_messenger:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFEE4D7-3B43-4253-AF31-6A3A3930A54F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:groupwise_messenger:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142A3EF7-C31E-4CB0-A023-D4DBE081EC05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22244",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974452.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=416",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/796956",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20316",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29319",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974452.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/796956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en userupload.php en OlateDownload 3.4.0 permite a atacantes remotos inyectar secuencias de comandos o HTML de su elección mediante el parámetro description_small."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olate:olatedownload:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F733F274-5CC3-4633-BC34-4206B7FE624C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447424/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29292",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447424/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en OlateDownload 3.4.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro page en details.php o (2) el parámetro query en search.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olate:olatedownload:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F733F274-5CC3-4633-BC34-4206B7FE624C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22241",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447424/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20278",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447424/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b) tem.php and (c) uss.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Yblog permiten a atacantes remotos inyectar secuencias de comandos o HTML de su elección mediante los parámetros (1) id en a) funk.php, o (2) action en (b) tem.php y (c) uss.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yblog:yblog:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6650114-EDD0-41BE-83DB-7F30D5670B38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001065.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447427/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20280",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001065.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447427/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in wamp_dir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the no_url parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en wamp_dir/setup/yesno.phtml en  VAMP Webmail 2.0beta1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro no_url."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vamp_webmail:vamp_webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0_beta1",
            "matchCriteriaId" : "2A2469A2-4192-4199-A2F1-D20B9933233C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20289",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29288",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2461",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertorylevel parameter including scripts in /forum/ including (1) search.php, (2) message.php, (3) member.php, (4) mail.php, (5) lostpassword.php, (6) gesfil.php, (7) forum82lib.php3, and other unspecified scripts."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Forum82 2.5.2b y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro repertorylevel incluyendo secuencias de comandos en /forum/ incluyendo (1) search.php, (2) message.php, (3) member.php, (4) mail.php, (5) lostpassword.php, (6) gesfil.php, (7) forum82lib.php3, y otras secuencias de comandos no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forum82:forum82:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.2b",
            "matchCriteriaId" : "D5E1565E-05B7-4291-9890-8F8530237F2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22214",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2459",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the page parameter to shared/help.php or (2) the tab parameter to shared/header.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de salto de directorio en OpenBiblio anterior a 0.5.2 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante .. (punto punto) en los parámetros (1) page a shared/help.php o (2) tab a shared/header.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.1",
            "matchCriteriaId" : "E87547B7-5D2E-47C9-AA37-F76EC40D106E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A65C24D4-8EE2-4D29-8B06-7E6DB16394A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E467F2B0-84E7-466C-95A5-4B813D2C03A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8BB41F-DAED-497B-BF7B-C0F5908E9CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BCF7A-12FB-4856-A1BA-062D11FF3AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24840EE-82B9-4397-898E-B3F32B641536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22238",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=451780",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485588/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/27053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3867",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=451780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485588/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/27053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote attackers with report privileges to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el sistema de informes en OpenBiblio anterior a 0.5.2 permite a atacantes remotos con privilegios de reporte ejecutar comandos SQL de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.1",
            "matchCriteriaId" : "E87547B7-5D2E-47C9-AA37-F76EC40D106E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A65C24D4-8EE2-4D29-8B06-7E6DB16394A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E467F2B0-84E7-466C-95A5-4B813D2C03A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A8BB41F-DAED-497B-BF7B-C0F5908E9CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BCF7A-12FB-4856-A1BA-062D11FF3AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbiblio:openbiblio:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F24840EE-82B9-4397-898E-B3F32B641536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22238",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=451780",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29318",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=451780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to \"gain root access\" via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el servidor HP Ignite-UX anterior a C.6.9.150 para HP-UX B.11.00, B.11.11, y B.11.23 permite a atacantes remotos obtener acceso root mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016942",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-214.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447505/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20269",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-214.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447505/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Microsoft Internet Explorer permite a atacantes remotos inyectar secuencias de comandos o HTML de su elección mediante una URL codificada en UTF-7 que es retornada en un mensaje de error HTTP 404 grande sin un conjunto de caracteres explícito, un asunto relacionado con CVE-2006-0032."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0017.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/31328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447509/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447516/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447574/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/31328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447509/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447516/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447574/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Los drivers (1) fwdrv.sys y (2) khips.sys en Sunbelt Kerio Personal Firewall 4.3.268 y anteriores no validan los argumentos pasados a través de funciones SSDT, incluyendo NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, y NtSetInformationFile, lo cual permite a usuarios locales provocar una denegación de servicio (caída) y posiblemente otros impactos mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C66920-4A4F-4335-B052-44E1F92F585B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658F01AE-C211-473C-BF70-E524E4310F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F769FAE-CC31-4C8B-B785-1423DFC2BA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7202BC-AD0B-41B1-B7C1-7665498C967B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E60288-F9E6-4E7C-9B48-352277A34C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32087795-35B4-427A-BDAE-F0A217230C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C04B63F-3715-46F1-917E-5185691BD619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B1A9450-D6E7-4D0A-A9BF-E64284D1E1CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041B4428-ADC5-4BD2-9F6E-0BE2362FD9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E19F4EE-1567-4CD8-895C-474CE80241AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EA5978-64EC-4B54-BC06-20324DB0E6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B9D00A-6598-4BC0-B058-7598657274D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81E1EDB-A491-4BE6-B6DE-1C4A695EE1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C076C7D-D833-42CF-9FEF-F3654013AB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FEB6DB5-851E-4EDF-AC1C-CBA502C6D5A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6682610C-1564-48E3-A364-76B6F5369F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.3.246:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651BA95B-3298-459C-9141-B8D3E8532FF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:personal_firewall:4.3.268:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B05B51-14DB-4ADF-8AA1-8D4E5C2956DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22234",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20299",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en cp/sig.php en DeluxeBB 1.09 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro templatefolder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3543354-4CC9-4C62-ACCE-6B646F797245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F38906-2E8F-40E4-A03B-8121FDEF903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB0CB89-67EF-46F3-8370-ABFBDD54E959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deluxebb:deluxebb:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B137A4A-B7E3-45BF-988D-D599A780E8E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22176",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.deluxebb.com/community/topic.php?tid=420",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/29371",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20292",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3857",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29305",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.deluxebb.com/community/topic.php?tid=420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/29371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute arbitrary PHP code via the config[pdf_module] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en core/pdf.php en VideoDB 2.2.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro config[pdf_module]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videodb:videodb:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76884244-E008-4998-BC61-F9E8E72AC6DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videodb:videodb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DE597E-4EEB-44CE-AD3B-A452AFCC52B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:videodb:videodb:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C97B75C-E908-40B5-AD64-52D12EA531C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22184",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20265",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2455",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en McAfee ePolicy Orchestrator anterior a 3.5.0.720 y ProtectionPilot anterior a 1.1.1.126 permite a atacantes remotos ejecutar código de su elección mediante una petición a /spipe/pkg/ con una cabecera fuente larga."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC513A6-0498-4215-A9AD-8F81DEE21B71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:*",
            "matchCriteriaId" : "C57BFF74-7A66-4CAD-9D29-104BC63330C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669E3151-6092-48F5-9D45-310323ABADDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:protectionpilot:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66F27F5-43A8-4E22-B1E4-D5C3261E4BA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download.nai.com/products/patches/ePO/v3.5/EPO3506.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.nai.com/products/patches/protectionpilot/v1.1.1/PRP1113.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=8611438&sliceId=SAL_Public&dialogID=2997768&stateId=0%200%202995803",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://knowledge.mcafee.com/article/365/8611438_f.SAL_Public.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049803.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22222",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/842452",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.remote-exploit.org/advisories/mcafee-epo.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20288",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download.nai.com/products/patches/ePO/v3.5/EPO3506.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://download.nai.com/products/patches/protectionpilot/v1.1.1/PRP1113.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=8611438&sliceId=SAL_Public&dialogID=2997768&stateId=0%200%202995803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://knowledge.mcafee.com/article/365/8611438_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049803.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/842452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.remote-exploit.org/advisories/mcafee-epo.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan Corporate Edition (OSCE) before 7.3 Patch 1 allows remote attackers to execute arbitrary code via format string identifiers in the \"Management Console's Remote Client Install name search\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en el control ActiveX (ATXCONSOLE.OCX) en TrendMicro OfficeScan Corporate Edition (OSCE) anterior a 7.3 Patch 1 permite a atacantes remotos ejecutar código de su elección mediante identificadores de cadena de formato en el \"Management Console's Remote Client Install name search\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CDE85D-4C4B-42D0-BF64-11E880168A83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22224",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016963",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/788860",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.layereddefense.com/TREND01OCT.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447498/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20284",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/788860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.layereddefense.com/TREND01OCT.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447498/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product patch:\r\nTrend Micro, OfficeScan, Corporate 7.3 Patch 1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified vectors that trigger a kernel oops (null dereference) and a deadlock."
      }, {
        "lang" : "es",
        "value" : "El nlmclnt_mark_reclaim en clntlock.c en NFS lockd en el kernel de Linux en versiones anteriores a 2.6.16 permite a atacantes remotos provocar una denegación de servicio (caída de proceso) y denegación de acceso a exportaciones NFS a través de vectores no especificados que desencadenan un oops en el kernel (referencia nula) y bloqueo mutuo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.16",
            "matchCriteriaId" : "6E917BCE-CB50-4C5A-AF43-D0C9ACDE2D46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951339CF-0922-4391-8C0C-9729E8137B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E304C9-F780-4358-A58D-1E4C93977704"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=linux-kernel&m=113476665626446&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113494474208973&w=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0488.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23361",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25838",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26289",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9b5b1f5bf9dcdb6f23abf65977a675eb4deba3c0",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_57_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21581",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10128",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113476665626446&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://marc.info/?l=linux-kernel&m=113494474208973&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0488.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/26289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9b5b1f5bf9dcdb6f23abf65977a675eb4deba3c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_57_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug for Red Hat Enterprise Linux 4:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210128\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 or 3.",
        "lastModified" : "2006-10-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScript.  NOTE: the vendor and original researchers have released a follow-up comment disputing the severity of this issue, in which the researcher states that \"we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this... I have not succeeded in making this code do anything more than cause a crash and eat up system resources\""
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Desbordamiento de búfer basado en pila en Mozilla Firefox permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados implicando JavaScript. NOTA: el vendedor e investigadores originales han liberado un comentario de continuación impugnando la severidad de este asunto, en el cual el investigador afirma que \"hemos mencionado que hubo una vulnerabilidad en Firefox previamente conocida que podría provocar un desbordamiento de pila permitiendo ejecución remota de código. Sin embargo, el código que hemos presentado no hace de hecho esto... No he tenido éxito haciendo que este código haga algo más que provocar una caída y consumo de recursos del sistema\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447493/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447497/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20282",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29317",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447493/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447497/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this issue to be a security vulnerability.  We have been in contact with the upstream project regarding this problem and agree that this issue currently poses no security threat.  In the event more information becomes available, we will revisit this issue in the future.\n",
        "lastModified" : "2006-10-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006.  NOTE: the vendor and original researchers have released a follow-up comment disputing this issue, in which one researcher states that \"I have no undisclosed Firefox vulnerabilities. The person who was speaking with me made this claim, and I honestly have no idea if he has them or not."
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Múltiples vulnerabilidades en Mozilla Firefox tienen vectores e impacto no especificados, como fue reclamado durante el ToorCon 2006. NOTA: el vendedor e investigadores originales han liberado un comentario de seguimiento impugnando este asunto, en el cual un investigador afirma que \"No tengo vulnerabilidades de Firefox no reveladas. La persona que estuvo hablando conmigo hizo esta reclamación, y yo honestamente no tengo ni idea de si él las tiene o no\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2434FCE7-A50B-4527-9970-C7224B31141C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "5633FB6E-D623-49D4-9858-4E20E64DE458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567FF916-7DE0-403C-8528-7931A43E0D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010B34F4-910E-4515-990B-8E72DF009578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A545A77-2198-4685-A87F-E0F2DAECECF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "778FAE0C-A5CF-4B67-93A9-1A803E3E699F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7447185-7509-449D-8907-F30A42CF7EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFF89FA-2020-43CC-BACD-D66117B3DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834BB391-5EB5-43A8-980A-D305EDAE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2938F2-A801-45E5-8E06-BE03DE03C8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB88E86-6E83-4A59-9266-8B98AA91774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE50FE-EA21-4633-A181-CD35196DF06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6BF5B1-86D1-47FE-9D9C-735718F94874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C30ACBCA-4FA1-46DE-8F15-4830BC27E160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9453EF65-7C69-449E-BF7C-4FECFB56713E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA75825-21CF-475B-8040-126A13FA2216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA97C80E-17FA-4866-86CE-29886145ED80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE24BED-202E-416D-B5F2-8207D97B9939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04198E04-CE1D-4A5A-A20C-D1E135B45F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F61EA4A1-1916-48A5-8196-E3CDEF3108F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFDBA992-46F8-42A6-9428-C9E475CA69E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447493/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://developer.mozilla.org/devnews/index.php/2006/10/02/update-possible-vulnerability-reported-at-toorcon/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447493/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitypronews.com/insiderreports/insider/spn-49-20061003FirefoxVulnerabilityClaimWasAJoke.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider this issue to be a security vulnerability.  We have been in contact with the upstream project regarding this problem and agree that this issue currently poses no security threat.  In the event more information becomes available, we will revisit this issue in the future.\n",
        "lastModified" : "2006-10-16T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page."
      }, {
        "lang" : "es",
        "value" : "IBM Client Security Password Manager almacena y distribuye contraseñas basadas en el título de un sitio web, lo cual permite a atacantes remotos obtener nombre de usuario y contraseña cambiando el título de una página HTML."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:client_security_password_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EF4660-BBF1-46F0-A53A-B1CFFAB3EDE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447577/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447577/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and crash) via a long Content-Type header, which triggers a stack overflow."
      }, {
        "lang" : "es",
        "value" : "wininet.dll en Microsoft Internet Explorer 6.0 SP2 y anteriores permite a atacantes remotos provocar una denegación de servicio (excepción no manejada y caída) mediante una cabecera Content-Type larga, lo cual dispara un desbordamiento de pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6B8985B-B927-4928-B1DB-18E29F796992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A04FEA6-37B0-44B0-844F-55652ABA1F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D56FB8E-2553-47C1-82A2-9E59023780CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8541EEED-94F4-42F8-9719-57F3EC85D52B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "40372520-08CF-4F64-A7AC-7E0AE0964138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40F8042F-C621-45AE-9F8C-70469579643A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F6133-25D1-44A5-B6B9-354703436783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "587026A7-5480-4B30-8E73-6A9BB31FBCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4B3552-95CE-41AC-83C1-BF93558329D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0379.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29129",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19092",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2917",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27900",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2039",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-07/0379.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/2917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/27900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server 10.UC3RC1 Trial para Linux y posiblemente otras versiones crean /tmp/installserver.txt con permisos no seguros, lo cual permite a usuarios locales añadir información a ficheros de su elección mediante un ataque de enlace simbólico."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.uc_rc1:*:trial_linux:*:*:*:*:*",
            "matchCriteriaId" : "CEC25312-AE9A-4A44-8C55-EF70D3055763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22223",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447501/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20300",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3883",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29297",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29300",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447501/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sortBy or (2) search parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en cart.php en Sum Effect Software digiSHOP 4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) sortBy o (2) search."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sum_effect_software:digishop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64469543-9AF9-4301-9A8A-F59E0C50F4E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22086",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447506/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20297",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447506/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[ppa_root_path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en inc/functions.inc.php en Skrypty PPA Gallery 1.0 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro config[ppa_root_path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skrypty:ppa_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "12F3792A-E01A-4853-9B3A-744AD02770F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skrypty:ppa_gallery:0.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037ED773-0A6D-4D6E-B183-CBE00D2A270E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2446",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to execute arbitrary PHP code via a URL in the s[phppath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en functions.php en PHP Web Scripts Easy Banner Free permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro s[phppath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_web_scripts:easy_banner_free:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA09FB64-4012-4DD9-9D0F-C1BF21A72093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447499/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20295",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447499/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-05T04:04:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) BSX_LIBDIR parameter in scripts in /files/ including (a) abook.php3, (b) compose-attach.php3, (c) compose-menu.php3, (d) compose-new.php3, (e) compose-send.php3, (f) folder-create.php3, (g) folder-delete.php3, (h) folder-empty.php3, (i) folder-rename.php3, (j) folders.php3, (k) mbox-action.php3, (l) mbox-list.php3, (m) message-delete.php3, (n) message-forward.php3, (o) message-header.php3, (p) message-print.php3, (q) message-read.php3, (r) message-reply.php3, (s) message-replyall.php3, (t) message-search.php3, or (u) settings.php3; and the (2) BSX_HTXDIR parameter in (v) files/login.php3."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en BasiliX 1.1.1 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el (1) parámetro BSX_LIBDIR en secuencias de comandos en /files/ incluyendo (a) abook.php3, (b) compose-attach.php3, (c) compose-menu.php3, (d) compose-new.php3, (e) compose-send.php3, (f) folder-create.php3, (g) folder-delete.php3, (h) folder-empty.php3, (i) folder-rename.php3, (j) folders.php3, (k) mbox-action.php3, (l) mbox-list.php3, (m) message-delete.php3, (n) message-forward.php3, (o) message-header.php3, (p) message-print.php3, (q) message-read.php3, (r) message-reply.php3, (s) message-replyall.php3, (t) message-search.php3, o (u) settings.php3; y el (2) parámetro BSX_HTXDIR en (v) files/login.php3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basilix:basilix_webmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "AD6B8F89-207A-4B42-9D9B-BE101F26143E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basilix:basilix_webmail:0.9.7_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477EE6E0-941F-4667-B879-A523B012CE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basilix:basilix_webmail:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4F9725-BAE3-4D86-9810-4585978DA041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basilix:basilix_webmail:1.02_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E241BC1A-DAC9-4060-B32B-9E5B7154D169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basilix:basilix_webmail:1.03_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8E1917-6CF0-48F9-9158-991641D67B1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22231",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29403",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20287",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3741",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-10T04:05:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The perfmonctl system call (sys_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium systems, does not properly track the reference count for file descriptors, which allows local users to cause a denial of service (file descriptor consumption)."
      }, {
        "lang" : "es",
        "value" : "La llamada al sistema perfmonctl (sys_perfmonctl) en el núcleo Linux 2.4.x y 2.6 anterior a 2.6.18, cuando se ejecuta en sistemas Itanium, no lleva correctamente la cuenta de referencias a los descriptores de fichero, lo que permite a usuarios locales provocar una denegación de servicio (agotamiento de descriptores de fichero)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C24A129D-2E5E-436C-95DE-AE75D2E8D092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E244C37-E366-482E-9173-9376D0839839"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "11F96BB9-6509-4F1E-9590-E55EE8C6F992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*",
            "matchCriteriaId" : "12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "718D4631-440E-4783-8966-B2A2D3EF89B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "7015F57A-1E3B-42D2-9D12-F695078EFB21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "467721EE-5130-46C5-BBB7-0F4878F3F171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "171257E7-12C5-4283-88F7-FFE643995563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "0887E02F-9F36-41F0-9F75-060B8414D7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F49A384-7222-41F3-9BE1-4E18C00E50A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05520FE3-C48D-42E8-BC24-C2396BD46CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D865FBB6-E07D-492F-A75E-168B06C8ADEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598F24C2-0366-4799-865C-5EE4572B734B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0399660-6385-45AB-9785-E504D8788146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91F6CBE-400F-4D0B-B893-34577B47A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.9_pre5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B58DDD-D3C4-4A2E-A908-64485497207D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1548ECFD-FCB5-4AE0-9788-42F61F25489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABB9787-5497-4BDC-8952-F99CF60A89BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.11:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "01278984-9712-48D0-B8B8-F9ACEB0FBA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615F6BA2-CD51-4159-B28A-A018CA9FC25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093848CB-68A1-4258-8357-373A477FE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E275F440-A427-465F-B314-BF0730C781DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98651D39-60CF-409F-8276-DBBB56B972AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067B8E09-C923-4DDA-92DB-4A2892CB526A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EBE3738-E530-4EC6-9FC6-1A063605BE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "D77F8919-4064-4EA5-A948-76178EA21F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7C423D-23DE-4C7B-A518-66F87E041925"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA1382E-71B0-4E65-A310-716A244F4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "824BBD31-8F3B-4F05-981B-ABF662BBF5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*",
            "matchCriteriaId" : "388A5C99-1F60-4C20-9AE5-6E73E5A3F819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.18:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "53B252BE-92F1-42E2-BF2F-EA6B6AFFEE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F677E992-8D37-438F-97DF-9D98B28F020C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5888F8D7-15C2-4435-BB3C-8674DFAF0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "29439AD0-EB8D-4675-A77A-6548FF27ADA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "F27AADF6-1605-47FC-8C4D-87827A578A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B42F4080-A76F-4D17-85E2-CD2D2E4D0450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*",
            "matchCriteriaId" : "50E6F5C5-BF74-4C10-830A-F232D528D290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "476687F9-722B-490C-BD0B-B5F2CD7891DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A399D94B-D08D-4454-A07A-6634C9AE612F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD8E4AE-FEF7-4CE2-B338-4F766921593F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*",
            "matchCriteriaId" : "13A8B50A-73F6-4FCF-A81F-FB624FBA7143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D21AD5-C34F-4005-92F3-98F714DE98D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*",
            "matchCriteriaId" : "8D27D843-2DA7-4481-857C-09FDC4FBD45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB93128-2743-4668-8C48-9B7282D4A672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040991B8-FB4B-480B-B53B-AA7A884F9F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA592BC-5846-4FC1-B2A7-13E622705DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59688C40-C92F-431E-ADD7-6782622862D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5FE15BF-91C7-452A-BE1B-7EC9632421C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "15C1923C-D9C4-400D-9F0F-20B519EEC9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*",
            "matchCriteriaId" : "E51913F9-FC7D-450A-9A82-5084AA74A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*",
            "matchCriteriaId" : "B62E02D5-9EEE-439B-A510-BEEE28A9F358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*",
            "matchCriteriaId" : "02278C07-E649-427D-9E5C-F1738A01BCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E120257D-346B-4BA6-A431-E6F820FBB5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361D407D-A4BE-491D-BC8E-32E78DC4A8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F83D55B-3106-4907-A75F-A7EBF0EC6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFD594E-48BA-4281-8DEE-306E3008ABB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CD7983-4EB2-4D17-9332-493ECBADC284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "637A08D0-E382-4DE8-AEEC-6A53A72849B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550DFE6E-DCE6-4649-8746-522996021DBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3D2AA2-05B2-46E3-96EE-27EB29795E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17BB496-749A-40C8-BAA9-6CFBBE308065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF51F68C-60A5-451F-9150-6DABBAE1D41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3BF9D6-BE14-4590-91B8-501DC92261BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C30F255-1297-46EA-9FBC-05564792FF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.4.33:pre1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6E8B0E-DEDD-43D1-9841-4BAF5A805967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204360",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22279",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22382",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b8444d00762703e1b6146fce12ce2684885f8bf6",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:182",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20361",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3937",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29384",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11250",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b8444d00762703e1b6146fce12ce2684885f8bf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nLinux, Linux kernel, 2.6.18"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4812",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en PHP 5 hasta la 5.1.6 y 4 anteriorer a 4.3.0 permite a un atacante remoto ejecutar código de su elección a través de un argumento a la funcion PHP unserializable con un valor grande para el número de elementos del array, lo cual dispara el desbordamiento en la función ecalloc en Zend Engine (Zend/zend_alloc.c)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B59616-A309-40B4-94B1-50A7BC00E35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BF34B5-F74C-4D56-9841-42452D60CB87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0708.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22280",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22281",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22300",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22331",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22338",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22533",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22650",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securityreason.com/securityalert/1691",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-14.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.hardened-php.net/advisory_092006.133.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/files/CVE-2006-4812.patch",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448014/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448953/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20349",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0055",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-362-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3922",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29362",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0708.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_092006.133.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.hardened-php.net/files/CVE-2006-4812.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448014/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448953/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-362-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\n\nThis issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 3, and 4.",
        "lastModified" : "2008-06-26T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB."
      }, {
        "lang" : "es",
        "value" : "Los controladores de dispositivo de (a) NAVENG (NAVENG.SYS) y (b) NAVEX15 (NAVEX15.SYS) 20061.3.0.12 y posteriores, utilizados en Symantec AntiVirus y en productos de seguridad, permiten a usuarios locales escalar privilegios sobreescribiendo direcciones críticas del sistema utilizando un Irp (paquete de petición de Entrada/salida) creado artesanalmente para las funciones IOCTL (1) 0x222AD3, (2) 0x222AD7, y (3) 0x222ADB."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:naveng_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1278247D-9258-46E2-91D7-29FB40C616D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:navex15_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84278ED8-D4D2-4351-9A0E-5F811A4C06E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22288",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016994",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016995",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016996",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016997",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016998",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016999",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017000",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017001",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017002",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/946820",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447849/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20360",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29360",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/946820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447849/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update 20061.3.0.12 has been released by the vendor for each vulnerable driver.\r\nAdditionally, an update to the virus definitions (October 4, 2006 revision 9 or later) is required."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de bufer en la función repr en Python 2.3 hasta la 2.6 anterior al 22/08/2006 permite a un atacante dependiente del contexto provocar denegación de servicio y posiblemente ejecutar código de su elección a través de  secuencias anchas hechas a mano del carácter UTF-32/UCS-4 a ciertas secuencias de comandos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "9166CB74-7623-44E6-9E68-A00768A8A870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "6254AFCD-2750-4FD2-8139-8A4BC07B0D06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391589",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=208162",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://kb.vmware.com/KanisaPlatform/Publishing/882/5120103_f.SAL_Public.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22276",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22297",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22303",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22357",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22358",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22379",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22448",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22512",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22531",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-07.xml",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017019",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1541585&group_id=5470&atid=305470",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-229.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1197",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1198",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:181",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0713.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448244/100/100/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20376",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-359-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3940",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/5131",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://zoehep.xent.com/~bsittler/python2.4-2.4.3_unicodeobject.c.diff",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29408",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-702",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/distros/ubuntu/+source/python2.4/+bug/56633",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10789",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=208162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://kb.vmware.com/KanisaPlatform/Publishing/882/5120103_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/31492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://sourceforge.net/tracker/index.php?func=detail&aid=1541585&group_id=5470&atid=305470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-229.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_25_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0713.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448244/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-359-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/5131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://zoehep.xent.com/~bsittler/python2.4-2.4.3_unicodeobject.c.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.net/distros/ubuntu/+source/python2.4/+bug/56633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference)."
      }, {
        "lang" : "es",
        "value" : "La función clip_mkip en net/atm/clip.c del subsistema ATM en el núcleo Linux permite a atacantes remotos provocar una denegación de servicio (panico) mediante vectores no identificados que provocan que el subsisstema ATM acceda a la memoria de búferes de sockets después de que hayan sido liberados (referencia a puntero liberado)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.18",
            "matchCriteriaId" : "E6B5FD1A-8D61-4634-AC74-02831B453316"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E304C9-F780-4358-A58D-1E4C93977704"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A423B773-6B8B-4BA3-80A1-C8CAEF4D9BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444EBE64-D3C8-41E9-8E02-22C6BDA2876B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2C244C-82F6-49BC-B7F7-54AB989C43E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206265",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://secunia.com/advisories/22253",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22279",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22762",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23395",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23788",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/24288",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1017526",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe26109a9dfd9327fdbe630fc819e1b7450986b2",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:197",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20363",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1237",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3937",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3999",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29387",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10388",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "http://secunia.com/advisories/22253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/24288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1017526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe26109a9dfd9327fdbe630fc819e1b7450986b2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0689.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack."
      }, {
        "lang" : "es",
        "value" : "Las clases System.CodeDom.Compiler en Novell Mono crean archivos temporales con permisos no seguros, lo cual permite a usuarios locales sobreescribir ficheros de su elección a ejecutar código de su elección a través de un ataque symlink."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31A3175-7CC6-4367-9A3C-F3324156C818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono:mono:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4BB536F-79EB-42AF-B17B-49BE47CFC215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://fedoranews.org/cms/node/2401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22237",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22277",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23154",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-23.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_73_mono.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-357-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://fedoranews.org/cms/node/2401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-23.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_73_mono.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-357-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el cliente y servidor de CA BrightStor ARCserver Backup R11.5 permite a un atacante remoto ejecutar código de su elección a través de mensajes largos al CheyenneDS Mailslot."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477EE032-D183-478F-A2BF-6165277A7414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22283",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447839/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447853/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-12.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447839/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447853/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe); (6) a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe); or unspecified vectors related to the (7) Job Engine Service."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en montón en CA BrightStor ARCserve Backup r11.5 SP1 y anteriores, r11.1, y 9.01; BrightStor ARCServe Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; y Buisiness Protection Suite r2 permiten a un atacante remoto ejecutar código de su elección mediante datos manipulados en el puerto TCP 6071 para el Backup Agent RPC Server (DBASVR.exe) utilizando rutinas RPC con códigos de operación (opcode) (1) 0x01, (2) 0x02, y (3) 0x18; datos de cabo (stub) inválidos en el puerto TCP 6503 para las rutinas RPC con códigos de operación (4)0x2b o (5) 0x2d en ASCORE.dll en el Message Engine RPC Server (msgeng.exe); (6) un nombre de anfitrión (hostname ) largo en el puerto TCP 41523 para ASBRDCST.DLL en el Discovery Service (casdscsvc.exe); o vectores no especificados relacionados con el (7) Job Engine Service."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:*:sp1:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5",
            "matchCriteriaId" : "8745E951-E151-4EB6-86B4-4E8754ADEFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52790F8-0D23-47F4-B7F7-6CB0F7B6EA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37161BE-6AF5-40E0-BD63-2C17431D8B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78AA54EA-DAF1-4635-AA1B-E2E49C4BB597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:business_protection_suite:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328E1C42-488A-43FC-8DF2-758DC73B74AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:server_protection_suite:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8781759-7B4C-47C3-8A60-8CA5520360C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "6E236148-4A57-4FDC-A072-A77D3DD2DB53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22285",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/361792",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/860048",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.lssec.com/advisories/LS-20060220.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lssec.com/advisories/LS-20060313.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.lssec.com/advisories/LS-20060330.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447839/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447847/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447848/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447862/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447926/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447927/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447930/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20365",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-11.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29364",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/361792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/860048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.lssec.com/advisories/LS-20060220.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lssec.com/advisories/LS-20060313.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.lssec.com/advisories/LS-20060330.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447839/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447847/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447848/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447862/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447926/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447927/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447930/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.tippingpoint.com/security/advisories/TSRT-06-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Simon Brown Pebble 2.0.0 RC1 y RC2 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de la consulta cadena."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "428B2B9C-D5DA-45D7-9E04-798958DAC087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simon_brown:pebble:2.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5961A84D-6AC1-40CC-84C2-2B3EF989C92A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://svn.sourceforge.net/viewvc/pebble/trunk/src/net/sourceforge/pebble/search/SearchResults.java?r1=136&r2=206",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447503/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://svn.sourceforge.net/viewvc/pebble/trunk/src/net/sourceforge/pebble/search/SearchResults.java?r1=136&r2=206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447503/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in John Himmelman (aka DaRk2k1) PowerPortal 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to registering a user.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en John Himmelman (aka DaRk2k1) PowerPortal 1.1 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados, posiblemente relacionados con el registro de un usuarios. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerportal:powerportal:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA49ED8-A201-4957-8606-F30D59C4C0CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5170",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pam_authenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver."
      }, {
        "lang" : "es",
        "value" : "pam_ldap en nss_ldap sobre Red Hat Enterprise Linux 4, Fedora Core 3 y anteriores, y posiblemente otras distribuciones no devuelven una condición de error cuando un servidor de directorio LDAP responde con una respuesta de control PasswordPolicyResponse, lo cual provoca que la función pam_authenticate devuelva código correcto aunque haya fallado, según lo divulgado originalmente para el xscreensaver."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora_core:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "core_3.0",
            "matchCriteriaId" : "D9E92E73-CF09-41C6-81DB-433CB5567740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:linux_kernel_2.6.9:*:*:*:*:*",
            "matchCriteriaId" : "4A4A962F-3512-40C5-8860-F3212E441494"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6172AF57-B26D-45F8-BE3A-F75ABDF28F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:4.0_s390:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61640B1-2E39-4999-9730-2C87B98B6E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:4.0_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9477527F-31BE-407A-8FF6-CC1739347D30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B1AD66-4C59-4032-A6F6-703F56DC0CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugzilla.padl.com/show_bug.cgi?id=291",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0719.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22682",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22685",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22694",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22869",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23132",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23428",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200612-19.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017153",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1203",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:201",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_27_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447859/100/200/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20880",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0061/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4319",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207286",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-680",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10418",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://bugzilla.padl.com/show_bug.cgi?id=291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0719.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200612-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447859/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0061/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by \"appending to a file from a bad address,\" which triggers a fault that prevents the unused memory from being cleared in the kernel buffer."
      }, {
        "lang" : "es",
        "value" : "La función copy_from_user en el código uaccess en Linux kernel 2.6 anterior a 2.6.19-rc1, cuando funciona sobre s390, no correctamente claro un búfer del núcleo, lo cuál permite que los programas locales del espacio del usuario lean porciones de la memoria del núcleo “añadiendo a un archivo una mala dirección,” lo que dispara una falta que previene la memoria no usada se limpie en el búfer del nucleo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E20AD05-586B-4493-9793-3FF8028CF887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "54393D69-B368-4296-9798-D81570495C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6791A801-9E06-47DD-912F-D8594E2F6B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90CCED-3A5B-46E3-A6B0-4865AB786289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E55F2549-F813-4BD6-8933-6788D898ECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179147E4-5247-451D-9409-545D661BC158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lkml.org/lkml/2006/11/5/46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22289",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017090",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=52149ba6b0ddf3e9d965257cc0513193650b3ea8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20379",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29378",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9885",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2006/11/5/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=52149ba6b0ddf3e9d965257cc0513193650b3ea8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nLinux, Linux kernel, 2.6.19 rc1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2025-05-02T12:11:52.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la interfaz administrativa TeraStation HD-HTGL  con firmware 2.05 beta 1 y anteriores permite a atacantes remotos modificar configuraciones o borrar datos de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo-technology:terastation_hd-htgl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.08",
            "matchCriteriaId" : "4345AAD8-45CC-4459-A2D0-B6E4B695A5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2393484133/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22248",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3891",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29338",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://jvn.jp/jp/JVN%2393484133/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via \"the signature field of NTLM Type 1 messages\"."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la validación NTLM enMailEnable Professional 2.0 y Enterprise 2.0  permite a un atacante remoto ejecutar código de su elección a través de \"el campo de mensajes de firma de NTLM Tipo 1\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABEB364-389B-46AF-B04F-88EC3AF9DB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FD7082-AC93-426F-9DA7-50CBFFDAC07A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.musecurity.com/advisories/MU-200609-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20290",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200609-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Hotfixes are available on the vendor web site that address this and related vulnerabilities."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or (2) cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigger a buffer over-read."
      }, {
        "lang" : "es",
        "value" : "La validación NTLM en MailEnable Professional 2.0 y Enterprise 2.0 permite a un atacante remoto (1)ejecutar código de su elección a través de vectores no especificados que afectan a codificación artesanal base64 mensajes NTLM Tipo 3, o (2) provoca denegación de servicio a través de la codificación base64 de mensajes NTLM Tipo 1, lo cual dispara una sobre lectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_enterprise:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABEB364-389B-46AF-B04F-88EC3AF9DB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailenable:mailenable_professional:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FD7082-AC93-426F-9DA7-50CBFFDAC07A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.musecurity.com/advisories/MU-200609-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22179",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29286",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29287",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200609-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mailenable.com/hotfix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the open_basedir check and before the file is opened by the underlying system, as demonstrated by symlinking a symlink into a subdirectory, to point to a parent directory via .. (dot dot) sequences, and then unlinking the resulting symlink."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la función symlink en PHP 5.1.6 y anteriores permite a usuarios locales evitar la restricción open_basedir usando una combinación de las funciones symlink, mkdir, y unlink para cambiar la ruta de archivo tras la comprobación de open_basedir y antes de que el archivo es abierto por el sistema subyacente, como ha sido demostrado enlazando simbólicamente un enlace simbólico dentro de un subdirectorio, para que apunte a un directorio padre mediante secuencias .. (punto punto), y entonces desenlazar el enlace  simbólico resultante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.6",
            "matchCriteriaId" : "1C85C56B-D27F-433F-A268-34463619B183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "419867C6-37BE-43B4-BFE0-6325FEE3807D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "37896E87-95C2-4039-8362-BC03B1C56706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A159B4-B847-47DE-B7F8-89384E6C551B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39A1B1-416E-4436-8007-733B66904A14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D724D09-0D45-4701-93C9-348301217C8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6E36203C-1392-49BB-AE7E-49626963D673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6713614A-B14E-4A85-BF89-ED780068FC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
            "matchCriteriaId" : "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1460DF-1687-4314-BF1A-01290B20302D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470380B0-3982-48FC-871B-C8B43C81900D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2937B3-D034-400E-84F5-33833CE3764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049850.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22235",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016977",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory_082006.132.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447649/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448020/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448953/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20326",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29340",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049850.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.hardened-php.net/advisory_082006.132.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447649/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448020/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448953/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php",
        "lastModified" : "2006-12-04T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940."
      }, {
        "lang" : "es",
        "value" : "Intoto iGateway VPN y iGateway SSL-VPN permite a un atacante dependiente del contexto provocar denegación de servicio (consumo de CPU) a través de llavés públicas parásitas con un gran \"expoenente público\" o (2) valores \"módulo público\" en certificados X.509 que requieren tiempo extra para proceder con la verificación de la firma de RSA, un tema relacionado con CVE-2006-2940."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intoto:igateway_ssl-vpn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB142A4C-E7B6-43D8-A376-32C6A77FB7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:intoto:igateway_vpn:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB91D1AA-041F-4BF2-B9FE-EFF3BC0E5266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22206",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "It is reported that a patch may be obtained by contacting Intoto at the following email address: support@intoto.com"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter, a different vector than CVE-2006-5102."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en include/main.inc.php en Sebastian Baumann y Philipp Wolfer Newswriter SW 1.42 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro NWCONF_SYSTEM[server_path], un vector diferente de CVE-2006-5102."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baumedia:newswriter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.42",
            "matchCriteriaId" : "443E275E-FAB3-4606-BEE4-8C7E88FC42CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baumedia:newswriter:1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2203F5A4-8C3C-484F-B4A7-00043311E5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baumedia:newswriter:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D7BE4-DA27-4D4A-83A6-BB29B9B1783F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447253/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447253/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the target parameter in (1) change_preferences2.php, (2) create_file.php, (3) upload_local.php, and (4) upload_multi.php, different vectors than CVE-2006-5124."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Joshua Muheim phpMyWebmin 1.0 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro target en (1) change_preferences2.php, (2) create_file.php, (3) upload_local.php, y(4) upload_multi.php, vectores diferentes que el CVE-2006-5124."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joshua_muheim:phpmywebmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CCDB69-509C-4F14-8821-E09CF9F66EC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22178",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447489/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29285",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447489/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en frontpage.php en Dan Jensen Travelsized CMS 0.4 y anteriores permiet a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro setup_folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dan_jensen:travelsized_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "1446E61E-BA71-4442-8934-6CD47968FA90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22194",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20321",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29337",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the (1) adminlog.php, (2) postblog.php, (3) index.php, or (4) index2.php script in /edit."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Dayfox Designs Dayvox Blog 2.0 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro slogin en los ficheros(1) adminlog.php, (2) postblog.php, (3) index.php, o (4) index2.php en /edit."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dayfox_designs:dayfox_blog:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D5DC2-EED0-4FEA-92E3-7A7B386A5A96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447500/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29310",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447500/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en PKR Internet Taskjitsu anterior a 2.0.6 permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro key, cuando el límite del parámetro consulta está asignado a customerid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "5D1E8533-66A1-443A-A084-110815EBB92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9546620-3256-4D85-A144-789A12C5F89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A03C9348-DD01-4CB3-A5E4-153A8AFA7024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019F8F95-DA8B-4C97-804F-580D6D47FEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EABEE0-5CAD-40BA-9E6F-D98A609FFBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkr_internet:taskjitsu:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D41B4E57-5DC9-4C00-95D8-651DD3DC33E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22257",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20332",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.pkrinternet.com/download/RELEASE-NOTES.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://www.pkrinternet.com/taskjitsu/task/3517",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/22257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.pkrinternet.com/download/RELEASE-NOTES.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://www.pkrinternet.com/taskjitsu/task/3517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nPKR Internet, Taskjitsu, 2.0.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección Eval en Template.php en HAMweather 3.9.8.4 y anteriores permite a un atacante remoto ejecutar código de su elección a través de una secuencia modificada de la consulta, lo cuál provee a una llamada de la función eval dentro de la función do_parse_code."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hamweather:hamweather:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.8.4",
            "matchCriteriaId" : "64D8CCB0-30D4-411F-8052-6B1135B271CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hamweather:hamweather:3.9.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83E58B3-9381-4EE2-94BA-3977E6E8B16E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22242",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.hamweather.com/viewtopic.php?t=6548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00115-09302006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20311",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3881",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.hamweather.com/viewtopic.php?t=6548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gulftech.org/?node=research&article_id=00115-09302006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nHAMweather, HAMweather, 3.9.8.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pmp_rel_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en functions.php en phpMyProfiler 0.9.6 y anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pmp_rel_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyprofiler:phpmyprofiler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.6",
            "matchCriteriaId" : "DFD8CC58-8629-45B0-8BCE-EF2E472D1156"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.phpmyprofiler.de/viewtopic.php?p=2745#2745",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22144",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016980",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.phpmyprofiler.de/index.php?page=2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447646/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20324",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.phpmyprofiler.de/viewtopic.php?p=2745#2745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.phpmyprofiler.de/index.php?page=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447646/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled.\r\nThis vulnerability is addressed in the following product update:\r\nphpMyProfiler, phpMyProfiler, 0.9.6b"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/functions.php en Bulletin Board Ace (BBaCE) 3.5 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bulletin_board_ace:bulletin_board_ace:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "BED28CAE-0E1E-4FD6-8F88-D23C2A745497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bulletin_board_ace:bulletin_board_ace:3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1781D3E6-66EE-457D-BE9C-507CF8D7FF92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22137",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20302",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29315",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2468",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de directorios en download.php en webGENEius GOOP Gallery 2.0.2 permite a atacantes remotos leer o listar datos desde determinados archivos o directorios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webgeneius:goop_gallery:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9450C9D5-8FE6-42D6-9BC1-06F02E6A8613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22258",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447647/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448258/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448946/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20331",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447647/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448258/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448946/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appl[APPL] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en funzioni/lib/show_hlp.php en klinza professional cms 5.0.1 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de un código PHP a través de una URL en el parámetro appl[APPL]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klinza:klinza_professional_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.1",
            "matchCriteriaId" : "54AB0F17-1FDF-4ABC-9E48-81182A432F56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20323",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29336",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2472",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in /admin, and the (2) zpage parameter in (r) admin/geo_zones.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en osCommerce 2.2 Milestone 2 Update 060817 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) page en las secuencias de comandos (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, o (q) zones.php en /admin, y el (2) parámetro zpage en (r) admin/geo_zones.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2_ms2_2006-08-17",
            "matchCriteriaId" : "6E93F87E-B207-4C02-8DE8-EEE7879EF68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72557206-68C9-4EA4-B17A-873B8533DCE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A817F-919C-4BE2-A7C2-A97AD4DA528B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11B241D-C8A6-4315-B67E-5436CF232CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345C3AC6-EBAC-4680-9223-4BC8D0BFA7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6B05B3-854E-4B64-B9AC-6A6660DFBB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8C352-B248-4FA3-8F3B-E3557E47145F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94D34C1-A7BB-4F02-82E7-B708B33901E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95097990-E687-4417-94DF-D6E9A7CC48AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C382022-5D4A-419E-9A6F-14A38094C187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oscommerce:oscommerce:2.2_ms3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B69DBFBC-BC06-4090-9C9E-E0FF2953151F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2006/10/oscommerce-multiple-scripts-page-param.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22275",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016979",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/29795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20343",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29355",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28743/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28744/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28745/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28746/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28747/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28748/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28749/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28750/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28752/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28753/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28754/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28755/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28756/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28757/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28758/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28759/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2006/10/oscommerce-multiple-scripts-page-param.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.osvdb.org/29795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28743/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28744/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28745/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28746/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28747/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28748/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28749/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28750/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28752/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28753/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28754/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28755/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28756/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28757/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28758/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/28759/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/functions_static_topics.php en the Nivisec Static Topics module para phpBB 1.0 y anteriores permite a un atacante remoto ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "FE9D88E1-8611-4AAC-867E-303B7893BBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22269",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nivisec.com/article.php?l=vi&ar=20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20353",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3916",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29347",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2477/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.nivisec.com/article.php?l=vi&ar=20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2477/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPGREETZ_INCLUDE_DIR parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/footer.php en phpGreetz 0.99 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro PHPGREETZ_INCLUDE_DIR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgreetz:phpgreetz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99",
            "matchCriteriaId" : "0B5C860C-4869-4B7F-B077-56D6B6976BB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20352",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2476/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2476/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en Josh Schmidt WikyBlog 1.2.3 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro includeDir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikyblog:wikyblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "37A092D1-FD36-4D0A-8091-197BB979E1A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikyblog:wikyblog:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ECE01A-BE5A-4F61-BC3C-1158962CE17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikyblog:wikyblog:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55323DFD-C2C9-4DDB-A3F4-BE8AD7701943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/447735/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447896/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20350",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447735/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447896/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en net2ftp 0.93 permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro username. NOTA: algunos de estos detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net2ftp:net2ftp:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E06475-0226-4BC5-B627-DF221ECAD251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447535/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20313",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447535/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Wheatblog 1.0 and 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabildades de secuencias de comandos en sitios cruzados (XSS) en Wheatblog 1.0 y 1.1 permiten a un atacante remoto inyectar secuencias de comandos web o HTML a través de vectores no especificados. NOTA: el origen de esta información es desconocido; los detalles se obutvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wheatblog:wheatblog:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F12014-7C97-484E-BAD4-39EE96EC29F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wheatblog:wheatblog:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056883DC-70C4-42BB-B6E0-A1A8C1EFCDAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20306",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5196",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (device crash) via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz HTTP en Motorola SURFboard SB4200 Cable Modem permite a un atacante remoto provocar denegación de servicio (caida de servicio) a través de una pregunta con MfcISAPICommand fijado a SecretProc y una secuencia larga en el parámetro Secret."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:motorola:surfboard:sb4200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194EFBDF-B9A7-4888-91DB-A85B67C2077C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/20309.pl",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20309",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4054",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/20309.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) /pdshoppro.mdb, (2) /data/pdshoppro.mdb, or (3) /shoppro/data/pdshoppro.mdb."
      }, {
        "lang" : "es",
        "value" : "PDshopPro almacena información sensible bajo la raiz del web con insuficientes controles de acceso, lo cual permite a un atacante remoto descargarse una base de datos a través de una petición directa para (1) /pdshoppro.mdb, (2) /data/pdshoppro.mdb, o (3) /shoppro/data/pdshoppro.mdb."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdshoppro:pdshoppro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DC2F10-A7CF-4941-8606-6F364485B25B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1016852",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1."
      }, {
        "lang" : "es",
        "value" : "Múltiples paquetes sobre Sun Solaris, incluyendo (1) NSS; (2) Java JDK and JRE 5.0 Update 8 y anteriores, SDK y JRE 1.4.x hasta 1.4.2_12, y SDK y JRE 1.3.x hasta 1.3.1_19; (3) JSSE 1.0.3_03 y anteriores; (4) IPSec/IKE; (5) Secure Global Desktop; y (6) StarOffice, cuando se usa una llave RSA con un exponente 3, elimina el relleno PKCS-1 antes de generar un hash, lo cual permite a un atacante remoto falsificar una firma PKCS #1 v1.5 que esta firmada por una llave RSA y evita que estos productos verifiquen correctamente X.509 y otros certificados que utilicen PKCS #1."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:nss:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2112B58-9424-4F9D-B37A-35C5FCCC7C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:secure_global_desktop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B9B9F-E485-4265-AD4F-470B32DF841F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:staroffice:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E60B3BF-0114-4BB5-8C21-B2ABF713F7AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:*:*:*:sparc:*:*",
            "matchCriteriaId" : "BCA7836E-A936-4832-81A2-2D31F0642ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:*:*:*:sparc:*:*",
            "matchCriteriaId" : "907AE0E2-E467-433E-AEEF-BC05AE7AF95B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D57BC929-6C98-4F36-B31B-6B946F986D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "28BE548B-DD0C-4C58-98CA-5B803F04F9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8E9AA0-8907-4B1A-86A1-08568195217D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "0754AFDC-2F1C-4C06-AB46-457B5E610029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*",
            "matchCriteriaId" : "59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DA4242-30D9-44C8-9D0D-877348FFA22B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7042B56E-349E-40F4-ADD7-DEF1E9D8E964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0875E34D-8544-49B9-BAD9-8191CC103A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E772B9-8E41-476F-81F5-87B41F1827A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A04480-92DF-49AD-9B36-7F1FCB29DE90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477C310B-50AD-4D40-8EDB-4A80F0BF321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1F526-6B28-47A3-8D2C-06CA067E9164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F09D9E-B04B-477E-86E6-E1B1F9650973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F929C59-9602-4962-95B4-4165D66E5935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B76949-9282-44D0-8075-74E482CE9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B072DD-FC4F-4E07-9837-0E16017CA4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86408019-1B53-4AA8-9F05-47EBD0466EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F47561-F59C-4904-8E05-D8A9629405A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB067445-8EA5-460F-B625-C21251E5A8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C075BC-607E-47A1-A32D-B912D2FA03BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "787DCE54-6991-4A1A-836B-3C46A02C7400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEAB662-644A-4D7B-8237-64142CF48724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9598A49-95F2-42DB-B92C-CD026F739B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED1009E-AE60-43A0-A0F5-38526EFCF423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D011585C-0E62-4233-85FA-F29A07D68DA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F226D898-F0E8-41D8-BF40-54DE9FB5426D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE28C283-447A-4F83-B96B-69F96E663C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D102063B-2434-4141-98E7-2DE501AE1728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B8CD03-CD31-4F4D-BA90-59435578A4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A994BF-1F64-480A-8AA5-748DDD0AB68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88519F2D-AD06-4F05-BEDA-A09216F1B481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC728978-368D-4B36-B149-70473E92BD1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "44051CFE-D15D-4416-A123-F3E49C67A9E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "F296ACF3-1373-429D-B991-8B5BA704A7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B863420B-DE16-416A-9640-1A1340A9B855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "724C972F-74FE-4044-BBC4-7E0E61FC9002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34710306-D6CF-4D07-84BF-71A8839BE416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B93DC8-6375-4B41-B9BC-F22F592C56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87BF46A9-8E4A-4583-B35F-052FD481DF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B351BB-6CA6-4CEF-9F5D-ED47774FC676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA40FCD-1D34-4C47-908F-697433236153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00639A84-BD03-4BD9-A655-F806693DBC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14824B23-FF9F-4D6D-9D02-12B79BE346A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6493744C-A69D-4377-937E-85E7F5535EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09019B1-B873-41CE-951E-4777F324729C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4209A0-E73F-4B5A-9925-B5D20F879455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB8516D-03C4-478D-AFE2-824867FDC739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82AED17-FEC3-47D0-A395-26ACD07FBE52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9630BC7B-9039-4FA6-86F8-5274783F3EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC39C819-9439-4029-8377-F6D58B3DFDFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053DEF6-1317-4DA8-91D7-E1970DA62351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0605FF-3DDC-4F3A-8171-F3A447E9C292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "801FF3B4-0729-4710-BFC2-4B078029944F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "002CA86D-3090-4C7A-947A-21CB5D1ADD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56D9A60-F272-4D4C-A9DD-C93DAF783585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976F4ACB-3725-45B7-B2EF-DEE4B88254E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1F28FF-652A-4C89-9AC6-5E212F890811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A8C351-E9CD-431B-8B9D-712CA54C7213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36888382-79C8-4C97-A654-C668CD68556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jsse:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432EB8F8-52C0-4FF3-97E5-92F670DFEE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jsse:1.0.3_01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC8159F-4CB2-4A94-B7DF-4D7496EBA55B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jsse:1.0.3_02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D51B8BB-C05E-42A2-A6EC-87F73A3CDF98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:jsse:1.0.3_03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516A74B2-CEE6-492D-8884-60CC3D5C70EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22204",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22226",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22325",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845620",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3898",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3899",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3960",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://secunia.com/advisories/22204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559."
      }, {
        "lang" : "es",
        "value" : "El firmware 1.00.9 del Linksys WRT54g no necesita credenciales para hacer cambios de configuración, lo que permite a atacantes remotos modificar configuraciones de su elección mediante una petición directa a Security.tri, como ha sido demostrado usando los parámetros SecurityMode y layout, un problema diferente de CVE-2006-2559."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:linksys:wrt54g:1.00.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5818B-610F-45C4-AF9C-EDFDB2138135"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048495.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21372",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016638",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/930364",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19347",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://kinqpinz.info/lib/wrt54g/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://kinqpinz.info/lib/wrt54g/own2.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/5926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048495.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/21372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/930364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://kinqpinz.info/lib/wrt54g/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kinqpinz.info/lib/wrt54g/own2.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/5926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the \"Manage Forums\" link in the Admin control panel."
      }, {
        "lang" : "es",
        "value" : "Invision Power Board (IPB) 2.1.7 y anteriores permite a un administrador remoto restringido inyectar secuencias de comandos web o HTML de su elección, o ejecutar comandos SQL de su elección, a través de una descripción del foro que contenga una imagen artesanal con código PHP, lo cual es esjecutado cuando el usuario visita \"Mange Forum\" enlazando en el panel de control de Admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.7",
            "matchCriteriaId" : "F69B5D71-781A-4FDF-A5AB-0CE8AE6BBDBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF6BD7-04F2-4D69-8402-EC4B637EA083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0C566E-2AC5-47A2-9246-2FBC87828690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B83740E-6C38-4BEB-84A2-6B0F01799DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29692429-A920-4BAD-9D79-D36EBE74EFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D52AB16-A202-48B6-82C0-AD13EBCC7FCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C498DCB3-3CC7-4334-BF61-F5DA43F4B90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A7875E-DAF0-46CD-AE30-246EB3FC6BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2103FBA-1B72-43FC-A1ED-28F8C7DA0EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FBF21B-CF52-41BB-BAF1-AF822586D28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AF155D-BDF6-4B5F-89BF-62CDE6FB48DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE478AB9-7ED4-4FDD-8990-CC4442CFA416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F5777B-25A8-4D20-AD24-A639E315582F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF0C787-BDC5-4154-809A-864DA3D4769D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A69133-FF5A-457E-823F-64920A0DB9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C37B74-6486-46A2-AC2C-C27786ED697E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB960ACC-74D4-4AFB-886C-11EB5180DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA6316-7E7E-4A6B-AA54-1846198D64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70C944-F70E-49F4-AA9C-D19148925C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAF5259-D99A-45A1-8DD4-C6858B302272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5_2006-03-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5116FA-C532-42DF-ABBD-193AD7B799A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BC2011-5D19-4AF2-BCCD-38A03D0175FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2800F-3A8C-4B63-B754-D921DFF79496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8BA41-7876-4738-A68A-2162E28A3AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF761A-6459-42B0-BCB8-F735FBDD6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/447710/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29352",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447710/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The following requirements must be met for this attack to take place:\r\n- The database table prefix must be known\r\n- The admin must have access to the SQL Toolbox (any \"root admin\")\r\n- The admin must have images and referers turned on in their browser, and their browser must follow Location headers (default behaviour for most browsers)\r\n- The admin must view a malicious script as an image in their browser"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site request forgery (CSRF) attack involving forced SQL execution by an admin."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en action_admin/member.php en Invision Power Board (IPB) 2.1.7 y anteriores permite a un usuario remoto validado inyectar secuencias de comandos web o HTML a través de una referancia a la secuencia de comandos en el ajuste de avatar, lo cual puede ser apalancado para un ataque de falsificación de petición en sitios cruzados (CSRF) que afecta a un ejecución forzada de SQL por un administrador.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.7",
            "matchCriteriaId" : "F69B5D71-781A-4FDF-A5AB-0CE8AE6BBDBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CF6BD7-04F2-4D69-8402-EC4B637EA083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0C566E-2AC5-47A2-9246-2FBC87828690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B83740E-6C38-4BEB-84A2-6B0F01799DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29692429-A920-4BAD-9D79-D36EBE74EFB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D52AB16-A202-48B6-82C0-AD13EBCC7FCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C498DCB3-3CC7-4334-BF61-F5DA43F4B90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A7875E-DAF0-46CD-AE30-246EB3FC6BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3.1_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2103FBA-1B72-43FC-A1ED-28F8C7DA0EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:1.3_final:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94FBF21B-CF52-41BB-BAF1-AF822586D28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AF155D-BDF6-4B5F-89BF-62CDE6FB48DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B001F3-8A6E-423D-9382-AA696D193F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDDB243-B03B-4DFE-9234-FD886EA80C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E24336F-BD4C-4596-8FFE-9D53AB802BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE478AB9-7ED4-4FDD-8990-CC4442CFA416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_alpha3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F5777B-25A8-4D20-AD24-A639E315582F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pdr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF0C787-BDC5-4154-809A-864DA3D4769D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A69133-FF5A-457E-823F-64920A0DB9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.0_pf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C37B74-6486-46A2-AC2C-C27786ED697E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C63DDA0-9B4C-4D3E-9633-82C330753ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB960ACC-74D4-4AFB-886C-11EB5180DFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BA6316-7E7E-4A6B-AA54-1846198D64BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70C944-F70E-49F4-AA9C-D19148925C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAF5259-D99A-45A1-8DD4-C6858B302272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED0140-7137-4F8D-AEA1-53251D4D4273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75723F84-9989-4195-9827-E3A6DF2ABA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5_2006-03-08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5116FA-C532-42DF-ABBD-193AD7B799A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BC2011-5D19-4AF2-BCCD-38A03D0175FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232885C1-B578-4E6E-8472-FF47A17DF976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC2800F-3A8C-4B63-B754-D921DFF79496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C8BA41-7876-4738-A68A-2162E28A3AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18BF761A-6459-42B0-BCB8-F735FBDD6139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=227937",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22272",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447710/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.invisionpower.com/index.php?showtopic=227937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447710/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "An update for that addressed this vulnerability is available on the Invision Power Services web site.\r\nThe following requirements must be met for this attack to take place:\r\n- The database table prefix must be known\r\n- The admin must have access to the SQL Toolbox (any \"root admin\")\r\n- The admin must have images and referers turned on in their browser, and their browser must follow Location headers (default behaviour for most browsers)\r\n- The admin must view a malicious script as an image in their browser"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de directorio en Invision Gallery 2.0.7 permite a atacantes remotos leer archivos de su elección mediante una secuencia .. (punto punto) en el parámetro dir en (1) index.php y (2) forum/index.php, cuando se usa el comando viewimage en el módulo de galería."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA45453-5C5F-4730-9343-01CAF0F84705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB69839-3DBF-4C69-94F9-A482A683C641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7210BCE-952A-4639-B9A9-0417064EA314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E58AA0-90BF-497D-B296-845DAAFFE20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEE9847-81E2-478A-BFA8-8FCEAF536F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "569F77DD-F66F-4AEA-B0AF-3EF2FDCF00F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20328",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Invision Gallery 2.0.7 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro album en (2) index.php y (2) forum/index.php, cuando se usa el comando rate en el automódulo galería."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.7",
            "matchCriteriaId" : "DA75DBB9-9412-47C3-8B38-04AE349E8924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA45453-5C5F-4730-9343-01CAF0F84705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB69839-3DBF-4C69-94F9-A482A683C641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7210BCE-952A-4639-B9A9-0417064EA314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E58AA0-90BF-497D-B296-845DAAFFE20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invision_power_services:invision_gallery:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEE9847-81E2-478A-BFA8-8FCEAF536F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20327",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in images/smileys/smileys_packs.php in phpMyTeam 2.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the smileys_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en images/smileys/smileys_packs.php en phpMyTeam 2.0, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro smileys_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyteam:phpmyteam:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C66AF93-FE7C-45CB-92E0-CF36434C8D3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22278",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29530",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447842/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447842/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parameter in search.php and (2) the catid parameter in index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en PHP Classifieds 7.1 permite a un atacante remoto ejecutar comandos SQL de su elección a través de (1) parámetro catid_search en search.php y (2) el parámetro catid en index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4585D910-015F-492D-B8CF-8D1B69CBB326"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kzar.co.uk/exploits/phpclassifieds_exploit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20359",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3924",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29354",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kzar.co.uk/exploits/phpclassifieds_exploit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin/admin_tocpi_action_logging.php en Admin Topic Action Logging Mod 0.95 y anteriores, usado en phpBB 2.0 hasta 2.0.21, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE04D5FE-021A-4E97-9166-8F7484F4C5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C74C78D-EEE0-48DF-9721-2A43B996EBD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054EFBD3-2252-4173-B37A-B8CA0218CE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EB368F-5471-42E3-BBBE-EF9E623A7259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65406CF-59F1-48DC-8ABC-501F210A8B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AC5144-140D-48E9-87FD-96F2E248D4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F12660-10A7-4B66-94B0-954C9CD7D36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F58020-7D60-4376-BF2B-602A24C3F4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF566D7-4537-49F6-91BF-F56D64DAE6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F1F44C-B65B-49C4-B6E8-30560D5B7663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDE0690-6FB1-4E68-9250-7F45E9044B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0D9755-845D-4B53-88FA-98665A7240DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F6A04-7B8A-4658-AC64-DF8191A9BC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BF61F2-C69F-4B3C-92CD-20377C51C8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEACB9B7-2FA9-4290-94EE-E11DF8F66DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CBA1A2-B9D9-436A-9772-75062D1D0931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73B0FF6-5E58-4124-B815-192DA7D3FD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B74F3F-5DE8-4C22-9773-F04372B79CAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70E7ED09-FDD7-4FC2-AD0F-4B31E170F3F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD53CF-3D32-4F2A-AC8B-8F8390355536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90AAEB34-A2E5-43C9-9EA5-DF8A6C848ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CC6700-8863-4E86-9232-6CBFCF19FBC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639E102D-2BD2-42FF-999A-02135A3E5647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7F5CF1-4610-47D0-A6DD-DCB55645245D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB898F63-F327-44B1-B6A2-889E490E583F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A26BD-2D8B-4DE7-BEE3-940A0498DB74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29345",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2475/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2475/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program."
      }, {
        "lang" : "es",
        "value" : "Trend Micro OfficeScan 6.0 en Client/Server/Messaging (CSM) Suite para SMB 2.0 anetrior a 6.0.0.1385, y OfficeScan Corporate Edition (OSCE) 6.5 anterior a 6.5.0.1418, 7.0 anterior a 7.0.0.1257, y 7.3 anterior a 7.3.0.1053 permite a atacantes remotos eliminar clientes OfficeScan mediante una petición HTTP determinada que invoca al programa CGI de OfficeScan."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan_corporate_edition:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568D4315-0598-4E6A-A2EF-75180185997B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan_corporate_edition:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25D4D2B-B000-43B3-8CA8-9AAB5D719F44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan_corporate_edition:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9746FBD6-15FA-4703-ADEA-A940DE5F850A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22156",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20330",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/download/product.asp?productid=5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/download/product.asp?productid=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "A security patch for each affected product has been released by the vendor."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP request that invokes the OfficeScan CGI program."
      }, {
        "lang" : "es",
        "value" : "Trend Micro OfficeScan 6.0 en Client/Server/Messaging (CSM) Suite para SMB 2.0 anetrior a 6.0.0.1385, y OfficeScan Corporate Edition (OSCE) 6.5 anterior a 6.5.0.1418, 7.0 anterior a 7.0.0.1257, y 7.3 anterior a 7.3.0.1053 permite a atacantes remotos borrar archivos mediante un parámetro de nombre de archivo (filename) modificado en una petición HTTP determinada que invoca al programa CGI de OfficeScan."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477D3144-648E-4003-835F-87F63F9248F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB43A95-60F8-425A-8434-C07EC799DC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "567D7B70-7FE7-4C4F-8D09-C72E28F04FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trend_micro:officescan:corporate_7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CDE85D-4C4B-42D0-BF64-11E880168A83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22156",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20330",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trendmicro.com/download/product.asp?productid=5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trendmicro.com/download/product.asp?productid=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sun Solaris 10 before 20061006 uses \"incorrect and insufficient permission checks\" that allow local users to intercept or spoof packets by creating a raw socket on a link aggregation (network device aggregation)."
      }, {
        "lang" : "es",
        "value" : "Sun Solaris 10 anterior a 06/10/2006 usa \"validaciones de permisos incorrectos e insuficienets\" que permiten a un usuario local intereceptar o suplantar páquetes a través de la creación de un conector (socket) abierto sobre una agregación del enlace (agregación de dispositivo de red)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22246",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102606-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20377",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29381",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102606-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la secuencia de comandos Xsession, usada por el Administrador de pantalla X (X Display Manager, xdm) en NetBSD anerior al 12/02/2006, X.Org anterior al 25/02/2006, y Solaris 8 hasta 10 anterior a 06/10/2006, provoca que el archivo de errores de Xsession tenga permisos débiles antes de que se ejecute chmod, lo que permite a atacantes remotos leer archivos de errores de Xsession de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.99.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C5D200-B40F-458D-8216-A3C22B21B46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22323",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22469",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102652-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=32804",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20400",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-364-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=5897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102652-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=32804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-364-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=5897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file."
      }, {
        "lang" : "es",
        "value" : "La secuencia de comandos Xsession, tambien usado por X Display Manager (xdm) en NetBSD anterior a 12/02/2006, X.Org anterior a  17/03/2006, y Solaris 8 hasta la 10 anterior a 06/10/2006, permiten a un usuario local sobre escribir archivos de su elección, o leer otros ficheros de errores de usuarios de Xsession, a través de un ataque de enlaces simbólicos sobre un archivo/tmp/xses-$USER."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:xdm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "B856A744-AB2E-471B-B184-7B7D401146CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "current",
            "matchCriteriaId" : "D660F26B-C329-4F2D-8017-B9442FE8248D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF613C9-DC4A-45F0-BEE1-8450762B0089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "441CEF2E-9687-4930-8536-B8B83018BD28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD3C82-0B7D-4B25-B603-AD6C6D59239A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBA1B13-B378-4F13-BD13-EC58F15F5C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C8CAB1-2D8C-4875-A795-41178D48410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C422E343-ADF2-427D-865D-B5C35431EFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "87FD0350-38E2-46D3-B17F-6C3F9C3488A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4:*:arm32:*:*:*:*:*",
            "matchCriteriaId" : "3DC541BB-95DF-4A31-998F-983255F8B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "5AB998EB-E5F3-414D-AA99-34DC7B32E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "4319B741-4376-4EA2-9FEB-236C148D1514"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C288A88-11C6-429E-A109-0395D0989264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.1:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "247ABD95-74CA-45B8-8729-3C35C9E11186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.1:*:arm32:*:*:*:*:*",
            "matchCriteriaId" : "1D4C44E8-075A-4B48-88DA-2CAC25CDF159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.1:*:sh3:*:*:*:*:*",
            "matchCriteriaId" : "393738E7-93E1-4A37-817B-C023A9BD1DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.1:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "19D1E7AC-79B6-4136-ADB2-06BEE9773795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.1:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "E2EE8A19-8AB1-4283-95EA-9EE3C7E5DED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516C6D9A-7483-4E36-A2E0-42698161AD31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.2:*:alpha:*:*:*:*:*",
            "matchCriteriaId" : "6FA1C84C-6624-4032-8D0E-5EBB054F5224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.2:*:arm32:*:*:*:*:*",
            "matchCriteriaId" : "06B9ADAD-ADDC-47AC-9924-B31B17DDF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.2:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "6DC0D30E-DBF1-4FDB-80C0-80DB50D9E77A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.2:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "537FD523-1D44-4D85-AED1-C092E0155CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F89124-E194-4C7A-B06D-8535B4066AA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10D9BF9-FCC7-4680-AD3A-95757FC005EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5:*:sh3:*:*:*:*:*",
            "matchCriteriaId" : "52F2B17F-A169-402C-AA05-0DE5D805BAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "BD44E15F-D216-404F-8585-D278175C2A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E8C3A4-9FA7-4F2A-8C65-D4404715E674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDC444D-E763-4685-97F8-A027DF6F804D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249FA642-3732-4654-88CB-3F1D19A5860A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5071CA39-65B3-4AFB-8898-21819E57A084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C95A3-15E3-41B8-AC28-ACEA57021E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28BD9F91-2384-4557-9648-25FC00D04677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.99.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C5D200-B40F-458D-8216-A3C22B21B46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9875E709-11BA-4B8F-A2FC-26844DD4D563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "32CF7469-6D2F-4E34-8013-7F0D3433D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "1894C542-AA81-40A9-BF47-AE24C93C1ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:8.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "11847B60-D66B-4386-940A-C53B11853E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "A711CDC2-412C-499D-9FA6-7F25B06267C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*",
            "matchCriteriaId" : "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3F305CBD-4329-44DE-A85C-DE9FF371425E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2475113-CFE4-41C8-A86F-F2DA6548D224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102652-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=32805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=5898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29427",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2205",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102652-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=32805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=5898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product updates:\r\nX.org, xdm, 2006-03-17\r\nNetBSD, NetBSD, Current 2006-02-12\r\nSun, Solaris, 10 2006-10-06",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en Sergey Lyubka Simple HTTPD (shttpd) 1.34 permite a atacantes remotos ejecutar código de su elección mediante un URI (Identificador Uniforme de Recurso) largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sergey_lyubka:simple_httpd:1.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B54AB3-E083-4A4C-8048-251C8ADDA2C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2006-005-shttpd.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050146.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22294",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20393",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29368",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://exploitlabs.com/files/advisories/EXPL-A-2006-005-shttpd.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050146.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in giris_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL commands by simultaneously injecting into the user name and pass fields in uyegiris.asp, also known as the Kullanici Adi (k_a) and Sifre (sifre) parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en giris_yap.asp de Emek Portal 2.1 permite a un atacante remoto ejecutar comandos SQL de su elección a través la inyección simultanea dentro del nombre de usuario y los campos de contraseña, también conocidos como los parámetros Kullanici Adi (k_a) y Sifre (sifre)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emek_portal:emek_portal:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEDBDCF-FEA6-4BA6-936C-1BFE07586370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447914/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29380",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447914/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función systrace_preprepl (STRIOCREPLACE) en systrace de OpenBSD 3.9 y NetBSD 3 permite a usuarios locales provocar una denegación de servicio (caída), escalar privilegios, o leer memoria del núcleo de su elección mediante argumentos numéricos muy grandes en la llamada ioctl systrace."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9CABFAA-594C-45D7-A0C7-795872A0C68A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openbsd.org/errata.html#systrace",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2006-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22324",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017009",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20392",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://openbsd.org/errata.html#systrace",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://scary.beasts.org/security/CESA-2006-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "A patch has been released for each affected product which addresses this vulnerability."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en blog/index.php en el módulo de blog in Moodle 1.6.2 permite a un atacante remoto ejecutar comandos SQL de su elección a través de un parámetro doblemente-codificado tag."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98CA6482-0B84-463D-9C81-A92FFC06C9FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.moodle.com/blog/index.php?r1=1.18.2.2&r2=1.18.2.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116034301209228&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22309",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448018/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448023/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29377",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.moodle.com/blog/index.php?r1=1.18.2.2&r2=1.18.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116034301209228&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448018/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448023/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, and (m) WYTextArea.php; (2) files in the programm/elements/ directory including (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, and (u) WYShortTextElement.php; and (3) programm/webyep.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivos en WebYep 1.1.9, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de webyep_sIncludePath en (1) archivos en el directorio programm/lib/ incluyendo (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, y (m) WYTextArea.php; (2) archivos en el directorio programm/elements/ incluyendo (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, y (u) WYShortTextElement.php; y (3) programm/webyeb.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objective_development:webyep:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BD42EBF-A680-4018-ADC2-A9F60A6A95E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv48-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22336",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.obdev.at/products/webyep/release-notes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29646",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29652",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29662",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448009/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20406",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3972",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv48-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.obdev.at/products/webyep/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448009/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T12:07:00.000",
      "lastModified" : "2023-11-07T01:59:14.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4812.  Reason: This candidate is a reservation duplicate of CVE-2006-4812.  Notes: All CVE users should reference CVE-2006-4812 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3435",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694."
      }, {
        "lang" : "es",
        "value" : "PowerPoint en Microsoft Office 2000, XP, 2003, 2004 para Mac, y v.X para Mac no analiza adecuadamente el campo de notas de diapositiva en un documento, lo cual permite a atacantes con la intervención del usuario ejecutar código de su elección mediante datos manipulados en este campo, lo cual dispara un cálculo erróneo de puntero de objeto que utiliza datos de dentro del documento. NOTA: este problema es diferente de otras vulnerabilidades PowerPoint incluyendo CVE-2006-4694."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310DF9B3-3494-4BD4-8A9D-82211EA6C518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB85A3C-EFA3-485D-84C5-7976718AEAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9D02D769-061D-44A5-B019-F4E653DF615A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017030",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/187028",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29446",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448149/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20304",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3977",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-032.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A476",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/187028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448149/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3436",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving \"ASP.NET controls that set the AutoPostBack property to true\"."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Microsoft .NET Framework 2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados implicando \"controles ASP.NET que establecen la propiedad AutoPostBack a true\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A419F50E-F32C-461C-95D0-978C5351FBAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22307",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017029",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/455604",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20337",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3976",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28658",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/22307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/455604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3876",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en PowerPoint en Microsoft Office 2000, Office 2002, Office 2003, Office 2004 para Mac, y Office v.X para Mac permite a atacantes con la intervención del usuario ejecutar código de su elección mediante un registro Data artesanal en un fichero PPT, una vulnerabilidad diferente que CVE-2006-3435 y CVE-2006-4694."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "716DDA05-D094-4837-852C-0511CDDD5ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B3099E-DFA0-4C7E-B016-370028BF8387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "43AE142C-E7AD-418E-BA9B-887285EE9620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:sr1:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "23E6544C-3695-45E6-A8AD-2F3A3B574915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "C548E35A-C9DF-4784-824A-EEBB693CD388"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017030",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/938196",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29447",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20322",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3977",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A453",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/938196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) matiere_ID parameter in lire.php or the (2) classe_ID parameter in lire_a_faire.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SLQ en Cahier de texte 2.0 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro matiere_ID en lire.php o (2) el parámetro classe_ID en lire_a_faire.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cahier_de_textes:cahier_de_textes:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F28BDD8-EC76-4A9F-977F-5ED29E7C160E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22319",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447933/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20389",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3949",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29388",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2485",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447933/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/themen_portal_mitte.php or (2) includes/logger_engine.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Dimension de phpBB 0.2.6 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path en (1) includes/themen_portal_mitte.php o (2) includes/logger_engine.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dimension_of_phpbb:dimension_of_phpbb:0.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7C5485-6600-4B46-92C6-D09E1AA6A2C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22287",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20367",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_user_viewed_posts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/functions_user_viewed_posts.php módulo Nivisec User Viewed Posts Tracker 1.0 y anteriores para phpBB permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nivisec:user_viewed_posts_tracker:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E4E1AF-CDE1-4AD0-B484-8EB4C20E220E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22305",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.nivisec.com/article.php?l=vi&ar=19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447932/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448445/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20385",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29383",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2483",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.nivisec.com/article.php?l=vi&ar=19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447932/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448445/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/logger_engine.php en Dimitri Seitz Security Suite IP Logger 1.0.0 en dwingmods para phpBB permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dimitri_seitz:security_suite_ip_logger:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85C478C-E7C8-4E99-99F2-A95F76830E88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22290",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20370",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3926",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29321",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2480",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in AAIportal before 1.4.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en AAIportal anterior a 1.4.0 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aai-portal:aaiportal:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B725FB-2812-4D57-BE90-AD9985F05BA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aai-portal.sourceforge.net/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22150",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=451458",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20414",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aai-portal.sourceforge.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=451458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5226",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en moteur/moteur.php en Prologin.fr Freenews 1.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro chemin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenews:freenews:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE032FDD-383A-4D00-95C9-8B5F7FCC539F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448019/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20405",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448019/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable, probably obtained from the User-Agent HTTP header, and possibly (2) the $ip_resolved variable."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php en TorrentFlux 2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) la variable $user_agent, probablemente obtenida de la cabecera HTTP User-Agent, y posiblemente (2) la variable $ip_resolved."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrentflux:torrentflux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA636773-F5FC-4051-BBA7-06F433A4E2D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22293",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447836/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20371",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/06/torrentflux-user-agent-xss-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29374",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447836/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/06/torrentflux-user-agent-xss-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) up_login, (2) up_pass, or (3) up_num_tasks parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Google Gadget login.php (gadget/login.php) en Rob Hensley ackerTodo 4.2 y anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) up_login, (2) up_pass, o (3) up_num_tasks."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_hensley:ackertodo:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA24A81-0FE6-4725-8144-152B8B621FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rob_hensley:ackertodo:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B63BCB4-A013-4847-BC24-47A1CE5CB4AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?r1=1.3&r2=1.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?view=log",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22254",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29552",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447846/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20372",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29375",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?r1=1.3&r2=1.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?view=log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447846/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-2387",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Excel 2000, 2002, 2003, 2004 para Mac, v.X para Mac, Excel Viewer 2003, y Microsoft Works Suite 2004 hasta la 2006  permite a atacantes con la complicidad del usuario ejecutar código de su elección mediante un registro DATETIME artesanal en un fichero XLS, una vulnerabilidad diferente que CVE-2006-3867 y CVE-2006-3875."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "716DDA05-D094-4837-852C-0511CDDD5ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B3099E-DFA0-4C7E-B016-370028BF8387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:macintosh:*:*:*:*:*",
            "matchCriteriaId" : "1B397137-45EC-4856-9F91-0C682BF6990E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:macos:*:*:*:*:*",
            "matchCriteriaId" : "1C8FF0C2-39E8-4F73-958B-2BB195C5B559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:sr1:mac_os:*:*:*:*:*",
            "matchCriteriaId" : "68257FB3-3280-4299-A96B-613F60D797C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310DF9B3-3494-4BD4-8A9D-82211EA6C518"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017031",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/706668",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448147/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20344",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3978",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-033.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A570",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/706668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448147/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3434",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Office 2000, XP, 2003, 2004 para Mac, y v.X para Mac permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante una cadena artesanal que dispara una corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "716DDA05-D094-4837-852C-0511CDDD5ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:student_teacher:*:*:*",
            "matchCriteriaId" : "ADD36A6D-10D8-4E06-899A-70FF822DAD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "A78DC369-DCAE-4D75-8C33-0FFF108640F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310DF9B3-3494-4BD4-8A9D-82211EA6C518"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22339",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017034",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/234900",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20382",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3981",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A389",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/234900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3647",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka \"Memmove Code Execution,\" a different vulnerability than CVE-2006-3651 and CVE-2006-4693."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Microsoft Word 2000, 2002, 2003, 2004 para Mac, y v.X para Mac permite a usuarios remotos con la complicidad del usuario ejecutar código de su elección mediante una cadena artesanal en un fichero Word, lo que desborda la longitud del valor de un entero de 16-bit, también conocido como \"Memmove Code Execution\", una vulnerabilidad diferente que CVE-2006-3651 y CVE-2006-4693."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "716DDA05-D094-4837-852C-0511CDDD5ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B3099E-DFA0-4C7E-B016-370028BF8387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "DCBB9A94-1CF8-485D-9694-90E1C51AADE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:sr1:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "27BB6CEC-C0F7-45BB-BE9A-60489E16CCFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:student_teacher:*:*:*",
            "matchCriteriaId" : "ADD36A6D-10D8-4E06-899A-70FF822DAD15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:mac_os_x:*:*",
            "matchCriteriaId" : "A78DC369-DCAE-4D75-8C33-0FFF108640F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310DF9B3-3494-4BD4-8A9D-82211EA6C518"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0211.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1017032",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/29440",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448417/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20341",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3979",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0211.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1017032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.osvdb.org/29440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448417/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3650",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868."
      }, {
        "lang" : "es",
        "value" : "Microsoft Office 2000, XP, 2003, 2004 para Mac, y v.X para Mac no analiza adecuadamente la longitud de un registro de un gráfico, lo cual permite a atacantes remotos con la intervención del usuario ejecutar código de su elección mediante un documento Word con un registro de gráfico mal formado que dispara la sobrescritura de los valores de punteros con valores del documento, una vulnerabilidad diferente que CVE-2006-3434, CVE-2006-3864, y CVE-2006-3868."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A82D13-513C-46FA-AF51-0582233E230A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*",
            "matchCriteriaId" : "757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*",
            "matchCriteriaId" : "59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*",
            "matchCriteriaId" : "716DDA05-D094-4837-852C-0511CDDD5ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C54DDAF-8D7F-4A7D-9186-6048D4C850B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "67388076-420D-4327-A436-329177EA6F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64B3099E-DFA0-4C7E-B016-370028BF8387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:*:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "43AE142C-E7AD-418E-BA9B-887285EE9620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2001:sr1:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "23E6544C-3695-45E6-A8AD-2F3A3B574915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:mac_os:*:*",
            "matchCriteriaId" : "C548E35A-C9DF-4784-824A-EEBB693CD388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310DF9B3-3494-4BD4-8A9D-82211EA6C518"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22339",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017034",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/534276",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29428",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448151/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20383",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3981",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-034.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A222",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/534276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448151/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3651",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Word 2000, 2002, y Office 2003 permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante un fichero de correo electrónico fusionado artesanal, una vulnerabilidad diferente que CVE-2006-3647 y CVE-2006-4693."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBFF713-0884-43BF-9AB8-777664FD64AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D90B1E1-23CD-4595-AD78-DA1758E9896D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017032",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/921300",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20358",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3979",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A51",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/921300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3864",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an \"array boundary condition\" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el mso.dll de Microsoft Office 2000, XP y 2003 y para el Microsoft PowerPoint 2000, XP y 2003, permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante un registro mal formado en ficheros (1) .DOC, (2) .PPT o (3) .XLS lo que dispara una corrupción de memoria relacionado con \"la condición de límite del array\" (posiblemente un desbordamiento del índice del array), una vulnerabilidad diferente que CVE-2006-3434, CVE-2006-3650, y CVE-2006-3868."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EED9D78-AE73-44BA-A1CE-603994E92E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1A57804E-CD79-4431-AA97-0F85C2CE20C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F0EF69E-52BA-4D7C-B470-CB4A92DA7EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22339",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secway.org/advisory/AD20061010.txt",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://support.microsoft.com/kb/922581",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/176556",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29429",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448268/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20384",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3981",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A632",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/22339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secway.org/advisory/AD20061010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.microsoft.com/kb/922581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/176556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3867",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Excel 2000, 2002, 2003, 2004 para Mac, v.X para Mac, y Excel Viewer 2003 permite a atacantes con la complicidad del usuario ejecutar código de su elección mediante un fichero Lotus 1-2-3 artesanal, una vulnerabilidad diferente que CVE-2006-2387 y CVE-2006-3875."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017031",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/821772",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20345",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3978",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A481",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/821772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3868",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Office XP y 2003 permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante una Etiqueta Inteligente mal formada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7EA4CC-E705-42DB-86B6-E229DA36B66D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FA62BE-D804-402D-9BDD-68BC70ECCD76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22339",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017034",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/807780",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29430",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20320",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3981",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A740",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/22339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/807780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3875",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Excel 2000, 2002, 2003, 2004 para Mac, v.X para Mac, y Excel Viewer 2003 permite a atacantes con la complicidad del usuario ejecutar código de su elección mediante un registro COLINFO artesanal en un fichero XLS, una vulnerabilidad diferente que CVE-2006-2387 y CVE-2006-3867."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "DA71E158-6D0A-4BEF-8471-FE5C864E7073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017031",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/252500",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20391",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3978",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A486",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/252500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3877",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified \"crafted file,\" a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en PowerPoint en Microsoft Office 2000, Office 2002, Office 2003, Office 2004 para Mac, y Office v.X para Mac permite a atacantes con la intervención del usuario ejecutar código de su elección mediante un \"fichero artesanal\" no especificado, una vulnerabilidad diferente que CVE-2006-3435, CVE-2006-4694, y CVE-2006-3876."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D7BA07-3BCA-41CF-B5D3-341E912650A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:access:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83DFFFF4-EA09-48C5-A600-A62C1A1A7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:access:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4AE5AF-C83E-4802-B75C-0058742A4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F55D42D5-7371-47C2-BF55-B7F51C19B61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082D3262-87E3-4245-AD9C-02BE0871FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB0020C-A804-4003-B411-1AC7A6E7193E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:frontpage:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C6629C-BF53-49A1-B32C-A828CA0A0500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:frontpage:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6548F837-A687-4EEF-B754-DAA834B34FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:frontpage:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C79FEE1-70A3-4A48-BE7B-0D18F0A5FA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:infopath:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345BC07E-1558-4C27-BF1A-C13547D175FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "4891122F-AD7F-45E6-98C6-833227916F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "07D3F3E4-93FB-481A-94D9-075E726697C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "9409A9BD-1E9B-49B8-884F-8FE569D8AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onenote:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36BA88A3-A31F-4F90-8913-67D5BC00E72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52F17AB-2C87-4C1A-91B5-267ABBCF5844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3189982-F780-4AC2-9663-E6D4DF9DD319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E392539-ABF6-4B5C-AEC3-C54B51E0DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711D9CC0-31B8-4511-A9F3-CA328A02ED84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "794FCFBF-2D55-4ECE-825E-180616DB35FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2000:sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "6F0EF69E-52BA-4D7C-B470-CB4A92DA7EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B14AE8E-1BFF-4458-87CC-357957F18F8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:project:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EFAEFE-2BDE-4111-91F5-E9F75ADFA920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:publisher:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95648599-D3B3-4043-821C-D385FB7A77CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99ED878A-CFC5-4FD5-A403-EB16CC4F8BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617E8BE3-8AD0-42FC-BDEE-6B1F120AE512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511E22C6-DB04-44A0-906D-F432DD42CA5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEBFF713-0884-43BF-9AB8-777664FD64AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D90B1E1-23CD-4595-AD78-DA1758E9896D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379C2A4A-78EF-473D-954B-F5DD76C3D6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1889A686-9565-4958-99BB-2EC24ABDF272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017030",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/205948",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29448",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20325",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-044A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3977",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A220",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A568",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/205948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-044A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in a Verity third party library, as used on Adobe ColdFusion MX 7 through MX 7.0.2 and possibly other products, allows local users to execute arbitrary code via unknown attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en una librería Verity de terceros, como la usada en Adobe ColdFusion MX 7 hasta MX 7.0.2 y posiblemente otros productos, permite a usuarios locales ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "DB570811-F637-4E86-8A0E-73F2F9B29126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B015715F-9672-480E-B0AA-968D8C9070D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4003",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4685",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains."
      }, {
        "lang" : "es",
        "value" : "El control ActiveX XMLHTTP en Microsoft XML Parser 2.6 y XML Core Services 3.0 hasta 6.0 no maneja adecuadamente redirecciones HTTP del lado del servidor, lo cual permite a atacantes remotos con la complicidad del usuario acceder a contenido desde otros dominios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73052210-0B42-46AA-9F28-AAE3E9B6DE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9B9BE3-6F83-469E-834F-3E00CFECD8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4170FCB7-274C-4318-B7A1-8F18DE604A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_parser:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFB71BA-3DF5-4CD4-9C64-33E51840E143"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22333",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017033",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/547212",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29425",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20339",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3980",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A221",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/22333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/547212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4686",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el procesamiento de las Transformaciones de Lenguaje de Hojas de Estilo Extensibles (XSLT) en Microsoft XML Parser 2.6 y XML Core Services 3.0 hasta 6.0 permite a atacantes remotos ejecutar código de su elección mediante una página Web artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73052210-0B42-46AA-9F28-AAE3E9B6DE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9B9BE3-6F83-469E-834F-3E00CFECD8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4170FCB7-274C-4318-B7A1-8F18DE604A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_parser:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFB71BA-3DF5-4CD4-9C64-33E51840E143"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22333",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017033",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/562788",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29426",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20338",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3980",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A285",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/22333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/562788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4692",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a \"/\" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka \"Object Packager Dialogue Spoofing Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de argumento en el Windows Object Packager de Microsoft Windows XP SP1 y SP2 y Server 2003 SP1 y anteriores permite a permite a usuarios autenticados remotamente ejecutar comandos de su elección mediante un archivo manipulado con un carácter \"/\" (barra o slash) en el nombre de fichero de la propiedad de línea de comandos, seguido por una extensión de archivo válida, lo cual provoca que el comando anterior a la barra sea ejecutado, también conocida como \"Vulnerabilidad de Suplantación de Diálogo en el Empaquetador de Objetos\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EAA5F2-20F2-4BE1-A41E-5FAFE69015C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "43D64F8D-975A-4A5B-BEDF-D27D65C96A29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2572F7E5-75A3-4C11-866B-A4E9ADBD8D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/20717",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-54/advisory/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017037",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/703936",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29424",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448273/100/0/threaded",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448696/100/0/threaded",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20318",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3984",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-065",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A496",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/20717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/secunia_research/2006-54/advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/703936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448273/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448696/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4693",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Microsoft Word 2004 para Mac y v.X para Mac permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante una cadena artesanal en un fichero Word, un asunto diferente que CVE-2006-3647 y CVE-2006-3651."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "1A57804E-CD79-4431-AA97-0F85C2CE20C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2004:*:mac:*:*:*:*:*",
            "matchCriteriaId" : "A90B840F-D364-4AD1-B0BE-41EC1E5B8944"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017032",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.osvdb.org/29442",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20387",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3979",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4696",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka \"SMB Rename Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el servicio Server en Microsoft Windows 2000 SP4, Server 2003 SP1 y anteriores, y XP SP2 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un paquete artesanal, también conocido como \"Vulnerabilidad de Renombramiento SMB\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "matchCriteriaId" : "330B6798-5380-44AD-9B52-DF5955FA832C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644E2E89-F3E3-4383-B460-424D724EE62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017035",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/820628",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20373",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3982",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29373",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://securitytracker.com/id?1017035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/820628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Contribute Publishing Server leaks the administrator password in logs that are created during product installation, which allows local users to gain privileges to the server."
      }, {
        "lang" : "es",
        "value" : "Adobe Contribute Publishing Server deja la contraseña de administrador en logs creados durante el proceso de instalación, lo cual permite a usuarios locales obtener privilegios en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:contribute:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED03BEF6-C378-425D-84B6-36DF8A82E39E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22329",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4001",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Adobe Breeze 5 Licensed Server and Breeze 5.1 Licensed Server allows attackers to read arbitrary files via unknown vectors related to \"URL parsing.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Adobe Breeze 5 Licensed Server y Breeze 5.1 Licensed Server permite a atacantes leer ficheros de su elección mediante vectores no especificados relacionados con \"análisis sintáctico de URL\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:breeze_licensed_server:5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085BC9E4-68B7-42EE-86B7-C69F9A7C5DCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:breeze_licensed_server:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B568AA-87B9-4EE7-81DD-A0A35949C902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22327",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-16.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29444",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3887",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-10-10T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in AOL You've Got Pictures (YGP) Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el control ActiveX AOL You've Got Pictures (YGP) Screensaver permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:ygp_screensaver_activex_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97FD2EB1-1E70-405B-A28A-D4E325F19F29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22304",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017024",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/154641",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20425",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3967",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29411",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/22304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/154641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3888",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2006-10-10T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el control ActiveX de AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), como el utilizado en la Edición de Seguridad America Online 9.0, permite a atacantes remotos ejecutar código de su elección mediante el paso de un argumento largo al método SetAlbumName."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:ygp_pic_downloader_activex_control:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6B7286-87C3-4AB6-AAF8-682805120784"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://secunia.com/advisories/22304",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://securitytracker.com/id?1017024",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/661524",
        "source" : "cret@cert.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20425",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20472",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3967",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29410",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29494",
        "source" : "cret@cert.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/661524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-10T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which responses take longer for valid usernames than invalid ones, as demonstrated by sshtime.  NOTE: as of 20061014, it appears that this issue is dependent on the use of manually-set passwords that causes delays when processing /etc/shadow due to an increased number of rounds."
      }, {
        "lang" : "es",
        "value" : "OpenSSH portable 4.1 en SUSE Linux, y posiblemente en otras plataformas y versiones, y posiblemente bajo configuraciones limitadas, permite a atacantes remotos determinar nombres de usuario válidos mediante discrepancias de tiempo en las cuales las respuestas tardan más  para nombres de usuario válidos que para los inválidos, como ha sido demostrado por sshtime. NOTA: a fecha de 14/10/2006, parece que este problema depende del uso de contraseñas configuradas manualmente que provoca retrasos procesando /etc/shadow debido a un incremento en el número de rondas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF67D77-02AC-4807-984D-C5AE9799F051"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:novell:suse_linux:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4A9CAF-EC05-4822-80C4-86AB74237CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/25979",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/32721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448025/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448108/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448156/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448702/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20418",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sybsecurity.com/hack-proventia-1.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2545",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/32721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448025/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448108/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448156/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448702/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sybsecurity.com/hack-proventia-1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/2545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat has been unable to reproduce this flaw and believes that the reporter was experiencing behavior specific to his environment.  We will not be releasing update to address this issue.",
        "lastModified" : "2006-10-11T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-11T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en forum.php en FreeForum 0.9.7 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freeforum:freeforum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.7",
            "matchCriteriaId" : "BAEDA855-B1EF-40CF-9603-A91F8093BAE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22320",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1710",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447931/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20388",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447931/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-11T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service (hang or reboot) via a large amount of ASCII data sent to port (1) 5060/UDP, (2) 5062/UDP, (3) 5064/UDP, (4) 5066/UDP, (5) 9876/UDP, or (6) 26789/UDP."
      }, {
        "lang" : "es",
        "value" : "Grandstream GXP-2000 VoIP Desktop Phone, versión del firmware 1.1.0.5, permite a atacantes remotos provocar una denegación de servicio (cuelgue o reinicio) mediante una gran cantidad de información ASCII enviada al puerto (1) 5060/UDP, (2) 5062/UDP, (3) 5064/UDP, (4) 5066/UDP, (5) 9876/UDP, o (6) 26789/UDP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:grandstream:gxp-2000:1.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79ABCCF-A8B9-464D-818F-75CF3B879745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049876.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22265",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.grandstream.com/BETATEST/GXP2000_BT200/Release_Note_GXP2000-BT200_1.1.1.14.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049876.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.grandstream.com/BETATEST/GXP2000_BT200/Release_Note_GXP2000-BT200_1.1.1.14.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-11T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code via a URL in the isearch_path parameter in (1) index.php, (2) viewcache.php, (3) sitemap.php, (4) isearch.inc.php, (5) google_sitemap.php, (6) stats.php, or (7) auto_spider_img.php.  NOTE: this issue has been disputed by a third party who shows that $isearch_path is set to a constant value.  CVE analysis as of 20061010 is inconclusive, although the original researcher is known to make mistakes"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Múltiples vulnerabilidades de inclusión remota de archivo en PHP en iSearch 2.16 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro isearch_path en (1) index.php, (2) viewcache.php, (3) sitemap.php, (4) isearch.inc.php, (5) google_sitemap.php, (6) stats.php, o (7) auto_spider_img.php. NOTA: este asunto ha sido impugnado por una tercera parte que muestra que $isearch_path es establecido a un valor constante. El análisis del CVE del 10/10/2006 no es concluyente, aunque el investigador original es conocido por cometer errores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isearch:isearch:2.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE26E09C-DC07-460F-8F03-6D336DCC52E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/448006/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448099/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448225/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20401",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29402",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448006/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448099/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448225/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-11T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sent to the HTTP daemon and (2) unspecified manipulations as demonstrated by the Nessus http_fingerprinting_hmap.nasl script."
      }, {
        "lang" : "es",
        "value" : "Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware versión 1.4.1.0040, permite a atacantes remotos provocar una denegación de servicio (reinicio) mediante (1) una URL larga enviada al demonio HTTP y (2) manipulaciones no especificadas como ha sido demostrado por la secuencia de comandos http_fingerprinting_hmap.nasl de Nessus."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:polycom:soundpoint_ip_301:1.4.1.0040:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED3CA7A5-CCEE-4670-AA2F-A76D0F35289B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0090.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22266",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29350",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-11T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPWS_SOURCE_DIR parameter in (1) init.php, (2) users.php, (3) Cookie.php, (4) forms.php, (5) Groups.php, (6) ModSetting.php, (7) Calendar.php, (8) DateTime.php, (9) core.php, (10) ImgLibrary.php, (11) Manager.php, and (12) Template.php, and (13) EZform.php.  NOTE: CVE disputes this report, since \"PHPWS_SOURCE_DIR\" is defined as a constant, not accessed as a variable"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADO ** Múltiples vulnerabilidades de inclusión remota de archivo en PHP en phpWebSite 0.10.2 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro PHPWS_SOURCE_DIR en (1) init.php, (2) users.php, (3) Cookie.php, (4) forms.php, (5) Groups.php, (6) ModSetting.php, (7) Calendar.php, (8) DateTime.php, (9) core.php, (10) ImgLibrary.php, (11) Manager.php, (12) Template.php, y (13) EZform.php. NOTA: CVE impugna este informe, ya que \"PHPWS_SOURCE_DIR\" está definido como una constante, no accesible como una variable."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpwebsite:phpwebsite:0.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F5A8763-F36A-4FF6-8BD2-8CC2B4250BA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001079.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448098/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448307/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20412",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001079.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448098/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448307/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-11T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_kb.php in Dimension of phpBB 0.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/functions_kb.php en Dimension de phpBB 0.2.6 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path. NOTA: la procedencia de esta información es desconocida; los detalles están obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dimension_of_phpbb:dimension_of_phpbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.6",
            "matchCriteriaId" : "CAB4BE1C-7338-4F15-ACAF-4B085111CC30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/3923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-11T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL commands via the search_user parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.php en 4images 1.7.x permite a usuarios remotos autenticados ejecutar comandos SQL de su elección mediante el parámetro search_user."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9029C35C-D961-419A-A79F-9EFACAD2560A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729F3EA5-9289-435E-92BD-1C12E839988A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22349",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017074",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://w4ck1ng.com/board/showthread.php?t=1037",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448022/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20394",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3974",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29389",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://w4ck1ng.com/board/showthread.php?t=1037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448022/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call."
      }, {
        "lang" : "es",
        "value" : "Error de signo de entero en FreeBSD 6.0-RELEASE permite a usuarios locales propiciar una denegación de servicio (corrupción de memoria y  pánico kernel) mediante una órden PT_LWPINFO ptrace con un valor de dato grande y negativo que concuerda con una validación de máximo valor con signo, pero que es usado en la devolución sin signo de una función.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22367",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20440",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29476",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2023-11-07T01:59:23.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-3888.  Reason: This candidate is a reservation duplicate of CVE-2006-3888.  Notes: All CVE users should reference CVE-2006-3888 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Las API 4.6.1 y 4.6.2 de Netscape Portable Runtime (NSPR), usadas en Sun Solaris 10, permiten variables de entorno definidas por el usuario para especificar ficheros de traza incluso cuando se ejecutan desde programas Setuid, que permiten a los usuarios locales crear o sobre-escribir ficheros de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:portable_runtime_api:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB613FE8-2543-4182-A191-CE6F3238348B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netscape:portable_runtime_api:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F312890-81F2-44DE-83D9-554532019872"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=418",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22348",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102658-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448691/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20471",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4016",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45433/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102658-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448691/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/45433/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "This issue also affects other OS that use NSPR.  However, Red Hat does not ship any application linked setuid or setgid against NSPR and therefore is not vulnerable to this issue.",
        "lastModified" : "2007-01-11T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el Blue Smiley Organizer en versiones anteriores a la 4.46, permite a los atacantes remotos la ejecución de comandos SQL de manera arbitraria, mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.45",
            "matchCriteriaId" : "C1D3EFC6-9144-40C6-AA65-1FA2D117AD81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D328A7-EE91-417B-9B2A-2C8CC964FBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8312FB-C5A4-443A-B1BE-0D23F45D5C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CF4DED-5AD0-43A3-8317-7E276ED7B8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C375346-D2AA-4D29-B260-BE992856C788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1320F6-F451-478F-A04F-275677F9CF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3BC9A9-6FC4-4B76-A0BC-7CC3B62DCC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAEEA1F-AC05-4E3A-91F5-5F359B99A9AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1420E52-516B-4D7D-8E55-91D06920B24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8521DD6E-B498-4504-BC6B-B0B55BF2618B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95095AD7-3061-42AD-A442-44705D9A93F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B885C149-2C1A-4BA2-8A54-C01813D1E640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2473B0CB-526B-4C8A-AA04-3BB7973627B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22310",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bookmark-manager.com/CHANGES",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.bookmark-manager.com/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el módulo de envío de ficheros en el Blue Smiley Organizer para versiones anteriores a la 4.45 tiene un impacto desconocido y vectores de ataque."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.45",
            "matchCriteriaId" : "C1D3EFC6-9144-40C6-AA65-1FA2D117AD81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60D328A7-EE91-417B-9B2A-2C8CC964FBB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8312FB-C5A4-443A-B1BE-0D23F45D5C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CF4DED-5AD0-43A3-8317-7E276ED7B8B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C375346-D2AA-4D29-B260-BE992856C788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1320F6-F451-478F-A04F-275677F9CF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D3BC9A9-6FC4-4B76-A0BC-7CC3B62DCC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAEEA1F-AC05-4E3A-91F5-5F359B99A9AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1420E52-516B-4D7D-8E55-91D06920B24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8521DD6E-B498-4504-BC6B-B0B55BF2618B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95095AD7-3061-42AD-A442-44705D9A93F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B885C149-2C1A-4BA2-8A54-C01813D1E640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blue_smiley_organizer:blue_smiley_organizer:4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2473B0CB-526B-4C8A-AA04-3BB7973627B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.bookmark-manager.com/CHANGES",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/29542",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bookmark-manager.com/CHANGES",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.osvdb.org/29542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the query string (PHP_SELF) in kalender.php or (2) the captcha_session_code parameter in pre_details.php."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de XSS en eXpBlog 0.3.5 y versiones anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de (1) la cadena de consulta (PHP_SELF) in kalender.php o el parámetro (2) the captcha_session_code en pre_details.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expblog:expblog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.5",
            "matchCriteriaId" : "69B3A883-1068-4809-98D6-30BF7DC5F8E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=116042862409660&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.expblog.de/board/viewtopic.php?t=317",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448102/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20420",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3973",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116042862409660&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.expblog.de/board/viewtopic.php?t=317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448102/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\neXpBlog, eXpBlog, 0.3.5 Security Fix v.01"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the MY_ENV[BASE_ENGINE_LOC] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP engine/require.php en el Docmint 2.0 y versiones anteriores, cuando los registros globales están desactivados, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro MY_ENV[BASE_ENGINE_LOC]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docmint:docmint_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "8A8DAE14-FE4E-47D9-BE68-0C8995501B5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv51-K-159-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017026",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.docmint.net/index.php?id=54",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448013/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20409",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29390",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv51-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.docmint.net/index.php?id=54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448013/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) file.php; (2) find_user.php, (3) lib_user.php, (4) lib_form_user.php, and (5) user.php in sw/lib_user/; (6) find_session.php and (7) session.php in sw/lib_session/; (8) comment.php and (9) lib_comment.php in sw/lib_comment/; and other unspecified PHP scripts."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos en PHP en el OpenDock Easy Gallery 1.4 y versiones anteriores, cuando los registros globales están permitidos, permite a los atacantes remotos la ejecución de código PHP según su elección mediante una URL en el parámetro doc_directory en alguno de los siguientes archivos (1) file.php; (2) find_user.php, (3) lib_user.php, (4) lib_form_user.php, y (5) user.php en sw/lib_user/; (6) find_session.php y (7) session.php en sw/lib_session/; (8) comment.php y (9) lib_comment.php en sw/lib_comment/; y otros scripts de PHP sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendock:easy_gallery:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "BFBFE96B-417B-4E69-952B-B6A69970CECC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv52-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22337",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448027/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20411",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29417",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv52-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448027/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en Etomite Content Management System (CMS) versiones anteriores a 0.6.1.1, permite a atacantes remotos ejecutar órdenes SQL de su elección mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etomite:etomite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.1",
            "matchCriteriaId" : "D67E8001-0930-45E9-917A-D0EF76415E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:etomite:etomite:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C5AD0F-8476-42EB-B78C-A4E01DC96E73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22217",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.etomite.org/forums/index.php?showtopic=6095",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20449",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3975",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.etomite.org/forums/index.php?showtopic=6095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nEtomite, Etomite Content Management System, 0.6.1.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) down_stat.php, (2) file.php, (3) find_file.php, (4) lib_file.php, and (5) lib_form_file.php in sw/lib_up_file/; (6) find_comment.php, (7) comment.php, and (8) lib_comment.php in sw/lib_comment/; (9) sw/lib_find/find.php; and other unspecified PHP scripts."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos en PHP en el OpenDock Easy Doc 1.4 y versiones anteriores, cuando los registros globales están habilitados, permite a los atacantes remotos la ejecución de código PHP según su elección mediante una URL en el parámetro doc_directory en alguno de los siguientes archivos 1) down_stat.php, (2) file.php, (3) find_file.php, (4) lib_file.php, y (5) lib_form_file.php en sw/lib_up_file/; (6) find_comment.php, (7) comment.php, y (8) lib_comment.php en sw/lib_comment/; (9) sw/lib_find/find.php; y otros scripts de PHP sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendock:easy_doc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "57BCE6F3-CAEB-4CFF-9604-1D88E6051040"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv49-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22334",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017022",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448010/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20407",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29404",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv49-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448010/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) down_stat.php, (2) file.php, (3) find_file.php, (4) lib_read_file.php, and (5) lib_form_file.php in sw/lib_up_file; (6) find_comment.php, (7) comment.php, and (8) lib_comment.php in sw/lib_comment/; (9) sw/lib_find/find.php; and other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos en PHP en el OpenDock Easy Blog 1.4 y versiones anteriores, cuando los registros globales están habilitados, permite a los atacantes remotos la ejecución de código PHP según su elección mediante una URL en el parámetro doc_directory en alguno de los siguientes archivos (1) down_stat.php, (2) file.php, (3) find_file.php, (4) lib_read_file.php, y (5) lib_form_file.php en sw/lib_up_file; (6) find_comment.php, (7) comment.php, y (8) lib_comment.php en sw/lib_comment/; (9) sw/lib_find/find.php; y otros vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendock:easy_blog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "2716ABD5-2470-4E16-ACAA-90FC86A5D06C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv50-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22335",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448012/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20408",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29399",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2495",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv50-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and possibly other PHP scripts under admin/."
      }, {
        "lang" : "es",
        "value" : "Eazy Cart permite a los atacantes remotos evitar la autenticación y alcanzar el acceso de administración mediante una petición directa al admin/home/index.php, y la posibilidad de ejecutar otros scripts en PHP que cuelguen de admin/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eazy_cart:eazy_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BADDCB-6F2C-412D-AD1B-9319269DB013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448094/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29419",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448094/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including the price parameter.  NOTE: some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Eazy Cart permite a los atacantes remotos cambiar los precios y otros campos críticos mediante vectores sin especificar en easycart.php, incluyendo, probablemente el parámetro de precio. NOTA: algunos detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eazy_cart:eazy_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BADDCB-6F2C-412D-AD1B-9319269DB013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22286",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448094/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29420",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448094/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script or HTML via easycart.php, possibly related to the (1) des and (2) qty parameters in an add action, and via other unspecified vectors.  NOTE: some details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en las secuencias de comandos en sitios cruzados (XSS) en Eazy Cart permiten a los atacantes remotos la inyección de secuencias de comandos vía Web de su elección o código HTML a través del easycart.php posiblemente relacionado con los parámetros (1) des y (2) qty en la acción de añadir y mediante otros vectores sin especificar. NOTA: algunos detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eazy_cart:eazy_cart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BADDCB-6F2C-412D-AD1B-9319269DB013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448094/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448094/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a customer database via a direct request for admin/config/customer.dat.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Eazy Cart almacena información sensible bajo el directorio Web raíz con insuficiente control de acceso, lo que permite a los atacantes remotos descargarse la base de datos del cliente mediante una petición directa al admin/config/customer.dat. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eazy_cart:eazy_cart:2.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE52ACC3-D2A8-442C-88EF-D6E83C657855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22286",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP tagmin/delTagUser.php en TagIt! Tagboard 2.1.B Build 2 (tagit2b) permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro configpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tagit:tagboard:2.1.b_build_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3850F959-4809-4271-902A-10B8ABE6D667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017045",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001083.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448173/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29430",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001083.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448173/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6_public and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APP[path][lib] parameter, a different vector than CVE-2006-2864."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP lib/googlesearch/GoogleSearch.php en BlueShoes 4.6_public y anteriores. Permite a los atacantes, en modo remoto, ejecutar de manera arbitraria, código PHP mediante una URL en el parámetro APP[path][lib]diferente al vector CVE-2006-2864."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blueshoes:blueshoes_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6_public",
            "matchCriteriaId" : "977A76FA-051D-47DD-AA93-2D624ACE88CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1713",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blueshoes.org/en/news/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448182/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29429",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blueshoes.org/en/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448182/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "The following conditions must be met in order for this vulnerability to be exploited:\r\n1) BlueShoes is installed in the webroot (really not recommended, see installation manual \r\n2) register_globals is on (really really not recommended, off by default since php 4.2.0, read http://www.php.net/register_globals \r\n3) allow_url_fopen is on (on by default, often set to off by hosting providers) \r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4813",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-12T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked."
      }, {
        "lang" : "es",
        "value" : "La función __block_prepare_write en fs/buffer.c para Linux kernel 2.6.x anteriores a 2.6.13 no limpia correctamente los búferes durante ciertas condiciones de error, que permite a usuarios locales leer porciones de ficheros que han sido desvinculados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*",
            "matchCriteriaId" : "27B3F220-7FE0-4D47-918B-C9CBFAD23808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*",
            "matchCriteriaId" : "813C1C54-697D-4170-8202-E07FF578815A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*",
            "matchCriteriaId" : "51403992-077A-4F6F-8722-DAAD30489DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*",
            "matchCriteriaId" : "BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*",
            "matchCriteriaId" : "0B066E6A-B150-4D5F-8263-F955EB366806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*",
            "matchCriteriaId" : "6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*",
            "matchCriteriaId" : "2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*",
            "matchCriteriaId" : "72587FF5-B82D-42DE-A35B-0ECA76C37D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*",
            "matchCriteriaId" : "013D2D76-AFAD-4479-B814-8597D8F51B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*",
            "matchCriteriaId" : "86F9C61A-913C-42BA-BD16-BF82F75AA84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*",
            "matchCriteriaId" : "B6E51493-8AE7-4F18-85BD-D0444A297C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*",
            "matchCriteriaId" : "CD68B4B3-CCF4-4A64-8C67-F549CC905A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*",
            "matchCriteriaId" : "D9350C90-D7A3-4DFF-A574-D079A4DCC453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*",
            "matchCriteriaId" : "9A27FA94-0483-4DD7-A2C4-9FA246526243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*",
            "matchCriteriaId" : "E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/31376",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=152becd26e0563aefdbc4fd1fe491928efe92d1f",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/21522",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207463",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11701",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://osvdb.org/31376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=152becd26e0563aefdbc4fd1fe491928efe92d1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/21522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in the ConfigDir parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en Deep CMS 2.0a permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro ConfigDir. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deep_cms:deep_cms:2.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F93D9A-3056-4652-8FB7-B1BF6DED4849"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/core.lib.php en Webmedia Explorer 2.8.7 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL in el parámetro path_include."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmedia_explorer:webmedia_explorer:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E61476-027C-4330-A179-235A293A9A26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22318",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rahim.webd.pl/exploity/Exploits/96.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rahim.webd.pl/exploity/Exploits/96.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the application is incorrectly configured.  To resolve, activate mod_rewrite and ensure that your web server processes the \".htaccess\" file correctly.\r\n\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline (aka PHP-Online) 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the LangFile parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en strload.php en Dayana Networks phpOnline (también conocido como PHP-Online) 2.1 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro LangFile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dayana_networks:phponline:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1817935-7093-4A22-9423-7B6D6DC07C19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-10/0085.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29382",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/bugtraq/2006-10/0085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in registration_detailed.inc.php in Mark Van Bellen Detailed User Registration (com_registration_detailed), aka regdetailed, 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en registration_detailed.inc.php en Mark Van Bellen Registro Detallado de Usuario (com_registration_detailed), también conocido como regdetailed 4.1 y versiones anteriores, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mamboxchange:extended_registration:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "9FC4CEA5-ED71-4A7B-B68A-FA7EDB9716A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20072",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28982",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/28982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execute arbitrary PHP code via a URL in the languagefile parameter.  NOTE: another researcher has observed that languageFile is defined before use.  CVE analysis as of 20061012 concurs with the dispute"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADO ** Vulnerabilidad de inclusión remota de archivo en PHP en addnews.php en Greg Neustaetter gCards 1.13 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro languagefile. NOTA: Otro investigador ha observado que languageFile se define antes de ser usado. El análisis de CVE del 20061012 determinó la impugnación."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greg_neustaetter:gcards:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74ADA5F4-C0C8-4FF6-866C-27D69E3795B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=116059865515095&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20461",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=116059865515095&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota en claroline/inc/lib/import.lib.php en Claroline 1.8.0 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro includePath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "0D4BAF93-66FE-41B9-85DE-5C216E04FAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91188982-B73C-45A1-8FA1-66557D50A6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E91C51-AA00-452E-B009-CD8EC50F9E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C266BDCB-4533-4697-A13A-22B8DC4A33EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE56684-B98B-4642-93F3-8C6297246E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BD0DDD-51EC-40E6-8E6D-635E449478AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EA479E-E55B-45B2-9DD2-4E2D088AF51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF8764-0B6C-439B-9333-473F54B9921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E88D7C-9610-4052-BBB0-F5FDC596DBCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF4F90D-CBF7-4539-9AA3-2A667C888670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24F49508-B7BC-4971-B3A7-279DCE45E369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34591E8D-FF34-4E78-BA9B-C8C22C38E1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC9DF44-4883-422F-9FB8-57CDE7EA6C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FD502BE-8878-461D-AA04-AA450F652DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D5CC64-234C-4519-B902-381A023B83CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:claroline:claroline:1.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB99DB46-C0C6-4A46-A0B2-CC71C10C62A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22364",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448174/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20444",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29426",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448174/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0.9.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_cache_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en modules/forum/include/config.php en Ciamos Content Management System (CMS) 0.9.6b y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro module_cache_path.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciamos:ciamos_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.6b",
            "matchCriteriaId" : "65F84F47-6218-4F1D-94C1-EBA6C2D2866B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20403",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2489",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en la comprobación ortográfica de (1) Asbru Web Content Management versiones anteriores a 6.1.22, (2) Asbry Web Content Editor anterior a 6.0.22, y (3) Asbry Website Manager anterior a 6.0.22 permite a atacantes remotos ejecutar comandos de su elección mediante un parámetro no especificado que no se limpia antes de que se invoque a Aspell."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asbru_software:asbru_web_content_management:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.20",
            "matchCriteriaId" : "DC5E064E-BF03-43C4-BCE9-D297F2AD3FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asbru_software:asbru_web_content_management:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036B68FB-C72F-4796-80DC-742E1D15E4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asbru_software:asbru_web_content_management:6.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25652B15-502A-4F05-9032-A1D0624ADEA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asbru_software:asbru_web_content_management:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1FF9CE0-7FBC-47CE-8D84-CDB9F2C5C74A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asbru_software:asbru_web_content_management:6.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602B6F63-97FF-4288-8764-D47D19C3B79B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asbru_software:asbru_website_manager:6.0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E0A460-41A8-47C9-9823-995D9714716E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://editor.asbrusoft.com/page.php/id=727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22344",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22353",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22472",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wcm.asbrusoft.com/page.php/id=791",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4060",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4061",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://editor.asbrusoft.com/page.php/id=727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wcm.asbrusoft.com/page.php/id=791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary PHP code via a URL in the folder parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en param_editor.php en Compteur 2 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro folder."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compteur:compteur:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673A5A03-9B18-49EE-A665-39043688DC7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=116049484210942&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22373",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20432",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=116049484210942&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in compteur.php in Compteur 2 allows remote attackers to execute arbitrary PHP code via a URL in the cp parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en compteur.php en Compteur 2 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cp. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compteur:compteur:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673A5A03-9B18-49EE-A665-39043688DC7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22373",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cfg_include_dir parameter in (1) disp_form.php3, (2) disp_smileys.php3, (3) little_news.php3, and (4) index.php3 in include/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHPMyNews 1.4 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cfg_include_dir en (1) disp_form.php3, (2) disp_smileys.php3, (3) little_news.php3, y (4) index.php3 en include/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmynews:phpmynews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "4429EC5F-00C1-494A-8255-83299C0FCC3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448015/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20396",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448015/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary IMAP commands via a CRLF sequence in a mailbox name.  NOTE: the attack crosses privilege boundaries if the IMAP server configuration prevents a user from establishing a direct IMAP session."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de CRLF en lib/session.php en Hastymail 1.5 y versiones anteriores a 20061008 permite a usuarios remotos autenticados enviar órdenes IMAP mediante una secuencia CRLF en el nombre del buzón (mailbox). NOTA: el ataque cruza los límites de los permisos si la configuración del servidor IMAP evita que los usuarios establezcan sesiones directas IMAP.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "C057FFFB-5146-4155-BBFE-FD864EC6F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CF81CA-866C-4FEB-85F6-3D0CA7F45796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83082A4-8673-446E-BB6D-7F25CB5B6159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD204DC-5C9A-4057-9AFD-F1213F817979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A0A189-B782-4ABE-BCFD-492E076D249F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hastymail.sourceforge.net/security.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22308",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453417/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20424",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hastymail.sourceforge.net/security.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453417/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently contains PHP code."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de directorios en templates/header.php3 en phpMyAgenda 3.1 y versiones anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante .. (punto punto) en el parámetro language, como se demuestra por un nombre en el valor de parámetro que aparece en un fichero de trazas de un Servidor HTTP Apache que aparentemente contiene código PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyagenda:phpmyagenda:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1_beta_1",
            "matchCriteriaId" : "9EF90645-EB6A-4BC4-AB4A-4044861217C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22346",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20453",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4005",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29413",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-12T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML via the db parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos (XSS) en sitios cruzados en MysqlDumper 1.21 b6 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro db."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysqldumper:mysqldumper:1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC484216-5FED-4783-B6C7-08B9FB5A734B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22392",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448269/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448269/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/import-archive.php en Leicestershire communityPortals 1.0 build 20051018 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de un URL en el parámetro cp_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cuttlefish_multimedia_ltd.:leicestershire_communityportals:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.build_20051018",
            "matchCriteriaId" : "0B837211-CBC3-4BC1-B740-A2428C1801C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22381",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4010",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2516",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled and that support for \".htaccess\" files is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in naboard_pnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en naboard_pnr.php en n@board 3.1.9e y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro skin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:navyism:n_at_board:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.9e",
            "matchCriteriaId" : "71745BB4-0EBE-4A0A-8BF8-8B59FC5916D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22250",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitydot.net/txt/id/1645/type/xpl/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20462",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29431",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitydot.net/txt/id/1645/type/xpl/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to (1) report.php, (2) archive.php, (3) comments.php, (4) init.php, or (5) news.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en SH-News 3.1 y anteriores permite a un atacante remto ejecutar código PHP de su elección a través de una URL en el parámetro scriptpath en (1) report.php, (2) archive.php, (3) comments.php, (4) init.php, o (5) news.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sh-news:sh-news:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "1A6B5913-E03E-4FB9-8637-BAECB484A689"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471413/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4014",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29477",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471413/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en ftag.php en Minichat 6.0 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro mostrar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minichat:minichat:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F772FD1-258F-4F8D-B0EA-8BEF886A0806"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22321",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader (aka pnews) 2.6.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CFG[auth_phpbb_path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en auth/phpbb.inc.php en Shen Cheng-Da PHP News Reader (también conocido como pnews) 2.6.4 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro CFG[auth_phpbb_path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_news_reader:php_news_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.4",
            "matchCriteriaId" : "119ECB66-A0EC-4363-AB18-04F1C47F43EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_news_reader:php_news_reader:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95449F0A-0FC3-43C5-AA00-24828EBFCF2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22354",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20480",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4011",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29481",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in XeoPort 0.81, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the xp_body_text parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.php en XeoPort 0.81, y posiblemente anteriores, permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro xp_body_text."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xeoport:xeoport:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.81",
            "matchCriteriaId" : "CF2F5C0D-9B43-40B4-88F0-F604362B06D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=116062269104422&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448424/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29479",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116062269104422&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448424/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service (crash) via unknown attack vectors related to \"VPN issues\" for certain \"IKE and IPsec settings.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IKE.NLM en Novell BorderManager 3.8 permite a un atacante remoto provocar denegación de servicio (caida) a través de un ataque desconocido de vectores realciones con \"asunto VPN\" para ciertas \"configuraciones IKE y IPsec\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:bordermanager:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5424CCB7-0DF1-42FA-9882-D3BE6E58E64A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22355",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017025",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974551.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20428",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3998",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974551.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via (1) the User-Agent HTTP header, or the (2) gb_entry_text, (3) gb_location, (4) gb_fullname, or (5) gb_sex parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en sign.php en Xeobook 0.93 permite a un atacante remoto ejecutar comandos SQL de su elección a través de (1) la cabecera User-Agent HTTP, o los parámetros (2) (2) gb_entry_text, (3) gb_location, (4) gb_fullname, o (5) gb_sex."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xeobook:xeobook:0.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291882DD-0868-4CD2-AC35-21A2823A59B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=116062281632705&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448425/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20476",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29478",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116062281632705&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448425/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator username \"root\" and password \"password,\" which allows remote attackers to obtain administrative privileges, aka Bug ID CSCsb92893."
      }, {
        "lang" : "es",
        "value" : "Cisco 2700 Series Wireless Location Appliances anterior a 2.1.34.0 tienen por defecto el nombre de usuario administrador \"root\" y contraseña \"password,\" lo cual permite a un atacante remoto obtener privilegios administrativos, aka Bug ID CSCsb92893."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:2700_wireless_location_appliance:1.1.73.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8797167-1273-4698-9EEB-C62884294B2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080758bae.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/30913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29497",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080758bae.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/30913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the calpath parameter to (1) modules/Calendar/admin/update.php, (2) modules/Calendar/admin/scheme.php, or (3) modules/Calendar/calendar.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Vtiger CRM 4.2 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro calpath en (1) modules/Calendar/admin/update.php, (2) modules/Calendar/admin/scheme.php, o (3) modules/Calendar/calendar.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtiger:vtiger_crm:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8B3F151-0398-42C7-B194-FF528696D1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv54-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1722",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448092/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20435",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2508",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv54-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448092/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-13T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via \"WebUI command injection on TCP/IP hostname.\""
      }, {
        "lang" : "es",
        "value" : "Los componentes ESS/ Network Controller y MicroServer Web Server de Xerox WorkCentre y WorkCentre Pro 232, 238, 245, 255, 265 y 275 permiten a un atacante remoto evitar la validación y ejecutar código de su elección a través de \"comando de inyección WebUI sobre el TCP/IP del nomber del host\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E761E4-0B6C-4C2A-BFCA-4CFC5620E91C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "74245D08-446A-4988-BCFD-85509C4CE340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12790FD1-DECA-4074-9458-3F88823190EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "88E2F705-B185-4211-B0CC-1E295E5B4471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7FE90B-21E6-4628-AD70-37BB9644CBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "573640FF-609D-4441-B7DD-3477F239A00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8204B5C0-0B87-48BD-9678-5101B048C135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "3A2128EF-5847-4097-84BC-5CAC270F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE44F85-3F9A-45FC-A411-1D1B4C2E33D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "D8FD8F59-E229-4138-9B85-7E15A80CF5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92119B14-94C5-4D3D-811E-EB7336E39F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "2DC671C6-7444-4E3D-ACAB-8905A0DB40CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22252",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016981",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20334/info",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_005.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1016981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20334/info",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_005.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.  NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PHP Edition, so this issue is probably a duplicate of CVE-2006-4656."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin/includes/spaw/spaw_control.class.php en Download-Engine 1.4.2 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro spaw_root. NOTA: el análisis de CVE sugiere que este problema está realmente en un producto de un tercero, SPAW Editor PHP Edition, así que este problema es probablemente un duplicado de CVE-2006-4656."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alex:downloadengine:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A02593A-6A65-4B10-B9DB-B41B5F0948F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22383",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1723",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/docs/ChangeLog.txt?view=markup",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.19&r2=1.20",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.25&r2=1.26",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448450/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20500",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4025",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29493",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2521",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/docs/ChangeLog.txt?view=markup",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.19&r2=1.20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://spaw.cvs.sourceforge.net/spaw/spaw/spaw_control.class.php?r1=1.25&r2=1.26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448450/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in photo_comment.php in Exhibit Engine 1.5 RC 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en photo_comment.php en Exhibit Engine 1.5 RC 4 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro toroot."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exhibit_engine:exhibit_engine:1.5_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3352A13-7D89-46A8-84C9-233E8603BF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exhibit_engine:exhibit_engine:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7386A32-8144-4849-BD10-A26A7BE97779"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20447",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29424",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en PhpOutsourcing Noah's Classifieds 1.3 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro frommethod."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:noahs_classifieds:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "7BFDD5F6-900F-45CE-9AB0-59161C853476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1724",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448296/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zone14.free.fr/advisories/5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29448",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448296/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zone14.free.fr/advisories/5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en phplist anteriores a 2.10.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro unsubscribeemail."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.2",
            "matchCriteriaId" : "757EFD41-2C9F-4554-9F91-48D0038D2A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE10CFB-A604-4C6E-ACE6-FD441C47D296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784C97D4-740E-4C65-98ED-FA03EC3EFAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94101A7-419E-4ACF-AB75-F0B0DA6E7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F52B3C-7925-4970-AA84-732B34DD2FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140DBAC-6AF0-41D0-972C-4F97BA06F488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516EB08E-F724-4638-8174-1FB527CE8E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFF48D-67A7-40DA-9762-DB416E1442C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mantis.phplist.com/changelog_page.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22405",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tincan.co.uk/?lid=1821",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://websecurity.com.ua/267/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phplist.com/news",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448411/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20483",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4027",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://mantis.phplist.com/changelog_page.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://tincan.co.uk/?lid=1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://websecurity.com.ua/267/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phplist.com/news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448411/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nPHPList, Mailing List Manager, 2.10.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en el módulo mod_tcl 1.0 para Apache 2.x permite a atacantes locales o remotos (dependiendo del contexto) ejecutar código de su elección mediante especificadores de cadena de formato que no se manejan adecuadamente en una llamada a la función set_var en (1) tcl_cmds.c y (2) tcl_core.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154566FB-0D1A-4DC2-AFE6-49DE93850951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB477AFB-EA39-4892-B772-586CF6D2D235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4962BB-0E61-4788-B582-21F05CD33AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.28:beta:win32:*:*:*:*:*",
            "matchCriteriaId" : "BBD08D4C-3C73-4AAE-8343-BBE487CF6040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B35906CD-038E-4243-8A95-F0A3A43F06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.32:beta:win32:*:*:*:*:*",
            "matchCriteriaId" : "F88372A5-FDF3-4B75-BB4C-8D9C9E8AD850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.34:beta:win32:*:*:*:*:*",
            "matchCriteriaId" : "432DA9CE-EB82-406B-AD23-FD565E6C91BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B940BB85-03F5-46D7-8DC9-2E1E228D3D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82139FFA-2779-4732-AFA5-4E6E19775899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AB120B-2FEC-4EB3-9777-135D81E809AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7FF669-12E0-4A73-BBA7-250D109148C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F34D08-430E-4331-A27D-667149425176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248BDF2C-3E78-49D1-BD9C-60C09A441724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB0FDE3D-1509-4375-8703-0D174D70B22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE732B5-00C9-4443-97E0-1DF21475C26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79C41D3-6894-4F2D-B8F8-82AB4780A824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "449A5647-CEA6-4314-9DB8-D086F388E1C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A407B7-F432-48F0-916A-A49952F85CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5AC769-D07D-43C7-B252-A5A812E7D58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF4DBF6-DAF0-47E7-863B-C48DB7149A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2F19D71-0A58-4B03-B351-596EB67ECF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EBB3FF9-CF5A-4E7B-ACE3-A198343AD485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D721FFB5-D6D3-4F60-8B09-B3AD07EE6D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E8F32E-C2E5-44E3-A920-F09AF919D372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF37A82-49B6-45D4-B91D-FDA2D4463A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "030D1767-2DF7-48E3-B462-4B49CA751B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.0.58:*:win32:*:*:*:*:*",
            "matchCriteriaId" : "F4E01B68-95EC-4CC7-8929-B3F4EF382ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BC31A3-B9AC-4776-83C1-668636B74104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72E88F0-AB0F-4B6F-AE86-71B0DE84BD75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840FF871-79EC-472C-91BD-9E9AFC36B408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191E8654-5338-4051-A1D5-EE491D594F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26CC819-7315-456F-9F95-2A64FCE6AC26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3774827-AB0B-4A95-844B-9BC904A9FE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D07925-542B-4369-AA21-5587703E12E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACBC75F8-C1AF-45AE-91BA-5670EF2D0DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733D62FE-180A-4AE8-9DBF-DA1DC18C1932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.2:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "9708E73F-33D8-45DD-BC88-19A590F05103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:2.2.3:*:windows:*:*:*:*:*",
            "matchCriteriaId" : "D0F5026B-E97E-48EB-871D-A77E44AE2C38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22458",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-12.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/366020",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20527",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4033",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/366020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/29536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following Apache module update:\r\nmod_tcl 1.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous."
      }, {
        "lang" : "es",
        "value" : "PowerPoint en Microsoft Office 2003 no maneja adecuadamente un objeto contenedor cuyo valor de posición excede la longitud del registro, lo cual permite a usuarios autenticados remotamente provocar una denegación de servicio (referencia  NULL y caída de aplicación) mediante un archivo PowerPoint (.PPT) manipulado, como ha demostrado Nanika.ppt. Es una vulnerabilidad diferente de CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, y CVE-2006-4694. NOTA: el impacto de este problema fue originalmente clasificado como ejecución de código arbitrario, pero un análisis posterior ha demostrado que esta afirmación era errónea."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/10/12/poc-published-for-ms-office-2003-powerpoint.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/11/10/follow-up-information-on-weblog-posting-about-poc-published-for-ms-office-2003-powerpoint.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20061012_2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22394",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.informationweek.com/management/showArticle.jhtml?articleID=193302553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20495",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4031",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2523",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/10/12/poc-published-for-ms-office-2003-powerpoint.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/11/10/follow-up-information-on-weblog-posting-about-poc-published-for-ms-office-2003-powerpoint.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20061012_2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.informationweek.com/management/showArticle.jhtml?articleID=193302553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la función safe_open en el cliente de correo Mutt 1.5.12 y anteriores, cuando se crean archivos temporales en un sistema de ficheros NFS, permite a usuarios locales sobreescribir archivos de su elección debido a limitaciones del uso de la bandera O_EXCL en sistemas de ficheros NFS."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.12",
            "matchCriteriaId" : "BE31E06E-7259-4EC3-9F72-802988FE655C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:0.95.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D43FB4B-1E1A-4F07-9587-09E335565654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780FC5AD-A7D9-436B-BF73-FDCDDDA9E744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996BC5D6-427B-43D6-B4C3-4AD814C20445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A1DB8F-6BD5-4E1F-993A-FF5D0F807D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B975F74-4B61-416B-B6B5-A36EF8123C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C891640E-91CC-495D-A7FF-454DCBF7F120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4247B37-30C6-4F19-A709-9A1D073B7AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.12_ol:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D5465E-6782-4AC0-9ECD-AB01EB448991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF9A116-D09D-4ADE-AA32-CAF51CE1625A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB7D3BF-06F6-4A0A-9AE4-0EEF5D8E6AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8CB6D9-30F9-4C56-9CFD-F8E526E84526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C760A5-D243-45C9-AE60-01F2703DDC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C2017-6101-482D-9AEF-DB052411C5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0610C44-6CD3-4448-87AF-6CDFAA1909DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04186A67-E4A1-4A2A-B84F-585F9DD0E409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305135F0-E414-430B-AC1A-02A311E66899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A416609-0BE7-4528-85B0-17F53DFE0D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C86071C-E508-4EFB-A98E-62CA2BEBB50A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DB0D49-CD49-4EF6-9013-1B03E0D644D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0CD218-AA09-49B0-A87B-7FC04FF54500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15729D82-7BCF-4C50-85A0-7B56008226FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA1A4E0-9405-408C-B15B-D9FDB797081A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9C0F76-89D9-483A-8EF6-638C4B2FE1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=mutt-dev&m=115999486426292&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0386.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0061/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-373-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4176",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=mutt-dev&m=115999486426292&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0386.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0061/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-373-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Race Condition occurs when creating temporary files in an NFS filesystem.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=211085\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\n\nThe risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 which is in maintenance mode.",
        "lastModified" : "2007-09-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls."
      }, {
        "lang" : "es",
        "value" : "La función mutt_adv_mktemp en el cliente de correo Mutt 1.5.12 y anteriores no verifica adecuadamente que los archivos temporales hayan sido creados con permisos restringidos, lo que puede permitir a usuarios locales crear archivos con permisos débiles mediante una condición de carrera entre las llamadas a las funciones mktemp y safe_fopen."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.12",
            "matchCriteriaId" : "BE31E06E-7259-4EC3-9F72-802988FE655C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:0.95.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D43FB4B-1E1A-4F07-9587-09E335565654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780FC5AD-A7D9-436B-BF73-FDCDDDA9E744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996BC5D6-427B-43D6-B4C3-4AD814C20445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A1DB8F-6BD5-4E1F-993A-FF5D0F807D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B975F74-4B61-416B-B6B5-A36EF8123C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C891640E-91CC-495D-A7FF-454DCBF7F120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4247B37-30C6-4F19-A709-9A1D073B7AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.2.5.12_ol:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D5465E-6782-4AC0-9ECD-AB01EB448991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF9A116-D09D-4ADE-AA32-CAF51CE1625A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB7D3BF-06F6-4A0A-9AE4-0EEF5D8E6AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8CB6D9-30F9-4C56-9CFD-F8E526E84526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C760A5-D243-45C9-AE60-01F2703DDC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198C2017-6101-482D-9AEF-DB052411C5D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0610C44-6CD3-4448-87AF-6CDFAA1909DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04186A67-E4A1-4A2A-B84F-585F9DD0E409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305135F0-E414-430B-AC1A-02A311E66899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.3.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A416609-0BE7-4528-85B0-17F53DFE0D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C86071C-E508-4EFB-A98E-62CA2BEBB50A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DB0D49-CD49-4EF6-9013-1B03E0D644D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A0CD218-AA09-49B0-A87B-7FC04FF54500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15729D82-7BCF-4C50-85A0-7B56008226FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA1A4E0-9405-408C-B15B-D9FDB797081A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:1.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9C0F76-89D9-483A-8EF6-638C4B2FE1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=mutt-dev&m=115999486426292&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0061/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-373-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=mutt-dev&m=115999486426292&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0061/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-373-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Race Condition occurs between the mktemp and safe_fopen function calls.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=211085\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\n\nThe risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 which is in maintenance mode.",
        "lastModified" : "2007-09-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en ClamAV 0.88.1 y 0.88.4, y otras versiones anteriores a 0.88.5, permite a atacantes remotos provocar una denegación de servicio (caída del servicio de escaneo) y ejecutar código de su elección mediante un Ejecutable Portátil (Portable Executable, PE) creado artesanalmente, que provoca un desbordamiento de búfer basado en montón cuando se ha reservado menos memoria de la esperada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.88.4",
            "matchCriteriaId" : "8D7A91DF-84B4-4E45-8675-E107D8BCD070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4BB686-4159-41D9-9AE2-67AF2FCDE0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A9B47A-8FC3-4BD2-A55F-9150307619B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7068873F-E45D-4471-B55E-BF7B0E3AFEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695F0967-1529-42DB-8978-8B9192F7F615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EBA938-DC66-40EA-8C66-38296AB57B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3033A4A2-47E9-434F-BA0A-0F2476A67899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1EDFB4-B0C8-4832-BCA1-C35D28877581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A4541A-2560-482A-BAEA-275579B499B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9006F64F-D72B-49C4-9F51-8AD9273957B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5698AB2-94DE-480D-9E55-C05871562B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CBE9C9-A1DE-4C68-B84D-C735A9A700E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADBDEE-1421-42E5-8DE2-404087613B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0138546B-3704-45FB-8115-05C12F9935D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56722F-F61A-404B-B0B2-1C92C22D0436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00EBC44-B4AB-443F-A063-8C8CB64F5F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB68680-FA6D-4235-90DA-E3DF0E5BB666"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-13.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=422",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/180864",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_60_clamav.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-13.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/180864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_60_clamav.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nClam Anti-Virus, ClamAV, 0.88.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded \"../\" sequences (\"%252e%252e/\")."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en IronWebMail anterior a 6.1.1 HotFix-17 permite a atacantes remotos leer archivos de su elección mediante una petición GET al identificador IM_FILE con secuencias \"../\" doblemente codificadas como url (\"%252e%252e/\")."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciphertrust:ironmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "0B7E39CC-F610-4397-9C88-2C9B08DFA99D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciphertrust:ironmail:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645369C8-159C-459E-9067-2D46EE7A3E5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciphertrust:ironmail:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD16815-8709-4F64-966F-BA8FBDAC377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciphertrust:ironmail:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CCD2698-A7A2-44BC-A352-B7CA89AD3032"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22406",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017069",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448779/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20436",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448779/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.symantec.com/enterprise/research/SYMSA-2006-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://supportcenter.ciphertrust.com/vulnerability/IWM501-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nCipherTrust, IronMail, 6.1.1 HotFix-17"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-16T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to \"read an invalid memory location.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en ClamAV anterior a 0.88.5 permite a atacantes remotos provocar una denegación de servicio (caída del servicio de escaneo) mediante un archivo de Ayuda HTML comprimida (CHM) creado artesanalmente que hace que ClamAV lea una posición de memoria inválida."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.88.4",
            "matchCriteriaId" : "8D7A91DF-84B4-4E45-8675-E107D8BCD070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4BB686-4159-41D9-9AE2-67AF2FCDE0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A9B47A-8FC3-4BD2-A55F-9150307619B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7068873F-E45D-4471-B55E-BF7B0E3AFEEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695F0967-1529-42DB-8978-8B9192F7F615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB72ED94-7832-43CF-81CF-27F88CAC6E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802BFF6B-5D9F-49AE-B96A-86A85E0F1034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7B2943-BC22-4735-8AA5-AADBEA685FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6257524-7FC5-40CA-9BDA-82B8565C5BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EBA938-DC66-40EA-8C66-38296AB57B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "395AACCC-C20A-4BC1-BF62-D40FF71B7360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F52C121-B8B8-43A8-AFAB-E85474021919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659B4C39-0F0F-40C5-9B7E-0D00330611F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "508C140C-2F87-4270-85B0-00EA6678A344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3033A4A2-47E9-434F-BA0A-0F2476A67899"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1EDFB4-B0C8-4832-BCA1-C35D28877581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF47B2A-4520-4872-987D-2EF88344ADB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A4541A-2560-482A-BAEA-275579B499B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9006F64F-D72B-49C4-9F51-8AD9273957B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5698AB2-94DE-480D-9E55-C05871562B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC31E071-6BB8-45FE-AA09-E7E459B549D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.81_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CBE9C9-A1DE-4C68-B84D-C735A9A700E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D884A1-305C-416A-9851-3A7D875FDC47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58A6CBC-ED1C-430D-8F43-88694971A850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A535-A376-4BFF-BB1B-31E83370FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1ADBDEE-1421-42E5-8DE2-404087613B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF94B1E-E8D4-4952-9081-1254F335445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8657268E-4C78-4565-9966-7329095A7905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D20F0D5-2291-4F24-94DB-180CDF926B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E2884A-615F-4063-8FB7-EC157C3EC07F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC41B7-272F-44BB-BD48-6C9231402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.86_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0138546B-3704-45FB-8115-05C12F9935D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F56722F-F61A-404B-B0B2-1C92C22D0436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00EBC44-B4AB-443F-A063-8C8CB64F5F94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB68680-FA6D-4235-90DA-E3DF0E5BB666"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kolab.org/security/kolab-vendor-notice-13.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=423",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22421",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22488",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22498",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_60_clamav.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20537",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4034",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29608",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kolab.org/security/kolab-vendor-notice-13.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200610-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_60_clamav.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nClam Anti-Virus, ClamAV, 0.88.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Gcontact 0.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en Gcontact 0.6.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gcontact:gcontact:0.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3A2067-5AA5-409A-9F38-EDAE858797B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0005",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448692/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20530",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448692/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in HP Version Control Agent before 2.1.5 allows remote authenticated users to obtain \"unauthorized access\" to a remote Repository Manager account and potentially gain privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en HP Version Control Agent anterior a 2.1.5 permite a usuarios remotos autenticados obtener \"acceso no autorizado\" a una cuenta del Manejador de Repositorio remoto y potencialmente obtener privilegios mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:version_control_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.4",
            "matchCriteriaId" : "DED70F62-2872-4FD2-906A-553A4AFD3998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22399",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017042",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448429/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20465",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29500",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448429/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nHP, Version Control Agent, 2.1.5"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5301",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/antispam.php en el módulo SpamBlockerMODv 1.0.2 y anteriores para phpBB permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:spamblockermod:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "79317018-BE00-4857-B9FB-33543640BCC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:spamblockermod:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6478478C-6C34-4F69-8E24-57E7E6EAF9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:spamblockermod:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "833ABD0A-39C7-4A47-969F-BE0CEC3B8275"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=116076619122083&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22356",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20501",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4028",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2533",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=116076619122083&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang_prefix parameter to (a) conn.php, (b) sesscheck.php, (c) wap/conn.php, or (d) wap/sesscheck.php, or the (2) lang parameter to (e) index.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Redaction System 1.0000 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el (1) parámetro lang_prefix a (a) conn.php, (b) sesscheck.php, (c) wap/conn.php, o (d) wap/sesscheck.php, o el (2) parámetro lang a (d) index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redaction_system:redaction_system:1.0000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732ED87C-3E28-4028-90E4-FF67B187E076"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://redactionsystem.sourceforge.net/index.php?m=news&id=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://redactionsystem.sourceforge.net/index.php?m=news&id=5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22347",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20499",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4024",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://redactionsystem.sourceforge.net/index.php?m=news&id=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://redactionsystem.sourceforge.net/index.php?m=news&id=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading (1) base-64 encoded data in SERVERS\\Web\\Tomcat\\usercenter\\WEB-INF\\login.conf and (2) plaintext data in SERVERS\\Shared\\signers.cfg.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Secure Computing SafeWord RemoteAccess 2.1 permite a usuarios locales obtener la contraseña, claves de codificación de la base de datos, y claves de firma del portal web UserCenter leyendo (1) información codificada en base-64 en SERVERS\\Web\\Tomcat\\usercenter\\WEB-INF\\login.conf y (2) información en texto plano en SERVERS\\Shared\\signers.cfg. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:securecomputing:safeword_remoteaccess:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD64F73F-3947-46C8-A172-7C384F9DD199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22081",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29515",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en inc/settings.php en IncCMS Core 1.0.0 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro inc_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inccms_technology:inccms_core:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "B7B9E1A9-07BA-44A5-A176-3834D960464D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22420",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rahim.webd.pl/exploity/Exploits/100.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20531",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2557",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.rahim.webd.pl/exploity/Exploits/100.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Download the latest version."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en lat2cyr.php en módulo lat2cyr 1.0.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:lat2cyr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "E3DFAE55-8523-4B1C-A5AC-393CA524DF4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22432",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1729",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448660/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20513",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4050",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29572",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448660/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en el módulo Journals System 1.0.2 (RC2) y anteriores para phpBB permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path en (1) includes/journals_delete.php, (2) includes/journals_post.php, o (3) includes/journals_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:journals_system_module:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2_rc2",
            "matchCriteriaId" : "9BB72618-B8D7-42EF-84D8-FF90FE9814BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:journals_system_module:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7C8B78-91BB-4E07-8C91-0C20A5BECA90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22387",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1731",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448443/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20484",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448443/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in (1) add.php, (2) admin.php, (3) look.php, or (4) re.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en AFGB GUESTBOOK 2.2 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro Htmls en (1) add.php, (2) admin.php, (3) look.php, o (4) re.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afgb:afgb_guestbook:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53445B0F-E726-4DD8-A005-664BD67A8B41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22363",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29725",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29726",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29727",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29728",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20503",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2529",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in (1) include/theme.inc.php or (2) include/footer.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Open Conference Systems (OCS) anterior a 1.1.6 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fullpath en (1) include/theme.inc.php o (2) include/footer.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_conference_systems:open_conference_systems:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.5",
            "matchCriteriaId" : "B0F85692-BDCE-4797-87E2-09C307ADFB63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://isc.sans.org/diary.php?storyid=1791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pkp.sfu.ca/ocs_download",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pkp.sfu.ca:8043/bugzilla/attachment.cgi?id=90",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://pkp.sfu.ca:8043/bugzilla/show_bug.cgi?id=2436",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22412",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017071",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448548/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20567",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://isc.sans.org/diary.php?storyid=1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pkp.sfu.ca/ocs_download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pkp.sfu.ca:8043/bugzilla/attachment.cgi?id=90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://pkp.sfu.ca:8043/bugzilla/show_bug.cgi?id=2436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448548/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en language/lang_french/lang_prillian_faq.php en el módulo Prillian French 0.8.0 y anteriores para phpBB permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:prillian_french:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.0",
            "matchCriteriaId" : "4D28A635-5D45-41F7-8559-26092E132153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1732",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448663/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20520",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29565",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2550",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448663/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en common/visiteurs/include/menus.inc.php de J-Pierre DEZELUS Les Visiteurs 2.0.1, tal y como se usa en phpMyConferences (phpMyConference) 8.0.2 y posiblemente otros productos, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro lvc_include_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:j-pierre_dezelus:les_visiteurs:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82F4D96-87BF-44C7-824D-27DAF2744704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyconferences:phpmyconferences:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.2",
            "matchCriteriaId" : "C9245212-7B2A-4259-8FCF-B7FBD88D51CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22411",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1733",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448547/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4045",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29514",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2535",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448547/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en includes/archive/archive_topic.php en Buzlas 2006-1 Full permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buzlas:buzlas:2006-1_full:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579BA00-FCE3-497B-86E0-7C68280D6A22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448577/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20511",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448577/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en shoutbox.php en el módulo Ajax Shoutbox 0.0.5 y anteriores para phpBB permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:ajax_shoutbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.5",
            "matchCriteriaId" : "753522C7-97E6-403D-B6BF-608F0FD7ECBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29510",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2532",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4342",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which prevents a spinlock from being unlocked."
      }, {
        "lang" : "es",
        "value" : "En núcleo en Red Hat Enterprise Linux 3, al ejecutarse en sistemas SMP, permite a usuarios locales provocar una denegación de servicio (punto muerto) ejecutando la función shmat en un shm al mismo tiempo que shmctl está borrando ese shm (IPC_RMID), lo cual previene a un hilo bloqueado en un bucle (spinlock)  de ser desbloqueado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/245984",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205618",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9649",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/245984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0710.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter.  NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct SMTP session.  NOTE: this is a different type of issue than CVE-2006-5262."
      }, {
        "lang" : "es",
        "value" : "Hastymail 1.5 y anteriores al 08/10/2006 permite a usuarios autentificados remotamente enviar comandos SMTP de su elección poniéndolos después de una secuencia CRLF.CRLF en el parámetro smtp_message. NOTA: esto cruza la frontera de privilegios si la configuración del servidor SMTP evita que el usuario establezca una sesión SMTP directa. NOTE: este es un tipo de problema distinto a CVE-2006-5262."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "C057FFFB-5146-4155-BBFE-FD864EC6F3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6CF81CA-866C-4FEB-85F6-3D0CA7F45796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83082A4-8673-446E-BB6D-7F25CB5B6159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD204DC-5C9A-4057-9AFD-F1213F817979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hastymail:hastymail:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A0A189-B782-4ABE-BCFD-492E076D249F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hastymail.sourceforge.net/security.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22308",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453417/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20424",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3956",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hastymail.sourceforge.net/security.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453417/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nHastymail, Hastymail, 1.5 (patch 2006-10-08)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en ftag.php en TribunaLibre 3.12 Beta permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mostrar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplibre:tribunalibre:3.12_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E18A484E-49D4-4BD0-9CD4-74975DD3A1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29415",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en main.php en registroTL permite a atacantes remotos ejecutar código PHP de su elección mediante una ftp:// URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplibre:registrotl:0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198FF980-0EAA-4F06-A2A5-C5A23AE9B7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplibre:registrotl:0.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D901556-69E7-436B-AD19-649BCCE7BC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20433",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29428",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat."
      }, {
        "lang" : "es",
        "value" : "registroTL almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar una base de datos mediante una petición directa a /usuarios.dat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplibre:registrotl:0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198FF980-0EAA-4F06-A2A5-C5A23AE9B7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplibre:registrotl:0.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D901556-69E7-436B-AD19-649BCCE7BC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2502",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via a URL in the contentSpecial parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index.php en eboli permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro contentSpecial."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jhjgubbels:eboli:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A64CF25-DA9B-4286-8296-AF349CAAEC1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20429",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en index.php en Nayco JASmine (también conocido como Jasmine-Web) permite a atacantes remotos ejecutar código PHP de su elección mediante una URL FTP en el parámetro section."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nayco:jasmine:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D599DEE8-97EF-4818-B7FF-C7C70DDD20DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22374",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20430",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29423",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2505",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the foaf parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en redir.php en Foafgen 0.3 permite a atacantes remotos leer archivos de su elección mediante una secuencia .. (punto punto) en el parámetro foaf."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toxi:foafgen:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14D4DD1-EA0A-4F81-8C22-D191BCBA7DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22376",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20454",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29443",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2506",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de atravesamiento de directorios en getimg.php en Album Photo Sans Nom 1.6 permite a atacantes remotos leer archivos de su elección mediante el parámetro img."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morian:album_photo_sans_nom:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E85EB7-46D8-4D58-BF8D-0B95B5FC38EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22375",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-December/001193.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29473",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://acid-root.new.fr/poc/13061007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-December/001193.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448096/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 1.7."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5321",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en phplist anterior a 2.10.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.2",
            "matchCriteriaId" : "757EFD41-2C9F-4554-9F91-48D0038D2A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE10CFB-A604-4C6E-ACE6-FD441C47D296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784C97D4-740E-4C65-98ED-FA03EC3EFAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94101A7-419E-4ACF-AB75-F0B0DA6E7021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F52B3C-7925-4970-AA84-732B34DD2FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5140DBAC-6AF0-41D0-972C-4F97BA06F488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A6FB5-0CE1-4952-9763-7AA0E605A7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665AC8D2-D3E6-470C-800B-0FD5AACE77BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2FFBB2-E4C0-4F16-90D6-9D3FB2105C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C06CBF-3F4B-4D10-9FF4-21985354ED3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018BA2DC-D1F7-4995-9D72-C38A2B087F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516EB08E-F724-4638-8174-1FB527CE8E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFF48D-67A7-40DA-9762-DB416E1442C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tincan.co.uk/?lid=1821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phplist.com/news",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20483",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://tincan.co.uk/?lid=1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phplist.com/news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en phplist anterior a 2.10.3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.2",
            "matchCriteriaId" : "757EFD41-2C9F-4554-9F91-48D0038D2A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516EB08E-F724-4638-8174-1FB527CE8E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B0EA29-302E-4FFB-88E2-5A4CDF195BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "048787BE-1E97-40B1-94F3-ADA674207396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB56F18-A63B-4557-AB5E-E83BFEDED0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tincan:phplist:2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BAFF48D-67A7-40DA-9762-DB416E1442C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://tincan.co.uk/?lid=1821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phplist.com/news",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://tincan.co.uk/?lid=1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phplist.com/news",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a \"possible security exposure,\" aka PK29360."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en IBM WebSphere Application Server anterior a 6.1.0.2 tiene impacto y vectores de ataque no especificados, relacionado con una \"posible exposición de seguridad\", también conocido como PK29360."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.1",
            "matchCriteriaId" : "EB02E38B-C2BC-49A0-8240-37CFE26E298A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22372",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK29360&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK29360&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374."
      }, {
        "lang" : "es",
        "value" : "El componente de seguridad Web Services Notification (WSN) de IBM WebSphere Application Server anterior a 6.1.0.2 permite a atacantes obtener acceso no especificado sin suministrar nombre de usuario y contraseña, también conocido como PK28374."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0.1",
            "matchCriteriaId" : "EB02E38B-C2BC-49A0-8240-37CFE26E298A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22372",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK28374&apar=only",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4000",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www-1.ibm.com/support/search.wss?rs=0&q=PK28374&apar=only",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) mkb.php, (2) iplogger.php, (3) admin_board2.php, or (4) admin_logger.php in includes/, different vectors than CVE-2006-5224."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Dimitri Seitz Security Suite IP Logger en dwingmods para phpBB permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path en (1) mkb.php, (2) iplogger.php, (3) admin_board2.php, o (4) admin_logger.php en includes/, vectores diferentes que en CVE-2006-5224."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dimitri_seitz:security_suite_ip_logger:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8124F6D0-C995-4EE3-943A-BFDB201019A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448447/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448447/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in language/lang/lang_contact_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en language/lang/lang_contact_faq.php en el módulo Prillian French 0.8.0 y anteriores para phpBB permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_prillian:french_language_pack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.0",
            "matchCriteriaId" : "86D24101-9654-4CF9-A3F0-395CCFAD3AAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22430",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4040",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address)."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Opera 9.0 y 9.01 permite a atacantes remotos ejecutar código de su elección mediante una URL larga en una etiqueta (dirección de enlace larga)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA17D3F-A17B-47A6-8066-583F63D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=424",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/484380",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_61_opera.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.opera.com/support/search/supsearch.dml?index=848",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4066",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/484380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_61_opera.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.opera.com/support/search/supsearch.dml?index=848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ruta de búsqueda en un fichero no confiable en OpenBase SQL 10.0 y anteriores, al usarlo en Apple Xcode 2.2 y anteriores y posiblemente otros productos, permite a usuarios locales ejecutar código de su elección mediante una ruta modificada que hace referencia a un programa gzip malicioso, el cual es ejecutado por gnutar con ciertas preferencias en la variable de entorno TAR_OPTIONS, cuando gnutar es invocado por OpenBase."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "6ECC94B6-CDEF-4D25-8757-019F7A5E244F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbase_international_ltd:openbase:*:*:mac_os_x:*:*:*:*:*",
            "versionEndIncluding" : "10.0",
            "matchCriteriaId" : "3EC070F1-330C-413B-B799-C2F76A65DAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbase_international_ltd:openbase:7.0.15:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B3AECE53-2A46-43E6-9A0C-A1E74D653D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbase_international_ltd:openbase:8.0.4:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "E1B9E4CF-9750-48DD-A65D-B1A52FD5D2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbase_international_ltd:openbase:9.1.5:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "5F7BCC07-04B0-4B11-B260-DF029E95ECFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22390",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22474",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/Xcode_OpenBase_pwn.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4058",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4059",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/Xcode_OpenBase_pwn.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file."
      }, {
        "lang" : "es",
        "value" : "OpenBase SQL 10.0 y anteriores, al usarlo en Apple Xcode 2.2 y anteriores y posiblemente otros productos, permite a usuarios locales crear archivos de su elección mediante un ataque de enlace simbólico en el fichero simulation.sql."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "6ECC94B6-CDEF-4D25-8757-019F7A5E244F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbase_international_ltd:openbase:*:*:mac_os_x:*:*:*:*:*",
            "versionEndIncluding" : "10.0",
            "matchCriteriaId" : "3EC070F1-330C-413B-B799-C2F76A65DAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbase_international_ltd:openbase:7.0.15:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "B3AECE53-2A46-43E6-9A0C-A1E74D653D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbase_international_ltd:openbase:8.0.4:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "E1B9E4CF-9750-48DD-A65D-B1A52FD5D2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbase_international_ltd:openbase:9.1.5:*:mac_os_x:*:*:*:*:*",
            "matchCriteriaId" : "5F7BCC07-04B0-4B11-B260-DF029E95ECFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22390",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27441",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.digitalmunition.com/Xcode_OpenBase_createfile.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1018872",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/27441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.digitalmunition.com/Xcode_OpenBase_createfile.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1018872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/3665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T21:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType.  NOTE: the flexibility of the attack varies depending on the type of web browser being used."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en Adobe Flash Player plugin 9.0.16 y anteriores para Windows, 7.0.63 y anteriores para Linux, 7.x anterior a 7.0 r67 para Solaris y anterior a 9.0.28.0 para Mac OS X, permite a atacantes remotos modificar cabeceras HTTP de las peticiones del cliente y dirigir ataques de división de petición HTTP mediante secuencias CRLF en argumentos a las funciones ActionScript (1) XML.addRequestHeader y (2) XML.contentType. NOTA: la flexibilidad del ataque varía dependiendo del tipo de navegador web utilizado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:linux:*:*:*:*:*",
            "versionEndIncluding" : "7.0.63",
            "matchCriteriaId" : "FB3055E4-5C68-4A36-8CC6-296ECD32FECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:solaris:*:*:*:*:*",
            "versionEndIncluding" : "7.0_r67",
            "matchCriteriaId" : "030AD994-C027-4290-B592-1A98989CCFE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:windows:*:*:*:*:*",
            "versionEndIncluding" : "9.0.16",
            "matchCriteriaId" : "49581028-11C3-42A6-9532-7D148098B27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:flash_player:*:*:mac_os_x:*:*:*:*:*",
            "versionEndIncluding" : "9.0.28.0",
            "matchCriteriaId" : "BADF6C3D-CB1B-4F6C-A8EF-40DF28C0FC3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23324",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23581",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1737",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017078",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102932-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa06-01.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-18.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29863",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0026.jsp",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448997/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11405",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102932-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/advisories/apsa06-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.adobe.com/support/security/bulletins/apsb06-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0026.jsp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448997/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-17T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access."
      }, {
        "lang" : "es",
        "value" : "El núcleo de Linux no guarda o restaura adecuadamente EFLAGS durante un cambio de contexto, o reinicia las banderas al crear nuevos hilos, lo cual permite a usuarios locales provocar una denegación de servicio (caída de proceso), como ha sido demostrado usando un proceso que establece la bandera Alignment Check (EFLAGS 0x40000), lo cual dispara un SIGBUS en otros procesos que tienen acceso no alineado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.6.19",
            "matchCriteriaId" : "FAC786C1-AE8C-4376-9CA3-F1DF4021E6D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E304C9-F780-4358-A58D-1E4C93977704"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=47a5c6fa0e204a2b63309c648bb2fde36836c826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23361",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23593",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:002",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21851",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=47a5c6fa0e204a2b63309c648bb2fde36836c826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not Vulnerable.  This flaw only affects kernel versions 2.6.14 to 2.6.18.  Red Hat Enterprise Linux 2.1, 3, and 4 does not ship with a vulnerable kernel version.",
        "lastModified" : "2006-11-03T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in xdb.dbms_xdbz in the XMLDB component for Oracle Database 9.2.0.6 and 10.1.0.4 has unknown impact and remote authenticated attack vectors, aka Vuln# DB01.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB01 is for PL/SQL injection in the ENABLE_HIERARCHY_INTERNAL procedure."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en xdb.dbms_xdbz en el componente XMLDB para Oracle Database 9.2.0.6 y 10.1.0.4 tiene impacto y vectores de ataque remotos autenticados desconocidos, también conocido como Vuln# DB01. NOTA: a fecha del 23/10/2006, Oracle no ha negado los informes de terceras partes fiables de que DB01 es una inyección PL/SQL en el procedimiento ENABLE_HIERARCHY_INTERNAL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/717140",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_xdbz0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449510/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/717140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_xdbz0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449510/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to \"create session\" privileges, aka Vuln# DB02.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB02 is for SQL injection in the SDO_DROP_USER_BEFORE package using a Trigger for a DROP USER statement in an anonymous PL/SQL block."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Spatial en Oracle Database 10.2.0.2 tiene impacto y vectores de ataque autenticado remoto desconocidos relacionados con privilegios \"create session\", también conocido como Vuln# DB02. NOTA: a partir de 20061023, Oracle no ha disputado informes de terceras partes confiables sobre que DB02 es para inyección SQL en el paquete SDO_DROP_USER_BEFORE utilizando un Trigger para una sentencia DROP USER en un bloque anónimo PL/SQL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5334",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATE_FIXED and (c) TESSELATE function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Spatial en Oracle Database 9.0.1.5, 9.2.0.7, y 10.1.0.5 tiene impacto y vectores de ataque remotos autenticados desconocidos relacionado con mdsys.md2, también conocido como Vuln# DB03. NOTA: a fecha del 23/10/2006, Oracle no ha negado los informes de terceras partes fiables de queDB03 está relacionado con uno o más de (1) un desbordamiento de búfer en la función (a) RELATE o (2) inyección SQL en las funciones (b) RESSELATE_FIXED y (c) TESSELATE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) Vuln# DB04 and sys.dbms_cdc_impdp in the (a) Change Data Capture (CDC) component; (2) Vuln# DB07, (3) DB08, and (4) DB16 in sys.dbms_cdc_isubscribe in CDC; and (5) mdsys.sdo_geor_int in the (b) Oracle Spatial component, aka DB12.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that these issues are related to SQL injection in the BUMP_SEQUENCE function (DB04), CREATE_SUBSCRIPTION (DB07), EXTEND_WINDOW_LIST (DB08), SUBSCRIBE (DB16), and COMPRESSDATA (DB12)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Database 10.1.0.5 y 10.2.0.2 tienen impacto y vectores de ataque remotos autenticados desconocidos relacionado con (1) Vuln# DB04 y sys.dbms_cdc_impdp en el (a) componente Change Data Capture (CDC); (2) Vuln# DB07, (3) DB08, y (4) DB16 en sys.dbms_cdc_isubscribe en CDC; y (5) mdsys.sdo_geor_int en el (b) componente Oracle Spatial, también conocido como DB12. NOTA: a fecha del 23/10/2006, Oracle no ha negado los informes de terceras partes fiables de que estos problemas están relacionados con inyección SQL en la función BUMP_SEQUENCE (DB04), CREATE_SUBSCRIPTION (DB07), EXTEND_WINDOW_LIST (DB08), SUBSCRIBE (DB16), y COMPRESSDATA (DB12)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/736324",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449511/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/736324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449511/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impact and remote authenticated attack vectors related to (1) sys.dbms_cdc_ipublish (Vuln# DB05) and (2) sys.dbms_cdc_isubscribe (DB06).  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB05 is for SQL injection in CREATE_CHANGE_TABLE and CHANGE_TABLE_TRIGGER, and DB06 is for PL/SQL injection in the PREPARE_UNBOUNDED_VIEW procedure."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente Change Data Capture (CDC) en Oracle Database 9.2.0.7, 10.1.0.5, tienen impacto y vectores de ataque remotos autenticados desconocidos relacionados con (1) sys.dbms_cdc_ipublish (Vuln# DB05) y (2) sys.dbms_cdc_isubscribe (DB06). NOTA: a fecha del 23/10/2006, Oracle no ha negado los informes de terceras partes fiables de que DB05 es una inyección SQL en CREATE_CHANGE_TABLE y CHANGE_TABLE_TRIGGER, y DB06 es una inyección PL/SQL en el procedimiento PREPARE_UNBOUNDED_VIEW."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/446100",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/716964",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/446100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/716964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 has unknown impact and remote authenticated attack vectors, aka Vuln# DB09."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Core RDBMS en Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5 y 10.2.0.2 tiene impacto y vectores de ataque autenticado remoto desconocidos, también conocida como Vuln# DB09."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432A3020-9977-4A10-9CDA-3A71E83F63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors related to sys.dbms_sqltune, aka Vuln# DB10.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB10 is for SQL injection in DROP_SQLSET, DELETE_SQLSET, SELECT_SQLSET, and I_SET_TUNING_PARAMETER.  NOTE: some of these vectors might be in DBMS_SQLTUNE_INTERNAL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Core RDBMS en Oracle Database 10.1.0.5 tiene impacto y vectores de ataque autenticado remoto desconocidos relacionados con sys.dbms_sqltune, también conocida como Vuln# DB10. NOTA: a partir de 20061023, Oracle no ha disputado informes de terceras partes confiables sobre que DB10 es para inyección SQL en DROP_SQLSET, DELETE_SQLSET, SELECT_SQLSET y I_SET_TUNING_PARAMETER. NOTA: algunos de estos vectores pueden existir en DBMS_SQLTUNE_INTERNAL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12BD6918-45C9-42F8-8C7F-07AAD6156D04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_sqltune_internal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449509/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_sqltune_internal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449509/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB11.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB11 is related to \"length checking\" in the RELATE function before MD2.RELATE is called."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Spatial en Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, y 10.1.0.4 tiene impacto y vectores de ataque remotos autenticados desconocidos relacionados con mdsys.sdo_geom,  también conocido como Vuln# DB11. NOTA: a fecha del 23/10/2006, Oracle no ha negado los informes de terceras partes fiables de que DB11 está relacionada con la \"comprobación de longitud\" en la función RELATE antes de que se llame a MD2.RELATE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_lrs, aka Vuln# DB13, and (2) Vuln# DB17.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB13 is related to bypassing input validation for SQL injection related to convert_to_lrs_layer and dbms_assert, and DB17 is related to SQL injection in the trigger in the SDO_DROP_USER package."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente Oracle Spatial en Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5 y 10.2.0.2 tiene impacto y vectores de ataque remoto autenticado remoto relacionado con (1) mdsys.sdo_lrs, también conocida como Vuln# DB13 y (2) Vuln# DB17. NOTA: a partir de 20061023, Oracle no ha disputado informes de terceras partes confiables sobre que DB13 está relacionado con eludir la validación de entrada para inyección SQL relacionada con convert_to_lrs_layer y dbms_assert y DB17 está relacionado con inyección SQL en el disparador en el paquete SDO_DROP_USER."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00489.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00500.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/869292",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/wp/bypass_dbms_assert.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449512/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00489.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00500.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/869292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/wp/bypass_dbms_assert.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449512/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in XMLDB component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors, aka (1) Vuln# DB14 and (2) DB15 related to xdb.dbms_xdbz.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB14 is for SQL injection in the PITRIG_DROP and PITRIG_DROPMETADATA functions in XDB_PITRIG_PKG, and DB15 is for SQL injection in DISABLE_HIERARCHY_INTERNAL in DBMS_XDBZ."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente XMLDB en Oracle Database 9.2.0.8, 10.1.0.5 y 10.2.0.2 tiene impacto y vectores de ataque remoto autenticado remoto, también conocida como (1) Vuln# DB14 y (2) DB15 relacionado con xdb.dbms_xdbz. NOTA: a partir de 20061023, Oracle no ha disputado informes de terceras partes confiables sobre que DB14 es para inyección SQL en las funciones PITRIG_DROP y PITRIG_DROPMETADATA en XDB_PITRIG_PKG y DB15 es para inyección SQL en DISABLE_HIERARCHY_INTERNAL en DBMS_XDBZ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A522A3-07D7-481F-A538-EA3D13256F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF2A2E-3693-424E-B53D-0BAD01D53F7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/318764",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_xdbz0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449510/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/318764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_xdbz0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449510/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_tune, aka Vuln# DB18.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB18 might be related to SQL injection in the EXTENT_OF function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Spatial en Oracle Database 9.0.1.5, 9.2.0.6, y 10.1.0.3 tiene impacto y vectores de ataque remotos autenticados desconocidos relacionados con mdsys.sdo_tune, también conocido como Vuln# DB18. NOTA: a fecha del 23/10/2006, Oracle no ha negado los informes de terceras partes fiables de que DB18 podría estar relacionado con inyección SQL en la función EXTENT_OF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F11F24-415A-4E36-9D03-5B7594356183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Database Scheduler component in Oracle Database 10.1.0.3 has unknown impact and remote authenticated attack vectors related to sys.dbms_scheduler, aka Vuln# DB19."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Database Scheduler en Oracle Database 10.1.0.3 tiene impacto y vectores de ataque remotos autenticados desconocidos relacionados con sys.dbms_scheduler, también conocido como Vuln# DB19."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4019F72-9031-4CA6-B39A-AFC203D9D464"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_3gl, aka Vuln# DB20, and (2) mdsys.sdo_cs, aka DB21.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB20 is a buffer overflow in GEOM_OPERATION, and DB21 is related to a buffer overflow and SQL injection in TRANSFORM_LAYER."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente Oracle Spatial en Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, y 10.1.0.4 tienen impacto y vectores de ataque remotos autenticados desconocidos relacionados con (1) mdsys.sdo_3gl, también conocido como Vuln# DB20, y (2) mdsys.sdo_cs, también conocido como DB21. NOTA: a fecha de 23/10/2006, Oracle no ha negado los informes de terceras partes fiables de que DB20 es un desbordamiento de búfer en GEOM_OPERATION, y DB21 está relacionado con un desbordamiento de búfer e inyección de SQL en TRANSFORM_LAYER."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B559C62F-88A7-42D3-9629-9F5CAD43F8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB22.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 is related to \"length checking\" in the RELATE function before MD2.RELATE is called."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Spatial en Oracle Database 9.0.1.5, 9.2.0.7, y 10.1.0.4 tiene impacto y vectores de ataque remotos autenticados desconocidos relacionados con mdsys.sdo_geom, también conocido como Vuln# DB22. NOTA: a fecha de 23/10/2006, Oracle no ha impugnado los informes de una tercera parte fiable de que DB22 está relacionado con la \"comprobación de longitud\" en la función RELATE anterior a que se llame a MD2.RELATE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C67572-800C-4214-AD12-E9017A9A5BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7847CEB-DD8D-45A0-B500-95D511110FB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449110/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, as used in Oracle Collaboration Suite 9.0.4.2 and Oracle E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors related to htdigest, aka Vuln# OHS02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle HTTP Server 9.2.0.7, tal como ha sido usado en Oracle Collaboration Suite 9.0.4.2 y Oracle E-Business Suite y Applications 11.5.10CU2, tiene impacto y vectores de ataque remotos autenticados desconocidos relacionados con htdigest, también conocido como Vuln# OHS02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BF041B-FD41-4EBD-87EC-7C23C195EF83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS04."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle HTTP Server 9.2.0.7 y Oracle Collaboration Suite 9.0.4.2 tiene impacto y vectores de ataque remotos autenticados desconocidos relacionados con HTTPS y SSL, también conocido como Vuln# OHS04."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BF041B-FD41-4EBD-87EC-7C23C195EF83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS05."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especifica en Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, y Oracle E-Business Suite y Applications 11.5.10CU2 tiene impacto y vectores de ataque remotos relacionados con HTTPS y SSL, también conocido como Vuln# OHS05."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BF041B-FD41-4EBD-87EC-7C23C195EF83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS07."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle HTTP Server 9.2.0.7, cuando se ejecuta sobre HP Tru64 UNIX, tiene impacto y vectores de ataque remotos desconocidos relacionados con HTTPS y SSL, también conocido como Vuln# OHS07."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BF041B-FD41-4EBD-87EC-7C23C195EF83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle HTTP Server 9.2.0.7 y Oracle E-Business Suite y Applications 11.5.10CU2 tiene impacto y vectores de ataque locales desconocidos, también conocido como Vuln# OHS08."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BF041B-FD41-4EBD-87EC-7C23C195EF83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML DB) 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln# (1) APEX01, (2) APEX02, (3) APEX03, (4) APEX05, (5) APEX06, (6) APEX07, (7) APEX08, (8) APEX09, (9) APEX10, (10) APEX11, (11) APEX12, (12) APEX13, (13) APEX14, (14) APEX15, (15) APEX16, (16) APEX17, (17) APEX18, (18) APEX19, (19) APEX22, (20) APEX23, (21) APEX24, (22) APEX25, (23) APEX26, (24) APEX27, (25) APEX28, (26) APEX29, (27) APEX30, (28) APEX31, (29) APEX32, (30) APEX33, (31) APEX34, and (32) APEX35.  NOTE: as of 20061027, it is likely that some of these identifiers are associated with cross-site scripting (XSS) in WWV_FLOW_ITEM_HELP and NOTIFICATION_MSG, but these have been provided separate identifiers."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Application Express (anteriormente Oracle HTML DB) 1.5 a 2.0 tienen impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# (1) APEX01, (2) APEX02, (3) APEX03, (4) APEX05, (5) APEX06, (6) APEX07, (7) APEX08, (8) APEX09, (9) APEX10, (10) APEX11, (11) APEX12, (12) APEX13, (13) APEX14, (14) APEX15, (15) APEX16, (16) APEX17, (17) APEX18, (18) APEX19, (19) APEX22, (20) APEX23, (21) APEX24, (22) APEX25, (23) APEX26, (24) APEX27, (25) APEX28, (26) APEX29, (27) APEX30, (28) APEX31, (29) APEX32, (30) APEX33, (31) APEX34, y (32) APEX35. NOTA: a fecha de 27/10/2006, es probable que uno de estos identificadores esté asociado con secuencias de comandos en sitios cruzados (XSS) en WWV_FLOW_ITEM_HELP, pero a ese problema se le ha asignado un identificador aparte."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E9031D-19DD-4E6D-BDB4-0EC93DB6C8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D813027-4F66-4CFB-A3C4-F5A302B0D9BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln# (1) APEX04, (2) APEX20, and (3) APEX21."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Application Express 1.5 a 1.6.1 tienen impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# (1) APEX04, (2) APEX20, y (3) APEX21."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E9031D-19DD-4E6D-BDB4-0EC93DB6C8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "574D3EEB-E1D4-4DB3-93D3-0410747EC8BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5353",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors related to the Mod_rewrite Module, aka Vuln# OHS01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle HTTP Server en Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, y 10.1.3.0.0, y Oracle Collaboration Suite 9.0.4.2 y 10.1.2, tiene impacto y vectores de ataque remotos desconocidos relacionados con el módulo Mod_rewrite, también conocido como Vuln# OHS01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA9867F-D7BC-4230-9584-C2FBB6642482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E4CD35-3C6D-4C72-8C11-7E58AC3160AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5354",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# OHS06."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle HTTP Server 9.2.0.7 y 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, y 10.1.3.0, Oracle Collaboration Suite 9.0.4.2 and 10.1.2, y Oracle E-Business Suite y Applications 11.5.10CU2 tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# OHS06."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA9867F-D7BC-4230-9584-C2FBB6642482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:9.2.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BF041B-FD41-4EBD-87EC-7C23C195EF83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:10.1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C4E6D6-383E-4499-9A2E-38E694018E96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# SSO01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Single Sign-On en Oracle Application Server 9.0.4.3, 10.1.2.0.2, y 10.1.2.1.0, Collaboration Suite 9.0.4.2 y 10.1.2, y Oracle E-Business Suite y Applications 11.5.10CU2 tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# SSO01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA9867F-D7BC-4230-9584-C2FBB6642482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Containers para componentes J2EE en Oracle Application Server 9.0.4.3, 10.1.2.0.2, y 10.1.2.1.0, y Collaboration Suite 9.0.4.2 y 10.1.2, tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# OC4J02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA9867F-D7BC-4230-9584-C2FBB6642482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E4CD35-3C6D-4C72-8C11-7E58AC3160AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown impact and remote attack vectors related to the PHP Module, aka Vuln# OHS03."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle HTTP Server en Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, y 10.1.2.1.0 tiene impacto y vectores de ataque remotos desconocidos relacionados con el módulo PHP, también conocido como Vuln# OHS03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln# FORM01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Forms en Oracle Application Server 9.0.4.3 y 10.1.2.0.2 tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# FORM01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA9867F-D7BC-4230-9584-C2FBB6642482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5359",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications 11.5.10CU2, have unknown impact and remote attack vectors, aka Vuln# (1) REP01 and (2) REP02. NOTE: as of 20061027, Oracle has not disputed reports from a reliable researcher that these issues are related to (a) showenv and (b) parsequery for REP01, and (c) cellwrapper and (d) delimiter for REP02."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente Oracle Reports Developer en Oracle Application Server 9.0.4.3 y 10.1.2.0.2, y Oracle E-Business Suite y Applications 11.5.10CU2, tienen impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# (1) REP01 y (2) REP02. NOTA: a fecha de 27/10/2006, Oracle no ha negado los informes de un investigador fiable de que estos problemas están relacionacos con (a) showenv y (b) parsequery en el caso de REP01, y (c) cellwrappper y (d) delimiter para REP02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA9867F-D7BC-4230-9584-C2FBB6642482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_css.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449503/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_reports_css.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449503/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown impact and remote attack vectors, aka Vuln# FORM03."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Forms en Oracle Application Server 9.0.4.2 tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# FORM03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J03."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Containers para J2EE en Oracle Application Server 9.0.4.3, 10.1.2.0.0, y 10.1.2.0.1, y Oracle Collaboration Suite 9.0.4.2 y 10.1.2, tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# OC4J03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA9867F-D7BC-4230-9584-C2FBB6642482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8548B5B0-F465-4424-A316-50FDDE450A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E4CD35-3C6D-4C72-8C11-7E58AC3160AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln# OC4J04."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Containers para J2EE en Oracle Application Server 10.1.3.0.0 tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# OC4J04."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka Vuln# SSO02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Single Sign-On en Oracle Application Server 10.1.2.0.1 y Collaboration Suite 10.1.2 tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# SSO02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E4CD35-3C6D-4C72-8C11-7E58AC3160AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote authenticated attack vectors, aka Vuln# OC4J05."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Containers para J2EE en Oracle Application Server 9.0.4.1 y 10.1.2.0.2, y Collaboration Suite 10.1.2, tiene impacto y vectores de ataque remotos autenticados desconocidos, también conocido como Vuln# OC4J05."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFBB096-523E-4634-ADC4-6CFB03F9577B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaboration_suite:10.1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E4CD35-3C6D-4C72-8C11-7E58AC3160AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln# FORM02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Forms en Oracle Application Server 9.0.4.3 y 10.1.2.0.2, y E-Business Suite y Applications 11.5.10CU2, tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# FORM02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA9867F-D7BC-4230-9584-C2FBB6642482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B4BAA9-D045-4D2B-8220-47F47ED936DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) Oracle Containers for J2EE, aka Vuln# OC4J01, and (2) Oracle Process Mgmt & Notification, aka OPMN01."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle Collaboration Suite 9.0.4.2 tienen impacto y vectores de ataque remotos desconocidos relacionados con (1) Oracle Containers para J2EE, también conocido como Vuln# OC4J01, y (2) Oracle Process Mgmt & Notification, también conocido como OPMN01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D809B0B7-70EF-47C5-B91F-923E999CA7FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in Oracle Balanced Scorecard, (4) APPS09 in Oracle Scripting, and (5) APPS10 in Oracle Trading Community."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.7 a 11.5.10CU2 tienen impacto vectores de ataque remotos autenticados desconocidos, también conocidas como Vuln# (1) APPS03 en Oracle Applications Framework, (2) APPS04 en Oracle Applications Technology Stack, (3) APPS05 en Oracle Balanced Scorecard, (4) APPS09 en Oracle Scripting, y (5) APPS10 en Oracle Trading Community."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FEA4F-B1C7-4250-81FD-AC1289769348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC900808-1118-4FC0-9E48-380A02394F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD00F5CD-125C-4895-824E-23AC1D9A34BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE95D02-C2A8-4AAC-878B-DFA0FE13B571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote attack vectors, aka Vuln# APPS01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Exchange en Oracle E-Business Suite 6.2.4 tiene impacto y vectores de ataque remotos desconocidos, también conocido como Vuln# APPS01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4578C38-8E2C-4B96-9219-BE1C91D7C55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Application Object Library in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS02."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Application Object Library en Oracle E-Business Suite 11.5.10CU2 tiene impacto y vectores de ataque remotos autenticados, también conocido como Vuln# APPS02."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS06 for Oracle CRM Gateway for Mobile Devices and (2) APPS08 for Oracle iStore."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.10CU2 tienen impacto y vectores de ataque remotos autenticados desconocidos, también conocidas como Vuln# (1) APPS06 para Oracle CRM Gateway para Dispositivos Móviles y (2) APPS08 para Oracle iStore."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS07."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Email Center en Oracle E-Business Suite 11.5.9 tiene impacto y vectores de ataque remotos autenticados desconocidos, también conocido como Vuln# APPS07."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78408427-3FFB-45C4-82EF-C8D636B3A718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS11 for Oracle Universal Work Queue and (2) APPS12 for Oracle Application Object Library."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.10 a 11.5.10CU2 tienen impacto y vectores de ataque remotos autenticados desconocidos, también conocidas como Vuln# (1) APPS11 para Oracle Universal Work Queue y (2) APPS12 para Oracle Application Object Library."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B1BE09-4A96-41A3-AA1D-74533F396998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B61990-9CC2-4215-9879-AC817F4E6767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Install Base component in Oracle E-Business Suite 11.5.10CU1 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS13."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente Oracle Install Base en Oracle E-Business Suite 11.5.10CU1 tiene impacto y vectores de ataque remotos autenticados desconocidos, también conocido como Vuln# APPS13."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Oracle Pharmaceutical Applications 4.5.1 has unknown impact and remote authenticated attack vectors, aka Vuln# PHAR01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Oracle Pharmaceutical Applications 4.5.1 tiene impacto y vectores de ataque remotos autenticados, también conocido como Vuln# PHAR01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:pharmaceutical:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8617A752-52DF-491B-B142-E0C43370EC33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote attack vectors, aka Vuln# (1) PSE01, (2) PSE02, and (3) PSE03."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente PeopleTools en Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, y 8.48.03 tienen impacto y vectores de ataque remotos desconocidos, también conocidas como Vuln# (1) PSE01, (2) PSE02, y (3) PSE03."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.46:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "0F87FD99-F886-481F-A224-7C8400785284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.46.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB812575-49D5-450C-BCDF-AEEE05BD69E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.47:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "4E54DE10-BC95-4740-A6F6-1709F2C8BA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.47.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8ED9F2B-867B-4848-8E10-E7EA59FE9F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.48:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "6B28635E-9715-4950-944E-2980B2F302F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B6873-61C2-40E3-9BB1-F493A54E4912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) PSE04, (2) PSE06, (3) PSE07, and (4) PSE08."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el componente PeopleTools en Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, y 8.48.03 tienen impacto y vectores de ataque remotos autenticados desconocidos, también conocidas como Vuln# (1) PSE04, (2) PSE06, (3) PSE07, y (4) PSE08."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.22.11:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "19CD8D6D-02D2-448F-AD1A-6B31A259B643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.46:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "0F87FD99-F886-481F-A224-7C8400785284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.46.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB812575-49D5-450C-BCDF-AEEE05BD69E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.47:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "4E54DE10-BC95-4740-A6F6-1709F2C8BA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.47.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8ED9F2B-867B-4848-8E10-E7EA59FE9F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.48:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "6B28635E-9715-4950-944E-2980B2F302F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3B6873-61C2-40E3-9BB1-F493A54E4912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, and 8.9 Bundle 4 has unknown impact and remote authenticated attack vectors, aka Vuln# PSE05."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el componente PeopleSoft en Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, y 8.9 Bundle 4 tiene impacto y vectores de ataque remotos autenticados desconocidos, también conocido como Vuln# PSE05."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:bundle11:*:*:*:*:*:*",
            "matchCriteriaId" : "67F79474-26B2-4F72-85C4-F2D549230A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "36A655C1-27FD-4359-835F-BDC3CBD82CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle4:*:*:*:*:*:*",
            "matchCriteriaId" : "412AE9C5-D525-47A5-953D-B2F057BD5708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:ga:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAE3FBD-CE24-432F-9E65-9F998E8A7A27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en JD Edwards HTML Server en JD Edwards EnterpriseOne SP23_O2, 8.95.P1, y 8.96.D1 tiene impacto y vectores de ataque remotos autenticados desconocidos, también conocido como Vuln# JDE01."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:8.95.p1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E55557-D5A7-4B66-B52D-DDB0F278C27E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:8.96.d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550B7EBB-1386-40FB-A567-AAC8BC061DCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterpriseone:sp23_o2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388C3506-B6A5-4245-BEB5-DC75F556DF44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad de interpretación acelerada del Controlador de Gráficos Binarios NVIDIA (controlador de blob binario) para Linux v8774 y v8762, y posiblemente en otros sistemas operativos, permite a atacantes locales y remotos ejecutar código de su elección mediante un valor de ancho grande en un símbolo de una fuente, lo cual puede ser usado para sobreescribir localizaciones de memoria de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:binary_graphics_driver:v8762:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "EA0EC344-84EA-4A0E-80F2-98F1640F3BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:binary_graphics_driver:v8774:*:linux:*:*:*:*:*",
            "matchCriteriaId" : "97C8860D-53FF-4765-9890-1B09ED9B7F96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://download2.rapid7.com/r7-0025/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download2.rapid7.com/r7-0025/nv_exploit.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22419",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-03.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017072",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/147252",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0025.jsp",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448860/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451329/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-377-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4053",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4328",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://download2.rapid7.com/r7-0025/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://download2.rapid7.com/r7-0025/nv_exploit.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-03.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/147252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rapid7.com/advisories/R7-0025.jsp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448860/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451329/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-377-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php.  NOTE: CVE disputes this issue for version 4.6.15, because $contenido_path is set to a static value"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en Contenido CMS permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro contenido_path a 1) cms/dbfs.php o (2) cms/front_content.php. NOTA: CVE impugna este asunto para la versión 4.6.15, ya que $contenido_path es establecido a un valor estático."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contenido:contendio:4.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "183BE477-8120-4078-9309-499F21EDF0E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1739",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001084.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448549/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001084.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448549/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T04:06:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory."
      }, {
        "lang" : "es",
        "value" : "Contenido CMS almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos obtener credenciales de base de datos y otra información mediante una petición directa a (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, o (8) db_sybase.inc en el directorio conlib/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contenido:contendio:4.5.2_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77B84E3-DA5C-460B-A23E-73339ABF92D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contenido:contendio:4.5.6_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99745832-0E41-4B8E-8A18-9FEB3D6D10D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contenido:contendio:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0E328D-D75C-435C-9F98-28F17040249B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1738",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448563/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448563/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4811",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-18T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de enteros en el Qt 3.3 versiones anteriores a 3.3.7, 4.1 anteriores a 4.1.5, y 4.2 anteriores a 4.2.1, como el usado en la librería KDE khtml, kdelibs 3.1.3, y, posiblemente otros paquetes, permite a los atacantes remotos causar la denegación de servicio (caída) y la posibilidad de ejecutar código de su elección mediante una imagen pixmap manipulada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D26BBF-106F-48C8-9D57-CF080486DB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026716CE-6BA5-4FC4-8BD3-BF5430DEBE99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BF63BD-E6FA-49AA-9627-7EDAD7939531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EBEAE0-C1DF-46E4-9E2A-B333912A4950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:3.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCDBB15-4E26-48F0-A266-CA059CFEE596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:3.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07F27DC-47A4-4EF2-91CC-81863D015B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58E53D3A-665D-4EEE-82EF-4EDBD194B475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A38B91E-698F-4638-BC3B-BD02F3313B70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7629BAB0-5077-4B82-9F11-B228E8EAFA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76366D45-3604-49D1-BD97-8A9FACEA2171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEF60A1-5FF0-465F-A872-62F80899F870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5386EE-376B-4773-8687-5314BFF35E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC6465-B459-410E-A5C5-EBFF5C866009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:kdelibs:3.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5C548D-9A33-431C-9022-512B4B2DEC0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22380",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22397",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22479",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22485",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22492",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22520",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22579",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22586",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22589",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22645",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22738",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22890",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24347",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-02.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200703-06.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017084",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:186",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:187",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0720.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0725.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449173/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20599",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-368-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1200",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4099",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-723",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-02.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200703-06.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0720.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0725.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449173/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-368-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el archivo comadd.php en Def-Blog 1.0.1 y anteriores, permite a los atacantes remotos la ejecución de comandos SQL de su elección mediante el parámetro article."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:def-blog:def-blog:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FEBFA-93F3-4B82-A957-4DEA10B13A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22389",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20545",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AGE parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP modification/SendAlertEmail.php en CDS Software Consortium CDS Agenda 4.2.9 y anteriores, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro AGE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cds_software_consortium:cds_agenda:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.9",
            "matchCriteriaId" : "AFB60D64-1FAE-48D4-AB63-3EFF985B03DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22416",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20508",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29519",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2540",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5385",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP admin/admin_spam.php en SpamOborona 1.0b y anteriores módulos phpBB, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spamoborona:spamoborona:1.0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8706DA-8F0A-4D56-8620-CA577FA44B85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22438",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1741",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448633/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20515",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448633/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5386",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULT_SKIN parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP process.php en NuralStorm Webmail 0.98b y anteriores, cuando el registro global está habilitado, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro DEFAULT_SKIN."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuralstorm:nuralstorm_webmail:0.98b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD3D3E-BF44-497F-8F84-BEDB4F4D86A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22403",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2561",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP mods/iai/includes/constants.php en PlusXL 20_272 y anteriores módulos phpBB, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_plusxl:plusxl:20.272:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC9CC6E-338E-47AE-B389-D6B932B661BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22414",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1740",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448581/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20315",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4038",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448581/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary SQL commands via the getsquad parameter, a different vector than CVE-2006-4783."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en el archivo index.php en WebSPELL 4.01.01 y anteriores, permite a los atacantes remotos la ejecución de comandos SQL de su elección mediante el parámetro getsquad, un vector diferente al CVE-2006-4783."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511CDAC-8292-4696-A0BE-7DC321CF6500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webspell:webspell:4.01.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D16B895D-B1C0-4727-A06C-518F7E22421C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20540",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2568",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tools/tellhim.php in PHP-Wyana allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "El archivo tools/tellhim.php de PHP-Wyana permite a los atacantes remotos la obtención de información sensible mediante un valor no válido en el parámetro lang, el cual muestra la ruta (path) en un mensaje de error."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wyana:php-wyana:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312EB3B1-C330-492E-8304-D9FFA2D56616"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448789/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448789/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5390",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP includes/functions_mod_user.php en el módulo para phpBB del ACP User Registration (MMW) 1.00, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:acp_user_registration_module:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C9A2D4-BD48-4FCD-ACF0-9809E8EFAA11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22436",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29734",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?p=2504370#2504370",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20558",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.phpbb.com/phpBB/viewtopic.php?p=2504370#2504370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nphpBB, ACP User Registration, 1.0.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xfire 1.64 and earlier allows remote attackers to cause a denial of service (client application crash) via a long string to UDP port 25777."
      }, {
        "lang" : "es",
        "value" : "Xfire 1.64 y anteriores permite a los atacantes remotos causar la denegación de servicio (caída de la aplicación del cliente) mediante una cadena larga en el puerto UDP 25777."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xfire:xfire:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.4",
            "matchCriteriaId" : "76070F2C-4C3F-4B3A-82FF-B8CD3671B5C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2571",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) sw/index_sw.php; (2) cart.php, (3) lib_cart.php, (4) lib_read_cart.php, (5) lib_sys_cart.php, and (6) txt_info_cart.php in sw/lib_cart/; (7) comment.php, (8) find_comment.php, and (9) lib_comment.php in sw/lib_comment/; (10) sw/lib_find/find.php; and other unspecified PHP scripts."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos de PHP en OpenDock FullCore 4.4 y anteriores, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro doc_directory en (1) sw/index_sw.php; (2) cart.php, (3) lib_cart.php, (4) lib_read_cart.php, (5) lib_sys_cart.php, y (6) txt_info_cart.php en sw/lib_cart/; (7) comment.php, (8) find_comment.php, y (9) lib_comment.php en sw/lib_comment/; (10) sw/lib_find/find.php; y otras secuencias de comandos en PHP no especificadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendoc:fullcore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4",
            "matchCriteriaId" : "4D372E49-407D-458A-B02F-D64C36D87DDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29907",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29910",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29911",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29915",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20573",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4052",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29578",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5393",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session."
      }, {
        "lang" : "es",
        "value" : "Cisco Secure Desktop (CSD) no requiere que el valor del registro sea 1 para el ClearPageFileAtShutdown (aka CCE-Winv2.0-407), el cual puede permitir a los usuarios locales la lectura de ciertas páginas de memoria que fueron escritas durante otra sesión SSL VPN para un usuario diferente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DD0D2-B573-4FE3-933A-02E8F4D35E56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default configuration of Cisco Secure Desktop (CSD) has an unchecked \"Disable printing\" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL VPN session."
      }, {
        "lang" : "es",
        "value" : "La configuración por defecto del Cisco Secure Desktop (CSD)-Escritorio de Seguridad de Cisco- tiene deshabilitada la opción \"Disable printing\" en la Secure Desktop Settings -Configuración de Seguridad del Escritorio-, lo que permite a los usuarios locales la lectura de datos que fueron enviados a la impresora durante otra sesión SSL VPN para un usuario diferente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F91DD0D2-B573-4FE3-933A-02E8F4D35E56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20410",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Microsoft Class Package Export Tool (aka clspack.exe) allows context-dependent attackers to execute arbitrary code via a long string.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del buffer en el Microsoft Class Package Export Tool (aka clspack.exe) permite a los atacantes dependientes del contexto, la ejecución de código de su elección mediante una cadena larga. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:class_package_export_tool:5.0.2752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2570F6-E7D5-4FA9-BCA0-EC071A206316"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20561",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP loopback connection with both endpoints on the same system."
      }, {
        "lang" : "es",
        "value" : "La función tcp_fuse_rcv_drain del kernel de Solaris 10 anterior al 17/10/2006, cuando la Fusión de TCP está habilitada, permite a los usuarios locales causar la denegación de servicio (caída del sistema) mediante una petición de conexión TCP con ambos puntos finales en el mismo sistema."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22453",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102667-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4080",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102667-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5398",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en e archivo comments.php en Simplog 0.9.3.1 permite a los atacantes remotos la ejecución de comandos SQL de su elección a través del parámetro cid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplog:simplog:0.9.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB130338-5151-4A86-B9B5-D0BDFACDF5D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449092/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20556",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.simplog.org/archive.php?blogid=1&pid=57",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449092/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.simplog.org/archive.php?blogid=1&pid=57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the g_rb_basedir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en classes/Import_MM.class.php de PHPRecipeBook 2.36, cuando register_globals está habilitado, permite a los atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro g_rb_basedir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phprecipebook:phprecipebook:2.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE89285-763C-402E-8BCE-DEE24CE7E4D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22427",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449116/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449130/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449236/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20575",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4051",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449116/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449130/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449236/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP forum/track.php en CyberBrau 0.9.4, cuando el registro global está habilitado, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una ULR en el parámetro path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberbrau:cyberbrau:0.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0912FFEE-0BC3-4E7A-A208-C956BC8DA138"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20555",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php in AROUNDMe 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP template/barnraiser_01/p_new_password.tpl.php en AROUNDMe 0.5.2 y anteriores, permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro templatePath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aroundme:aroundme:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.2",
            "matchCriteriaId" : "8DB7305F-2211-4CB0-AA56-D1FFE2AB14AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aroundme:aroundme:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13AE3717-1C78-400A-898F-8CCBF0BE6AC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20553",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29555",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2562",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-18T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) class_path, (2) javascript_path, and (3) include_path parameters in (a) cart.php; the (4) class_path parameter in (b) index.php; the (5) javascript_path parameter in (c) edit.php; the (6) include_path parameter in (d) circ.php; unspecified parameters in (e) select.php; and unspecified parameters in other files."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inclusión remota PHP en PHPmybibli 3.0.1 y anteriores permiten a atacantes remotos ejecutar arbitrariamente codigo PHP code mediante una URL en el (1) class_path, (2) javascript_path, y (3) los parámetros include_path en (a) cart.php; el parámetro (4) class_path en (b) index.php; el parámetro (5) javascript_path en (c) edit.php; el parámetro (6) include_path en (d) circ.php; parámetros no especificados en (e) select.php; y parámetros no especificados en otros archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmybibli:phpmybibli:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "824B31CD-4584-4FA4-901A-A657EF62CB9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv55-theday-2006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001087.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001088.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=116110988829381&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20578",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.sigb.net/patch.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4064",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv55-theday-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001087.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001088.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=116110988829381&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.sigb.net/patch.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-19T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de buffer basado en pila en el Control de ActiveX usado en Symantec Automated Support Assistant, como el usado en el AntiVirus Norton, en Internet Security y System Works 2005 y 2006, permite a los atacantes remotos con la complicidad del usuario, causar la denegación de servicio (caída) y la posibilidad de ejecutar código de su elección mediante vectores no definidos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:automated_support_assistant:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B0CDB6-4DB2-4F75-B408-7E8EC39446FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A58C09D-72A0-48E1-ABF0-49EBECA5D02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F670F0-FD5D-447C-94B8-691482D907F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EB078C-2538-4961-ABFF-6C4601C3977F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22228",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/400601",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20348",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29363",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/400601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-19T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el Control de ActiveX usado en Symantec Automated Support Assistant, como el usado en el AntiVirus Norton, en Internet Security y System Works 2005 y 2006, permite a los atacantes remotos, con la complicidad del usuario, obtener información sensible mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:automated_support_assistant:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B0CDB6-4DB2-4F75-B408-7E8EC39446FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A58C09D-72A0-48E1-ABF0-49EBECA5D02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F670F0-FD5D-447C-94B8-691482D907F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EB078C-2538-4961-ABFF-6C4601C3977F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22228",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016988",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016990",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1016991",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20348",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29366",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1016988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1016991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/3929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-19T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Toshiba Bluetooth wireless device driver 3.x and 4 through 4.00.35, as used in multiple products, allows physically proximate attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via crafted Bluetooth packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el driver del dispositivo de wireless del Toshiba Bluetooth para las versiones 3.x y 4, hasta la 4.00.35, como el usado en múltiples productos, permite a los atacantes, físicamente próximos causar la denegación de servicio (caída), corrupción de la memoria y la posibilidad de ejecutar código de su elección mediante paquetes Bluetooth artesanales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_wireless_device_driver:3.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D096D3-9FDA-49B9-A5B9-D83CE2F6FD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_wireless_device_driver:4.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F95EE1-2AAB-4185-9F75-53A87C01B425"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001085.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22402",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1744",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.secureworks.com/press/20061011-dell.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448422/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29503",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001085.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.secureworks.com/press/20061011-dell.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448422/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-19T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Passgo Defender 5.2 creates the application directory with insecure permissions (Everyone/Full Control), which allows local users to read and modify sensitive files.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Passgo Defender 5.2 ha creado el directorio de aplicación con permisos inseguros (Todos / Control Total), que permite a los usuarios locales leer y modificar ficheros con información sensible. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:passgo:defender:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68103F8C-E38C-407D-AB33-ABEE51BA7337"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22271",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29657",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-19T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP open_form.php en osTicket permite a los atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro include_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osticket:osticket:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C169B21F-7FA1-47F6-808F-3F428E4A031E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448687/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448687/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to inject arbitrary HTML or web script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la interfaz de dirección del IDS wireless para Highwall Enterprise and Highwall Endpoint 4.0.2.11045 permite a un atacante remoto inyectar HTML de su elección o secuencias de comandos web a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilesecure_inc:highwall_endpoint:4.0.2.11045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC57F68-44FF-4B06-8075-1E5FB0A15F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilesecure_inc:highwall_enterprise:4.0.2.11045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E9E173-BF45-4F8E-9235-56A50DF4440E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449118/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449118/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en la interfaz de dirección de IDS wireless para Highwall Enterprise and Highwall Endpoint 4.0.2.11045 permite a un atacante remooto ejecutar comandos SQL de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilesecure_inc:highwall_endpoint:4.0.2.11045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC57F68-44FF-4B06-8075-1E5FB0A15F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilesecure_inc:highwall_enterprise:4.0.2.11045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E9E173-BF45-4F8E-9235-56A50DF4440E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22494",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449118/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449118/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter.  NOTE: it is possible that this issue overlaps CVE-2006-4189."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en templates/tmpl_dfl/scripts/index.php en BoonEx Dolphin 5.2 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro dir[inc]. NOTA: es posible que este asunto se solape con CVE-2006-4189."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boonex:dolphin:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86A7F76-8D3D-4765-92FE-FB1C01429AF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449090/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20576",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449090/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register globals\" is enabled and that \"magic quotes\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de actualización de archivo no restrictiva en upload.php para Free Web Publishing System (FreeWPS), posiblemente 2.11 y anteriores, permite a un atacante remoto actualizar y ejecutar programas PHP de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justin_white:freewps:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11",
            "matchCriteriaId" : "F3CCC1EB-B57A-4A52-8D0E-B6BBF61011F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/19343",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447870/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/19343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/447870/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5412",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "admin.php in PHP Outburst Easynews 4.4.1 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication, and gain the ability to execute arbitrary code, via the en_login_id parameter."
      }, {
        "lang" : "es",
        "value" : "admin.php en PHP Outburst Easynews 4.4.1 y anteriores, cuando register_globals está habilitado, permite a un atacante remoto evitar la validación, y obtener la habilidad de ejecutar código de su elección, a través del parámetro en_login_id."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_outburst:easynews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.1",
            "matchCriteriaId" : "884D8C7C-FAD7-4DF6-AC95-9F46154DBECD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22466",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20596",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4085",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2588",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to (1) Offline.php, (2) Sources/Admin.php, (3) Sources/Offline.php, or (4) content/portalshow.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en SuperMod 3.0.0 para YABB (YaBBSM) permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro sourcedir en(1) Offline.php, (2) Sources/Admin.php, (3) Sources/Offline.php, o(4) content/portalshow.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supermod:supermod:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B0DBB2-F40C-4D49-9004-70AA3DA30139"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22437",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20568",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29559",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL."
      }, {
        "lang" : "es",
        "value" : "Barry Nauta BRIM anterior a 1.2.1 permite a un usuario remoto validado leer información de otros usuarios a través de una URL modificada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "5BA79126-B62C-46A6-9DC1-B9AB3818E877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC5BCF1-3DBD-4C4F-8661-628CEB4DC08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.0.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD99B2F-0E8D-4170-B470-CA4E236FD4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB62A6F2-E7CB-43EA-9A6F-59A1D754AEBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B277DC39-E9AC-46E5-AF31-7D200DEBF41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23865471-852A-46BE-9EB9-3116E02A5016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E874BD0A-D51F-4105-89F5-29C8CAA3F1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604931E6-8DD0-4215-83AB-1CE28AC9602A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.1.2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7570E3D4-2B93-4045-A3B5-062D7994DA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0BC38B8-605E-4C6F-8AF6-725BC4A912D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D81CBD-B7CD-43A2-921E-BEDEB08A782E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.2.0_pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7206ADEE-BB98-45EE-A90E-56780871247D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.2.0_pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2461A28-E45E-41F6-858C-2148CD7658EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:1.2.0_pre3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E41916-F9DD-41CA-9FA7-CC0950D46EAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22454",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=624172",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=624172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante Horizontale 4.1.1 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en includes/functions_newshr.php en the News Defilante Horizontale 4.1.1 y anteriores, el módulo para phpBB permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:news_defilante_horizontale:news_defilante_horizontale:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0DEDB9-F94A-4CC0-8775-9031F3E7133E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22434",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448655/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20233",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4079",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29570",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2545",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448655/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en my.acctab.php3 en F5 Networks FirePass 1000 SSL VPN 5.5, y posiblemente anteriores, permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro sid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:f5:firepass_1000:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F3EF99-A4E9-4B2F-94F9-0FEB3BF4282F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22444/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.procheckup.com/Vulner_PR0603b.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448935/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20583",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22444/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.procheckup.com/Vulner_PR0603b.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448935/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firewall Plus, and VirusScan, allows remote attackers to cause a denial of service (agent crash) via a long packet, possibly because of an invalid string position field value.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "McAfee Network Agent (mcnasvc.exe) 1.0.178.0, según lo utilizado por múltiples productos McAfee posiblemente incluyendo Internet Security Suite, Personal Firewall Plus, y VirusScan, permiten a un atacante remoto provocar denegación de servicio (caida del agente) a través de un gran paquete, posiblemente a causa de un valor de posición de cadena inválido. NOTA: algunos de los detalles de esta información se obtuvieron de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:internet_security_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C68CA8-9525-4FBA-A873-F17524D3F595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:network_agent:1.0.178.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB41A7D-90D1-4B5F-9DF5-24908F04B9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:personal_firewall_plus:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CA26D8-35B1-458C-A9CA-60B033992520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:virusscan:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B6140F3-9135-4490-A2A2-F8D0A1FEF8C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22371",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1659/exploit.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1750",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448546/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20496",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29501",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitydot.net/xpl/exploits/vulnerabilities/articles/1659/exploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448546/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer) (aka phpBBSEI) for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en archive/archive_topic.php en pbpbb para los motores de búsqueda (SearchIndexer) (también conocido como phpBBSEI) para phpBB permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb:searchindexer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F6527A-07AE-4E2E-BBDA-367F452C3954"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22443",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448621/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20571",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4037",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448621/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en client.php en University of Glasgow Specimen Image Database (SID), cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en parámetro dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_glasgow:specimen_image_database:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18B6770-D819-4A78-A77F-3CC685B37110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22447",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20574",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4063",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DNS responses."
      }, {
        "lang" : "es",
        "value" : "Kerio WinRoute Firewall 6.2.2 y anteriores permite a un atacante remoto provocar denegación de servicio (caida) a través de respuestas DNS mal formadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.2",
            "matchCriteriaId" : "54221EFB-1376-41CC-85D5-F0CA06C838B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E5A18A-572A-4914-8AC7-AEF02C760574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5158D0-ED2B-4716-8A81-385562566A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53C7737-404A-4EB3-9A1B-0091116D8CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A47DCB-50D3-4CC0-874C-39FF8D09B2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE437407-E9D3-41A7-B5BF-62CD861B3830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810364F5-B6FA-47A2-A5DE-F886CEF1ED70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE280A4-C218-4D2F-88E3-718F19F0E4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A591237E-DBA8-42F3-B4A2-BFD537AE0A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC5DAFA-24B9-4C5D-8F7B-9DDDDFAA2342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E56C041A-5D92-4B7F-9962-A083E883EA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7223D79B-F096-4265-8D80-F5A41E5A1B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9F17CE-B48E-45A2-BFC9-0D27AF032F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D33CD1F-105E-43CC-B135-76E0AC8CACD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95F501CC-BD8E-460F-9251-B492C979676E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84BE69E-9760-4ABE-A8C6-C96AD4ACB56A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD36E240-FDBB-4EB8-B2C2-7B59715EEDF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD7AF9A-54CD-4D15-9D41-D740CC48FF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D7D55B-887B-479D-9067-0CE457C25561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705BC91B-4583-418D-BF68-B219BC04EB42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1D191B-ACAF-4871-B553-A55F99827EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7727351-0ED7-45DD-82DE-0FEE92699927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563E83E1-74C0-4312-A5C5-0223ADE55F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AC89E5-8B9C-4C6B-8976-6A4A6F922858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADAAD5F-3286-464E-A309-9454EE9A663F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1437DE-E19A-4C2C-9077-DB1FF48772C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0089BE-856D-4998-BBFE-1F626A43377E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE81F49-05CE-4987-90C0-B6D077B65DD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "650E19BC-6545-45E9-BE2B-0900323C80C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173804A3-04EE-484B-A0CF-8DFFE060EFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9DC6F1-3DB7-48B3-8202-66450B95C0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D06E900-7F9A-4BF0-8411-718AEBFCF8AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A07C4B-8A49-4126-A957-B16B5A79582B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDFD255-A906-4902-9845-C33669CF9795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D0B5DC-4E24-4BCE-B58B-A1DCE2739E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA93A50-82A0-4965-A905-42A04DF3F0B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.4_patch_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15AA2B44-367D-44FE-AC99-EC91D3C59A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.1.4_patch_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BA5725-C0C4-435B-A0CD-3A432CEF36C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1622AFA-C603-4621-82BA-D6D8041341FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kerio:winroute_firewall:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62958722-577C-4AD3-B628-94062AE501AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017067",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20584",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29629",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kerio.com/kwf_history.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to 6.2.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from prestart.php.  NOTE: this issue has been labeled remote file inclusion, but that label only applies to the attack, not the underlying vulnerability."
      }, {
        "lang" : "es",
        "value" : "WSN Forum 1.3.4 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una nombre de camino modificado en el parámetro pathtoconfig que apunta a una imagen avatar que contiene código PHP, lo cual se alcanza desde prestart.php. NOTA: este asunto ha sido etiquetado en la inclusión remota de archivo, pero la etiqueta solo se aplica al ataque, no a la vulnerabilidad subrayada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wsn_forum:wsn_forum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "41620178-2429-4DF1-803B-89140DE8E476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22360",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4081",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2583",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5422",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T14:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in calcul-page.php in Lodel (patchlodel) 0.7.3 allows remote attackers to execute arbitrary PHP code via a URL in the home parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en calcul-page.php en Lodel (patchlodel) 0.7.3 permite a un atacante remoto ejecutar código PHP a través de una URL en el parámetro home."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lodel:lodel_cms:0.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCDBB2E-E152-43AD-97C4-9627330C5CAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=116104206220783&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22429",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20551",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4082",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=116104206220783&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5423",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/admin_module.php in Lou Portail 1.4.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the g_admin_rep parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en admin/admin_module.php en Lou Portail 1.4.1, y posiblemente anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro g_admin_rep. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lou_portail:lou_portail:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E0EFE7-79C2-471F-97C6-5BC48C34DD28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22461",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4087",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Justsystem Ichitaro 2006, 2006 trial version, and Government 2006 allows remote attackers to execute arbitrary code via a modified document, possibly because of a buffer overflow, a different vulnerability than CVE-2006-4326."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Justsystem Ichitaro 2006, 2006 trial version, y Government 2006 permite a un atacante remoto ejecutar código de su elección a través de un documento modificado, posiblemente a causa de un desbordamiento de búfer, una vulnerabilidad diferentes que CVE-2006-4326."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:2006:*:*:*:*:*:*:*",
            "matchCriteriaId" : "038FB1DB-00F3-4761-A6F4-551360CF7983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:2006_government_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5423BEFF-4CE7-4A76-85D8-5D47ABA9C73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystem:ichitaro:2006_trial_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8254332-81D6-456A-8D72-CDFA4B73B912"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2390815371/index.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22386",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.justsystem.co.jp/info/pd6004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4092",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2390815371/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.justsystem.co.jp/info/pd6004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5425",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XORP (eXtensible Open Router Platform) 1.2 and 1.3 allows remote attackers to cause a denial of service (application crash) via an Open Shortest Path First (OSPF) Link State Advertisement (LSA) with an invalid LSA length field."
      }, {
        "lang" : "es",
        "value" : "XORP (eXtensible Open Router Platform) 1.2 y 1.3 permite a un atacante remoto provocar denegación de servicio (caida de aplicación) a través de un Open Shortest Path First (OSPF) Link State Advertisement (LSA) con un campo de longitud LSA no válido."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xorp:extensible_open_router_platform:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E17E18-346C-428A-B1C2-30B5B98D7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xorp:extensible_open_router_platform:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE90B86D-D534-44F1-9866-E4BAF37D1378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.musecurity.com/advisories/MU-200610-01.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116115975806681&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22462",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017079",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20597",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4107",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.xorp.org/advisories/XORP_SA_06:01.ospf.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29658",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.musecurity.com/advisories/MU-200610-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116115975806681&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.xorp.org/advisories/XORP_SA_06:01.ospf.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5426",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en lib/lcUser.php en LoCal Calendar System 1.1 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro LIBDIR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:local_calendar_system:local_calendar_system:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109FECBA-97EA-4E17-8076-7B33470F817B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22484",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20619",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29665",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2595",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5427",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plug_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en plugins/main.php en Php AMX 0.9.0, cuando register_globals está habilitado o magic_quotes_gpc está deshabilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro plug_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_amx:php_amx:0.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ECDF63-7B90-447E-BAC8-DE74CB8FADBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22455",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20601",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4088",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2591",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5428",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information (ticket data) via a direct request."
      }, {
        "lang" : "es",
        "value" : "rpc.php en Cerberus Helpdesk 3.2.1 no verifica los privilegios de un cliente para una operación display_get_requesters, lo cual permite a un atacante remoto evitar la validación GUI y obtener información sensible (ticket data) a través de una respuesta directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerberus:cerberus_helpdesk:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8A240E-429C-4DB9-B989-97C733617864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forum.cerberusweb.com/showthread.php?t=7922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22418",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4089",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forum.cerberusweb.com/showthread.php?t=7922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5429",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter in template.tpl.php in (1) templates/barrel/, (2) templates/sidebar/, (3) templates/text-only, (4) templates/slashdot/, (5) templates/penguin/, (6) templates/pda/, (7) templates/oerdec/, (8) templates/nifty/, (9) templates/mylook, and (10) templates/barry/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Barry Nauta BRIM 1.2.1 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro renderer en template.tpl.php en (1) templates/barrel/, (2) templates/sidebar/, (3) templates/text-only, (4) templates/slashdot/, (5) templates/penguin/, (6) templates/pda/, (7) templates/oerdec/, (8) templates/nifty/, (9) templates/mylook, y (10) templates/barry/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:barry_nauta:brim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "E6F94C2B-52E7-478A-8C08-36C2EE71B5F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22465",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20594",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2589",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5430",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the search functionality in db-central (dbc) Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilida de secuencias de comandos en sitios cruzados en la funcionalidad de búsqueda en db-central (dbc) Enterprise CMS y db-central CMS permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro needle. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:db-central:cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A12AE3-F432-4F16-84D5-9A0773060E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:db-central:enterprise_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA43725D-0762-493A-885D-97C7E03DBA42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22407",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29832",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appDirName parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en gorum/dbproperty.php en PHPOutsourcing Zorum 3.5 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro appDirName."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpoutsourcing:zorum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5",
            "matchCriteriaId" : "8224B8CD-59BE-4E55-BCB6-F2B799479AC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1748",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449105/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29648",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449105/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses in the 0x80052110 IOCTL."
      }, {
        "lang" : "es",
        "value" : "El NDIS-TDI Hooking Engine, según lo utilizado en (1) KLICK (KLICK.SYS) y (2) KLIN (KLIN.SYS) en los controladores de dispositivos 2.0.0.281 en Kaspersky Labs Anti-Virus 6.0.0.303 y otros antivirus o productos de seguridad de Internet, permite a un usuario local ejecutar código de su elección a través de un estructura Irp artesanal con una dirección inválida en 0x80052110 IOCTL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0:*:windows_workstations:*:*:*:*:*",
            "matchCriteriaId" : "5897A334-2627-480C-9CF3-85AF3B7650BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:6.0:*:workstations:*:*:*:*:*",
            "matchCriteriaId" : "53049BB1-486B-4C01-A3F5-F900FAD33024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA07931-220A-4FCC-A83D-0C91563385DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal_pro:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64212DE-796D-4D5D-901A-0B5FA40D9C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky_lab:kaspersky_internet_security:6.0:maintenance_pack_2:*:*:*:*:*:*",
            "matchCriteriaId" : "95A787E0-7060-4544-993A-9CB319B6925E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=425",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22478",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017093",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kaspersky.com/technews?id=203038678",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29891",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449289/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449301/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20635",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kaspersky.com/technews?id=203038678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449289/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449301/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is enabled, allow remote attackers to create or overwrite arbitrary files via the (1) email[to], (2) email[from], (3) name[to], (4) name[from], (5) picture, (6) comment, or (7) sessionID parameter, as demonstrated by creating a new .php file that permits remote file inclusion, and then requesting this file."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de código estático directo en  db/txt.inc.php en phpPowerCards 2.10, cuando register_globals está habilitado, permite a un atacante remoto crear o sobreescribir archivos de su elección a través de los parámetros (1) email[to], (2) email[from], (3) name[to], (4) name[from], (5) picture, (6) comment, o (7) sessionID, como se demostró con la creación de un nuevo archivo .php que permite la inclusión de archivos remotos, y la respuesta de este archivo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_giombetti:phppowercards:2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6444D8-3351-4A60-A320-675E16132471"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22471",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29840",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20620",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5433",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[local_root] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en modules/guestbook/index.php en ALiCE-CMS 0.1 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro CONFI[local_root]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timm_maass:alice_cms:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1B3DF0-76EA-4ECD-B9DA-5CD15A92E02A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20585",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2582",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5434",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pn_lang parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en p-news.php en P-News 1.16 y 1.17 permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro pn_lang."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:p-news:p-news:1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB55570-130E-4F94-A460-EA9D5BF46AB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:p-news:p-news:1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC1BE47-6987-4644-A167-C850495FE869"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20569",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5435",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: CVE and the vendor dispute this vulnerability because $phpbb_root_path is defined before use"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad PHP de inclusión remota de archivo en groupcp.php en phpBB 2.0.10 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámeto phpbb_root_path. NOTA: el CVE y el fabricante niegan esta vulnerabilidad porque $phpbb_root_path se define antes de usarlo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.10",
            "matchCriteriaId" : "44059D10-0F41-4F22-B3FD-7DAF1D89CD72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/449114/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449232/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449114/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449232/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in FreeFAQ 1.0.e allows remote attackers to execute arbitrary PHP code via a URL in the faqpath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en FreeFAQ 1.0.e permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro faqpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freefaq:freefaq:1.0.e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1D7A1F-6431-42E5-9532-1202A5819D4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/freefaq-0.9.e-rfi.pl",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://downloads.securityfocus.com/vulnerabilities/exploits/freefaq-0.9.e-rfi.pl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the phpAds_config[language] parameter.  NOTE: this issue could not be reproduced by a third party"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDA ** Vulnerabilidad de directorio transversal en upgrade.php en phpAdsNew 2.0.8 permite a un atacante remoto leer ficheros de su elección a través de una secuencia .. (punto punto) en el parámetro phpAds_config[language]. NOTA: este asunto no se podía reproducir por terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:2.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E591A4-E188-41AA-BB4D-904714B1065F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/archive/1/448994/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449084/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448994/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449084/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5438",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en adminfoot.php en Comdev Forum 4.1, cuanto register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro path[docroot]. NOTA: el origen de esta información es desconocida; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_forum:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A28C7AA-A5C0-49A4-B1DD-19A6844E70E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22464",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5439",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en adminfoot.php en Comdev Misc Tools 4.1, cuando register_globals está habilitado, permite a un atacante remto ejecutar código PHP de su elección a través de una URL en el parámetro path[docroot]. NOTA: el origen de esta información es desconocida; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_misc_tools:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF49F6A1-72EA-4232-AE9D-D7B4734CDA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22470",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4101",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5440",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in adminfoot.php in Comdev Form Designer 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusion remota de archivo en adminfoot.php en Comdev Form Designer 4.1, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro path[docroot]. NOTA: el origen de esta información es desconocida; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_form_designer:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C685EC5-8D46-4D14-9FE7-2A1D541F66BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22459",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4103",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5441",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-20T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in adminfoot.php in Comdev Web Blogger 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en adminfoot.php en Comdev Web Blogger 4.1, cuando register_globals está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro path[docroot]. NOTA: el origen de esta información es desconocido; los detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comdev:comdev_web_blogger:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "231947F8-A905-4E32-9B24-CF6D9B933992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22433",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4102",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-21T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ViewVC 1.0.2 and earlier does not specify a charset in its HTTP headers or HTML documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks that inject arbitrary UTF-7 encoded JavaScript code via a view."
      }, {
        "lang" : "es",
        "value" : "ViewVC 1.0.2 y anteriores no especifica un charset en su cabecera HTTP o documentos HTML, lo cual permite a un atacante remoto llevar a cabo un ataque de secuencias de comandos en sitios cruzados que inyectan código JavaScript UTF-7 de su elección a a través de una vista."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "D9D23550-3CE0-4F00-A359-88B2893E9D1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22395",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://viewvc.tigris.org/servlets/ReadMsg?list=announce&msgNo=5&raw=true",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_102006.134.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448762/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20543",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29576",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://viewvc.tigris.org/servlets/ReadMsg?list=announce&msgNo=5&raw=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_102006.134.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448762/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in XIAO Gang WWW Interactive Mathematics Server (WIMS) before 3.60 allows remote attackers to modify unspecified data via unspecified vectors involving \"variable rights.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en XIAO Gang WWW Interactive Mathematics Server (WIMS) anterior a 3.60 permite a atacantes remotos modificar datos no especificados mediante vectores no especificados relacionados con \"derechos variables\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.56",
            "matchCriteriaId" : "877D905B-336C-4F11-995A-1A9998E12D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A4F850-D764-47FC-8E94-E09610992F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2AE12D-EE49-4596-9D20-254847B06A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6C8819-AA85-428B-B074-B9FE9F5263F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B3582B-1A17-4F33-BBE6-9E6D5B2045DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5F35DF-0157-49E8-8674-4B5145290CEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F9D737-D16A-465A-AD00-5654DC2E7EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2720D11-CAAD-4949-9470-941907FFAE18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiao_gang:www_interactive_mathematics_server:3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79496C31-102C-4380-A02F-D646F26DC858"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://freshmeat.net/projects/wims/?branch_id=11538&release_id=238917",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22415",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29668",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://freshmeat.net/projects/wims/?branch_id=11538&release_id=238917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nXIAO Gang, WWW Interactive Mathematics Server, 3.60"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función get_input en el controlador de canal Skinny (chan_skinny.c) en Asterisk 1.0.x anteriores a 1.0.12 y 1.2.x anteriores a 1.2.13, utilizados en los teléfonos Cisco SCCP, permite a atacantes remotos ejecutar código de su elección mediante un cierto valor dlen que pasa una comparación de entero con signo y lleva a un desbordamiento de búfer basado en montón."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C08E661-23D9-437F-844F-6BE8183CF3CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D030C12-C2C6-4714-B776-2EF7ECF1A591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5A8210-2E7C-465C-9751-CB362AADC224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.1.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82621C2B-B5F0-4E70-A619-0213005DADB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9750B74B-F766-4869-880B-4E5E41D90533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DCA1D9-0D47-4F0A-A78F-F85FADE0C9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC453F5-C46A-45E9-B7DE-3C5BF752F305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23472323-E37F-4946-A0D6-DB7FB96E9388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC9C13-ADDD-4F09-B977-EE0DEF598B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C20296F-F70A-4D3C-A062-B6054617841C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7FF734-C669-4944-B813-2B18C206D5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120823D3-72A0-41A2-8BEB-984B3FC5E4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C60C04-EF59-4F5C-96E5-A6E693EA9A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3636BB44-DF4D-40AB-8EBB-1EC5D911E4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B3C254-29D9-4911-89A9-AC0CD9EB13F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8679FD-B2E5-46F6-B20C-F109B9706C63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E951589C-CF17-49C7-B12E-303AD07800E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C619138A-557F-419E-9832-D0FB0E9042C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6656EA0-4D4F-4251-A30F-48375C5CE3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAD9104-BA4A-478F-9B56-195E0F9A7DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F06C361-D7DF-474B-A835-BA8886C11A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175954A5-E712-41B8-BC11-4F999343063D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF9E41E-8FE6-4396-A5D4-D4568600FE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4457486F-E9B4-46B8-A05D-3B32F8B639A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FAB63F-B9F8-4D39-AEE9-BC0E54BAA944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC20315-40B5-4DA1-AC49-E911C03AEA6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.0.12",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050171.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22480",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017089",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.asterisk.org/node/109",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/521252",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_69_asterisk.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29972",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449127/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449183/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20617",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29663",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.0.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050171.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.asterisk.org/node/109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/521252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_69_asterisk.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449127/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Failed exploit attempts will likely crash the server, denying further service to legitimate users.\r\nThis vulnerability is addressed in the following product releases:\r\nAsterisk, Asterisk, 1.0.12 or later\r\nAsterisk, Asterisk, 1.2.13 or later"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5445",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors that result in the creation of \"a real pvt structure\" that uses more resources than necessary."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el controlador de canal SIP  (channels/chan_sip.c) en ASterisk 1.2.x anteriores a 1.2.13 y 1.4.x aneriores a 1.4.0-beta3 permite a atacantes remotos provocar una denegación de servicio (agotamiento de recursos) a través de vectores no especificados que resultan en la creación de una \"estructura pvt real\" que usa más recursos de los necesarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4042CC21-F3CB-4C77-9E60-AF8AA9A191C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C656168D-7D6A-4E84-9196-A8B170E1F7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C619138A-557F-419E-9832-D0FB0E9042C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6656EA0-4D4F-4251-A30F-48375C5CE3E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAD9104-BA4A-478F-9B56-195E0F9A7DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F06C361-D7DF-474B-A835-BA8886C11A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "175954A5-E712-41B8-BC11-4F999343063D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DF9E41E-8FE6-4396-A5D4-D4568600FE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4457486F-E9B4-46B8-A05D-3B32F8B639A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.2.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69417F54-D92F-46FB-9BFA-995211279C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E56DB29-571D-4615-B347-38CF4590E463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.4.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B909947-44E3-463E-9FAD-76C8E21A54E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:1.4.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB2F8AA-B70B-4280-BDBD-023037C16D70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.asterisk.org/node/109",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.asterisk.org/node/110",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_69_asterisk.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29973",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449183/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20835",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.asterisk.org/node/109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.asterisk.org/node/110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_69_asterisk.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nDigium, Asterisk, 1.4.0-beta2\r\nDigium, Asterisk, 1.2.13"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5446",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en lobby/config.php en Casinosoft Casino Script (aka Masvet) 3.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cfam."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:casinosoft:casino_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADB6636-FD98-46DD-8D02-02346E3A59F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22398",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20646",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitylab.ru/forum/read.php?FID=16&TID=23884",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitylab.ru/forum/read.php?FID=16&TID=23884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5447",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in DEV Web Management System (WMS) 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en DEV Web Management System (WMS) 1.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro action."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dev:dev_web_management_system:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B658A3-65E9-473F-871B-C963E14B9889"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449121/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20590",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.x0n3-h4ck.org/index.php?name=news&article=139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449121/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.x0n3-h4ck.org/index.php?name=news&article=139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "URL Repurposed" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5448",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long parameter to the StoreLicense function, which triggers \"memory corruption\" and possibly a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "El objeto ActiveX drmstor.dll en Microsoft Windows Digital Rights Management System (DRM) permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un parámetro largo en la función StoreLicense, lo cual desencadena una \"corrupción de memoria\" y posiblemente un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_digital_rights_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4435AC-20CA-4039-9398-A0BAD55B1415"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448097/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448097/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5449",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule."
      }, {
        "lang" : "es",
        "value" : "procmail en el módulo Horde de Ingo H3 anterior a 1.1.2 permite a usuarios autenticados remotamente ejecutar comandos de su elección mediante metacaracteres de línea de comandos en el buzón destino de una regla de filtro."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:ingo_h3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "ECB328D4-BF56-48EF-A59B-294A2C0DEA75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.horde.org/ticket/?Horde=6ed1a009f3396864553976a45948339e&id=4513",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000296.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22482",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1204",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-22.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20637",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.horde.org/ticket/?Horde=6ed1a009f3396864553976a45948339e&id=4513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://lists.horde.org/archives/announce/2006/000296.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-22.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nHorde, Ingo, 1.1.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to execute arbitrary SQL commands via the (1) txtUsername (user) or (2) txtPassword (pass) parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en index.asp en Kinesis Interactive Cinema System (KICS) CMS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) txtUsername (usuario) o (2) txtPassword (contraseña)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kinesis:kinesis_interactive_cinema_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7231BEA-8AA7-475C-AE7D-C2306E5104D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449227/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20607",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4130",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449227/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5451",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) file, and (3) users array variables in (a) admin.php, which are not properly handled when the administrator views the Activity Log; and the (4) torrent parameter, as used by the displayName variable, in (b) startpop.php, different vectors than CVE-2006-5227."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TorrentFlux 2.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante las variables de tipo array (1) action, (2) file, y (3) users en (a) admin.php, las cuales no son manejadas adecuadamente cuando el administrador mira el registro de actividad (Activity Log); y el parámetro (2) torrent, tal y como se usa en la variable displayName, en (b) startpop.php, vectores diferentes de CVE-2006-5227."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrentflux:torrentflux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA636773-F5FC-4051-BBA7-06F433A4E2D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448619/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448947/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448948/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448952/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20534",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/13/torrentflux-startpopphp-torrent-script-insertion/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/17/torrentflux-action-script-insertion/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/17/torrentflux-file-script-insertion/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/17/torrentflux-user_id-script-insertion/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4043",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29592",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448619/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448947/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448948/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448952/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/13/torrentflux-startpopphp-torrent-script-insertion/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/17/torrentflux-action-script-insertion/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/17/torrentflux-file-script-insertion/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.stevenroddis.com.au/2006/10/17/torrentflux-user_id-script-insertion/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5452",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en dtmail en HP Tru64 UNIX 4.0F hasta 5.1B, y HP-UX B.11.00 hasta B.11.23 permite a usuarios locales ejecutar código de su elección mediante un argumento -a (o attachment) muy largo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8BA552-394A-4E06-8CAD-24A2F542FD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:4.0f:pk8:*:*:*:*:*:*",
            "matchCriteriaId" : "884D55C0-F5EB-484E-8886-1C6C12320BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:4.0g:pk4:*:*:*:*:*:*",
            "matchCriteriaId" : "5A788DB8-B738-4498-9C0B-68FCB92086F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5840611-A108-48EE-9D5A-4B6DA0621FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "684BEA17-3BFC-4C30-9E8A-411D9D057354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1a:pk6:*:*:*:*:*:*",
            "matchCriteriaId" : "BA274FCB-748E-4EEB-9C77-DD5DF1ABB303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1af:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1839F0EE-84D7-4055-A044-5AB5E350225E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1b:pk1:*:*:*:*:*:*",
            "matchCriteriaId" : "7ABA8226-9F76-4D11-9C5E-7563B7774952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1b2:pk4:*:*:*:*:*:*",
            "matchCriteriaId" : "91D70045-53B0-477E-BEA2-6B04808785DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:tru64:5.1b3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02E8BEA-D9EC-4375-917F-BAF20CA79FD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00793091",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22528",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017083",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017098",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017099",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.netragard.com/pdfs/research/HP-TRU64-DTMAIL-20060810.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449321/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20580",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4140",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5175",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00793091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://securitytracker.com/id?1017099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.netragard.com/pdfs/research/HP-TRU64-DTMAIL-20060810.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449321/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5453",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header.html.tmpl, (2) description fields of certain items in various edit cgi scripts, and (3) the id parameter in showdependencygraph.cgi."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Bug<illa 2.18.x anteriores a 2.18.6, 2.20.x anteriores a 2.20.3, 2.22.x anteriores a 2.22.1, y 2.23.x anteriores a 2.23.3 permiten a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elección mediante (1) cabeceras de página usando las etiquetas HTML H1, H2, H3 en global/header.html.tmpl, (2) campos de descripción de determinados objetos en varias secuencias de comandos cgi de edición, y (3) el parámetro id en showdependencygraph.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BCD546-2A50-4F43-935C-B68459EE894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C535BAB7-6146-440B-ADBD-51007585CFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA9DE63-9951-4FE0-80BE-0F6F197303D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2969731-8256-431B-9356-4BC873D98F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02846865-D124-4C72-85C8-59A7C6F43E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B59422-ED6E-4F82-8D0C-091058D1C438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F658844A-6253-4A18-8A5D-1E818BE7A367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017063",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29544",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29545",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29549",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448777/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=206037",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=330555",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=355728",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29610",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29619",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448777/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=206037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=330555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=355728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product releases:\r\nMozilla, Bugzilla, 2.18.6\r\nMozilla, Bugzilla, 2.20.3\r\nMozilla, Bugzilla, 2.22.1\r\nMozilla, Bugzilla, 2.23.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attackers to obtain (1) the description of arbitrary attachments by viewing the attachment in \"diff\" mode in attachment.cgi, and (2) the deadline field by viewing the XML format of the bug in show_bug.cgi."
      }, {
        "lang" : "es",
        "value" : "Bugzilla 2.18.x anteriores a 2.18.6, 2.20.x anteriores a 2.20.3, 2.22.x anterioers a 2.22.1, y 2.23.x anteriores a 2.23.3 permiten a atacantes remotos obtener (1) la descripción de  adjuntos de su elección viendo el adjunto en modo \"diff\" en attachment.cgi, y (2) el campo fecha límite (deadline) viendo el formato XML del \"bug\" en show_bug.cgi."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4869A709-AF79-49BD-A7D2-D48A8D79A085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EAC72143-27C3-498F-AFAB-98AE043C0545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5E8E72-D493-460D-B5A0-F90C291398A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04885D31-09F3-455F-A1A9-815E182ABCF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BCD546-2A50-4F43-935C-B68459EE894E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C535BAB7-6146-440B-ADBD-51007585CFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A749C7AB-6F60-469C-BD95-759205DDA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "196B7CD8-D721-4CFB-B126-78758128E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA9DE63-9951-4FE0-80BE-0F6F197303D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2969731-8256-431B-9356-4BC873D98F6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02846865-D124-4C72-85C8-59A7C6F43E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B59422-ED6E-4F82-8D0C-091058D1C438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F658844A-6253-4A18-8A5D-1E818BE7A367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017064",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29546",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29547",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448777/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=346086",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=346564",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448777/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=346086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=346564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMozilla, Bugzilla, 2.18.6 \r\nMozilla, Bugzilla, 2.20.3 \r\nMozilla, Bugzilla, 2.22.1\r\nMozilla, Bugzilla, 2.23.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and 2.23.x before 2.23.3 allows user-assisted remote attackers to create, modify, or delete arbitrary bug reports via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en editversions.cgi en Bugzilla anterior a 2.22.1 y 2.23.x anteriores a 2.23.3 permite a atacantes remotos con intervención del usuario crear, modificar o borrar informes de \"bugs\" de su elección mediante una URL creada artesanalmente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.22.1",
            "matchCriteriaId" : "ACEA1C05-D6EA-4C54-A9F3-9896121D00FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02846865-D124-4C72-85C8-59A7C6F43E2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B59422-ED6E-4F82-8D0C-091058D1C438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F658844A-6253-4A18-8A5D-1E818BE7A367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22409",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29548",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448777/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20538",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=281181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29618",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.bugzilla.org/security/2.18.5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448777/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=281181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMozilla, Bugzilla, 2.22.1\r\nMozilla, Bugzilla, 2.23.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5456",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en GraphicsMagick anterior a 1.1.7 e ImageMagick 6.0.7 permiten a atacantes con intervención del usuario provocar una denegación de servicio y posiblemente ejecutar código de su elección mediante (1) una imagen DCM que no es manejada adecuadamente por la función ReadDCMImage en coders/dcm.c, o (2) una imagen PALM que no es manejada adecuadamente por la función ReadPALMImage en coders/palm.c."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.6",
            "matchCriteriaId" : "DC789D21-4F86-4928-AA6E-BB5F289A4846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3834A3-8A7E-4914-A20C-EE694150D044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7E2792-B4BC-4C71-990D-0B7462919568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F2FD22-4058-45D6-8352-0AA6382746C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF103AE-6F15-4F2D-A375-F2AF91171EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65929D5C-31B1-4A70-8E9C-AC6749332480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC45DB14-ABB2-4116-930D-349A81CDB982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC271B0-ACAC-478E-B00B-FFBAAE33B5E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/g/graphicsmagick/graphicsmagick_1.1.7-9/changelog#versionversion1.1.7-9",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22569",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22572",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22601",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22604",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22819",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22998",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23090",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23121",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24186",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24196",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24458",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-07.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-19.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.352092",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1213",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:193",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:041",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_66_imagemagick.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_3_sr.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.osvdb.org/29990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0015.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452718/100/100/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459507/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20707",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-372-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-422-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4170",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4171",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210921",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29816",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1034",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-811",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9765",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packages.debian.org/changelogs/pool/main/g/graphicsmagick/graphicsmagick_1.1.7-9/changelog#versionversion1.1.7-9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22569",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-07.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-19.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.352092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_66_imagemagick.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_3_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452718/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/459507/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-372-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-422-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-1034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nGraphicsMagick, GraphicsMagick, 1.1.7\r\nUnable to identify a patch for ImageMagick.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the registration form in Casinosoft Casino Script (Masvet) 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) surname field."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el formulario de registro en Casinosoft Casino Script (Masvet) 3.2 permiten aatacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo (1) nombre (name) o (2) apellido (surname)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:casinosoft:casino_script:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EADB6636-FD98-46DD-8D02-02346E3A59F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securitylab.ru/forum/read.php?FID=16&TID=23884",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitylab.ru/forum/read.php?FID=16&TID=23884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en common.php en Hinton Design phpht Topsites permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpht_real_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phpht_topsites:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "2D988A6D-4798-4430-AD79-C0873A1091FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22404",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20491",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4023",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29492",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) $_ENGINE[eng_dir] and possibly (2) spaw_root parameters in admin/includes/spaw/spaw_script.js.php, and the (3) $_ENGINE[eng_dir], (4) $spaw_root, (5) $spaw_dir, and (6) $spaw_base_url parameters in admin/includes/spaw/config/spaw_control.config.php, different vectors than CVE-2006-5291.  NOTE: CVE analysis as of 20061021 is inconclusive, but suggests that some or all of the suggested attack vectors are ineffective."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Download-Engine 1.4.2 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en los parámetros (1) $_ENGINE[eng_dir] y posiblemente (2) spaw_root en admin/includes/spaw/spaw_script.js.php, y los parámetros (3) $_ENGINE[eng_dir], (4) $spaw_root, (5) $spaw_dir, y (6) $spaw_base_url en admin/includes/spaw/config/spaw_control.config.php, vectores diferentes de CVE-2006-5291. NOTA: el análisis de CVE a fecha de 21/10/2006 es inconcluyente, pero sugiere que todos o algunos de los vectores de ataque sugeridos son ineficaces."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alex:downloadengine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "BE8CC5F9-F794-47EF-9B0E-59771F6DB0F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448574/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448574/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Hinton Design phpht Topsites allow remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter to (1) index.php, (2) certain other scripts in the top-level directory, and (3) certain scripts in the admin/ directory.  NOTE: CVE disputes this vulnerability because $phpht_real_path is defined before use in index.php and most other files except common.php, which is already covered by CVE-2006-5458"
      }, {
        "lang" : "es",
        "value" : "** DISCUTIDA ** Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Hinton Design phpht Topsites permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpht_real_path en (1) index.php, (2) otros determinados archivos en el directorio de nivel superior, y (3) determinados archivos en el directorio admin/. NOTA: CVE discute esta vulnerabilidad porque $phpht_real_path se define antes de su uso en index.php y la mayoría de los otros archivos excepto common.php, el cual ya está cubierto por CVE-2006-5458."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hinton_design:phpht_topsites:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03ED2D8C-C951-4F1E-A8E4-7E374923DAD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448610/100/100/threaed",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448610/100/100/threaed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-3455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-23T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function."
      }, {
        "lang" : "es",
        "value" : "El controlador de dispositivo SAVRT.SYS, utilizado en Symantec AntiVirus Corporate Edition 8.1 y 9.0.x hasta 9.0.3, y en Symantec Client Security 1.1 y 2.0.x hasta 2.0.3, permite a usuarios locales ejecutar código de su elección mediante una dirección modificada para el argumento de búfer de salida en la función DeviceIOControl."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA2590E-DFB0-4B72-99BC-B49AD97A4969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_build_393:*:*:*:*:*:*:*",
            "matchCriteriaId" : "766C850E-817E-41AB-B0FF-413513548BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB47C16B-5221-4D64-BDB2-65D072A66C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204F2046-F116-45D7-9256-179A3B59886A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0C67C0-3CF1-4BAD-A673-9B783E1D0724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274EA5DA-9519-46DE-B11E-87BDF1978E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044C020A-0BCC-4037-BC32-73385A0BE019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1.1_mr6_b8.1.1.266:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A0176BE-3D55-422B-9FDD-961A00CFAC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:1.1_stm_b8.1.0.825a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3D7305-B8D0-4165-9F0F-50A49142EF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "251E7DE8-4485-438E-B62D-1BF508ECCCF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.1_build_9.0.1.1000:mr1:*:*:*:*:*:*",
            "matchCriteriaId" : "D934F853-C7E0-421E-9AF3-B7B49228722F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "742DB20E-AB26-4CF4-A383-BDCF3FBA448F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.2_build_9.0.2.1000:mr2:*:*:*:*:*:*",
            "matchCriteriaId" : "D608AACF-A4BC-49CE-BE49-E8F3AEF31DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E4BCD7-E441-417A-8C52-E1DE80AD67CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0.3_build_9.0.3.1000:mr3:*:*:*:*:*:*",
            "matchCriteriaId" : "3238894A-3C25-4CC8-A319-8AA7246FEC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0_scf_7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C2D813-C219-4FF3-9C3B-DBB855480492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:client_security:2.0_stm_build_9.0.0.338:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A00A25-A52F-4E9D-AAD0-194171C772FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "3AA02AEB-362B-4A09-92E3-D6D8BB4B6CB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.0.825a:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "3A82AC27-8BE6-47F7-A6EC-F4C21373AA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "ECAA6170-5520-4AA9-8358-5F91FD10420E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "E626F14C-FDE9-4C6A-8CE7-B99CD4FEE485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EC4CFE5A-4D51-405D-B92E-37DE4E617ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "727A116A-D18C-4F3F-A6A8-2C6107FFB8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.366:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EAE76215-2A7E-4D71-8757-AE10E4A9AE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1.377:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "AF45DF9D-D7BE-41AD-A838-0AF9A264EBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4A6612F1-4CA8-427A-AED4-854F943BA3D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.1.1_build393:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "902A4011-83C5-4A3B-B443-C51EA855E8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.434:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "8BB225A0-7FB9-4AD2-8ED2-5CC1AEBAAB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.437:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "9603C423-F24A-4607-B721-D02EDA94AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.446:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "574AAAA6-8181-457B-84CE-5AEB1895E3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.457:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "DF957AD3-B6E5-4BD7-832F-33E734817B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.460:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "14D862F4-BE5F-4E6B-9955-ACFB48A5D3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.464:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "768B7F5E-E4AD-420E-92FA-A58E1AE3D1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:8.01.471:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "C15B7FEA-E6A9-4DBE-B1A9-E17E91512A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "2860637E-6FA5-445A-86B5-E9F2D2D7DD37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "EDF0DA40-1AC4-4610-AEAC-F431E23BAEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.1.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "018D1F3B-BAFC-461E-B833-9E0F98A6533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.2:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "4B9AED5E-2D66-4EB2-95CC-158D909AAE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:norton_antivirus:9.0.2.1000:*:corporate:*:*:*:*:*",
            "matchCriteriaId" : "5696AC09-E8BB-4060-9A81-EA2B190B850A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22536",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017108",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017109",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449524/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.10.23.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449524/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.symantec.com/avcenter/security/Content/2006.10.23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4573",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-24T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in the \"utf8 combining characters handling\" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en el \"manejo de combinaciones de caracteres utf8\" (función utf8_handle_comb en encoding.c) en screen anterior a 4.0.3 permite a atacantes con la complicidad del usuario provocar una denegación de servicio (caída o cuelgue) mediante ciertas secuencias UTF8."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "EB4ADD67-7FCD-4034-8F6A-32F579104659"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22573",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22583",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22611",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22647",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22649",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22707",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22726",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-01.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.480775",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1202",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:191",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.026-screen.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20727",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-370-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4189",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-734",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.480775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.026-screen.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-370-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en la función evtFilteredMonitorEventsRequest en el servicio LDAP en Novell eDirectory anterior a 8.8.1 FTF1 permite a atacantes remotos ejecutar código de su elección mediante una petición artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7548D05-AD2B-46C3-9036-366585FFCB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13882AD-D700-4B95-9BB2-B3E0D104B227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=427",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22506",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20663",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory."
      }, {
        "lang" : "es",
        "value" : "La función evtFilteredMonitorEventsRequest en el servicio LDAP en Novell eDirectory anterior a 8.8.1 FTF1 permite a atacantes remotos ejecutar código de su elección mediante una petición artesanal que contiene un valor más largo que el número de objetos transmitidos, lo cual dispara una liberación inválida de memoria no asignada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7548D05-AD2B-46C3-9036-366585FFCB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13882AD-D700-4B95-9BB2-B3E0D104B227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=428",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22506",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20663",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el motor NCP en Novell eDirectory anterior a 8.8.1 FTF1 permite a atacantes remotos ejecutar código de su elección mediante un paquete artesanal NCP sobre IP que provoca que NCP lea más información de la deseada."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.8.1",
            "matchCriteriaId" : "BA08E2FB-A21B-420E-B02E-111E66CD5515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7548D05-AD2B-46C3-9036-366585FFCB48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=426",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22506",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4142",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22506",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (1) cfg_dir and (2) lib_dir parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en example/lib/grid3.lib.php en Softerra PHP Developer Library 1.5.3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en los parámetros (1) cfg_dir y (2) lib_dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softerra:php_developer_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.3",
            "matchCriteriaId" : "862BD9E5-67B7-4326-BEDB-C2439C89E2C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=bugtraq&m=116051953607495&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017046",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29437",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2511",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=bugtraq&m=116051953607495&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter in (1) lib/registry.lib.php, (2) lib/sqlcompose.lib.php, and (3) lib/sqlsearch.lib.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en Softerra PHP Developer Library 1.5.3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro lib_dir en (1) lib/registry.lib.php, (2) lib/sqlcompose.lib.php, y (3) lib/sqlsearch.lib.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softerra:php_developer_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.3",
            "matchCriteriaId" : "862BD9E5-67B7-4326-BEDB-C2439C89E2C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22366",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4030",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2520",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the lib_dir parameter.  NOTE: this issue is disputed by CVE as of 20061023, since there is no Description.php file included in the product, and the existing \"Description\" file contains documentation, not functioning code"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en Description.php en Softerra PHP Developer Library 1.5.3 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro lib_dir. NOTA: este asunto está impugnado por CVE el 23/10/2006, ya que no hay fichero Description.php incluido en el producto, y el fichero \"Description\" existente contiene documentación, no código."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softerra:php_developer_library:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.3",
            "matchCriteriaId" : "862BD9E5-67B7-4326-BEDB-C2439C89E2C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001090.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001094.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449355/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001090.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001094.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449355/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"forgot password\" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username, which allows remote attackers to gain access as an arbitrary user by requesting a password reset."
      }, {
        "lang" : "es",
        "value" : "La función \"forgot password\" en OneOrZero Helpdesk anterior a 1.6.5.4 genera contraseñas inseguras concatenando la marca de tiempo actual con el nombre de usuario, lo cual permite a atacantes remotos obtener acceso como usuario de su elección mediante una petición de restablecimiento de contraseña."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.5.3",
            "matchCriteriaId" : "77B9BA4F-5FD4-4C37-836D-1F88D47DF543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F48E6F-1E7A-4B5F-9A05-37B2D7D39BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E97153-B0A5-4751-B657-79EF676FABD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC596188-DBD8-4E56-953D-23B865670926"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://oneorzero.com/downloads/release_notes/Current_Release_notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22476",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1767",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449352/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.whitedust.net/speaks/3043/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://oneorzero.com/downloads/release_notes/Current_Release_notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449352/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.whitedust.net/speaks/3043/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ],
      "evaluatorSolution" : "Upgrade to 1.6.5.4"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the XML parser in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allow remote attackers to inject arbitrary web script or HTML via a crafted RSS feed."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el analizador XML en Drupal 4.6.x anterior a la 4.6.10 y 4.7.x anterior a la 4.7.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una fuente RSS artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC016B5-A4C2-4A78-B830-C041C8BAAD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B99C22-9A8C-43F3-9AD8-D901D07D5FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB94DAC5-F0E1-4427-98E4-A5684BF3F408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D0FD99-066F-4161-9524-01DD01F31527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F8FEEF-6857-4DC8-9D0D-76D801D0E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EC4ECE-6719-4C54-B150-017ACB32E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5368BD-60AC-49E7-80D4-A5B317319A31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/88826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22486",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.025-drupal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449197/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/88826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.025-drupal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449197/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unauthorized actions as an arbitrary user via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados en Drupal 4.6.x anterior a 4.6.10 y 4.7.x anterior a 4.7.4 permite a atacantes remotos llevar a cabo acciones no autorizadas como usuario de su elección mediante vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC016B5-A4C2-4A78-B830-C041C8BAAD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B99C22-9A8C-43F3-9AD8-D901D07D5FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB94DAC5-F0E1-4427-98E4-A5684BF3F408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D0FD99-066F-4161-9524-01DD01F31527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F8FEEF-6857-4DC8-9D0D-76D801D0E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EC4ECE-6719-4C54-B150-017ACB32E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5368BD-60AC-49E7-80D4-A5B317319A31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/88828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.025-drupal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449199/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/88828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.025-drupal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449199/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which allows remote attackers to obtain arbitrary form information via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "Drupal 4.6.x anterior a 4.6.10 y 4.7.x anterior a 4.7.4 permite que los envíos de formularios sean redireccionados, lo cual permite a atacantes remotos obtener información de su elección de un formulario mediante una URL artesanal."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA206C-EF72-4379-9ED8-795FCAD0BE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "611B9D43-CE88-4451-A27C-7F6F24016B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A7208-6273-4CC6-AB7B-DA855EEF2729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC016B5-A4C2-4A78-B830-C041C8BAAD76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B99C22-9A8C-43F3-9AD8-D901D07D5FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB94DAC5-F0E1-4427-98E4-A5684BF3F408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D0FD99-066F-4161-9524-01DD01F31527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F8FEEF-6857-4DC8-9D0D-76D801D0E914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61EC4ECE-6719-4C54-B150-017ACB32E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5368BD-60AC-49E7-80D4-A5B317319A31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/88828",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22486",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1764",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.025-drupal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449200/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20631",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/88828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.025-drupal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449200/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en pila en Novell eDirectory 8.8.x anterior a 8.8.1 FTF1, y 8.x hasta 8.7.3.8, y Novell NetMail anterior a 3.52e FTF2, permite a atacantes remotos ejecutar código de su elección mediante (1) una cabecera HTTP Host larga, que provoca el desbordamiento en la función BuildRedirectURL; o vectores relacionados con un nombre de usuario que contiene un carácter . (punto) en los servicios Netmail (2) SMTP, (3) POP, (4) IMAP, (5) HTTP o (6) Networked Messaging Application Protocol (NMAP)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B83F84-D1EF-43B4-8620-3C1BCCE44553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41169D2F-4F16-466A-82E9-AD0735472B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "947699C3-D9DE-411A-99C0-44ADD1D2223A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F668C0-8420-4401-AB0F-479575596CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDCC7B6-34CA-4551-9833-306B93E517BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69C160-39F7-48B8-B9A3-CC86690453C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029ADE6D-6761-4196-847C-A0EFB3A06341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3.8_presp9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27AAA23-21E1-4C35-97FA-7F038E2C8923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050382.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050388.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22519",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017141",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mnin.org/advisories/2006_novell_httpstk.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3723994&sliceId=SAL_Public&dialogID=16776123&stateId=1%200%202648401",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449899/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450017/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450520/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4141",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-035.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-036.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050382.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050388.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.mnin.org/advisories/2006_novell_httpstk.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3723994&sliceId=SAL_Public&dialogID=16776123&stateId=1%200%202648401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449899/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450017/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450520/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain \"NCP Fragment.\""
      }, {
        "lang" : "es",
        "value" : "El motor NCP en Novell eDirectory anterior a 8.7.3.8 FTF1 permite a atacantes remotos provocar una denegación de servicio no especificada mediante un cierto \"Fragmento NCP\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.7.3.8",
            "matchCriteriaId" : "C1E3441E-2468-4270-BDBE-5EB13DDF4BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B83F84-D1EF-43B4-8620-3C1BCCE44553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41169D2F-4F16-466A-82E9-AD0735472B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "947699C3-D9DE-411A-99C0-44ADD1D2223A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F668C0-8420-4401-AB0F-479575596CF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDCC7B6-34CA-4551-9833-306B93E517BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69C160-39F7-48B8-B9A3-CC86690453C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029ADE6D-6761-4196-847C-A0EFB3A06341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nNovell, eDirectory, 8.7.3.8 FTF1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en lib/rs.php en Castor 1.1.1 permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro rootpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:castor:php_web_builder:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7676D40-0CAA-43E8-A50A-6B198B9773BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22527",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20658",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29704",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled and that support for \".htaccess\" files is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in (1) lib/code.php, (2) lib/dbconnect.php, (3) lib/error.php, (4) lib/menu.php, and other unspecified files.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en Castor 1.1.1 permiten a atacantes remotos ejecutar código PHP de su elección mediante el parámetro rootpath en (1) lib/code.php, (2) lib/dbconnect.php, (3) lib/error.php, (4) lib/menu.php, y otros fichero no especificados. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:castor:castor:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D42E86D-FE26-476C-83AD-61F052730CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22527",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4143",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5482",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ufs_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is not defined in POSIX."
      }, {
        "lang" : "es",
        "value" : "ufs_vnops.c en FreeBSD 6.1 permite a usuarios locales provocar una denegación de servicio llamando a la función ftruncate en un archivo que no es del tipo VREG, VLNK ni VDIR, el cual no está definido en POSIX."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4416CBA-76B9-4051-B015-F1BE89517309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.freebsd.org/pipermail/cvs-src/2006-May/064488.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22413",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.freebsd.org/pipermail/cvs-src/2006-May/064488.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "p1003_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting a scheduler policy, which should only be settable by root."
      }, {
        "lang" : "es",
        "value" : "p1003_1b.c en FreeBSD 6.1 permite a usuarios locales provocar una denegación de servicio no especificada estableciendo una política de tareas, lo cual sólo debe ser configurable por el usuario root."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4416CBA-76B9-4051-B015-F1BE89517309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.freebsd.org/pipermail/cvs-src/2006-May/063969.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22413",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/posix4/p1003_1b.c.diff?r1=1.24&r2=1.24.2.1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20517",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.freebsd.org/pipermail/cvs-src/2006-May/063969.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/posix4/p1003_1b.c.diff?r1=1.24&r2=1.24.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339."
      }, {
        "lang" : "es",
        "value" : "SSH Tectia Client/Server/Connector 5.1.0 y anteriores, Manager 2.2.0 y anteriores, y otros productos, al usar una clave RSA con exponente 3, borra el relleno PKCS-1 antes de generar un hash, lo cual permite a atacantes remotos forjar una firma PKCS #1 v1.5 que es firmada por esa clave RSA y evita que Tectia verifique correctamente certificados X.509 y otros certificados que usan PKCS #1, un asunto similar a CVE-2006-4339."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "2E317E29-0436-4DE5-BEAE-360919F81533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_connector:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "AD202BF8-1A73-44DA-93FB-DA21A7825B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "821AFCAC-3769-4891-B62C-042803023BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "F63849B9-02E1-4361-9686-8C90C7ADDA72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22350",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017060",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1017061",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845620",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.ssh.com/company/news/2006/english/security/article/786/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4032",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://secunia.com/advisories/22350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://securitytracker.com/id?1017061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/845620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://www.ssh.com/company/news/2006/english/security/article/786/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ],
      "evaluatorSolution" : "Update to a fixed version"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers to execute arbitrary PHP code via a URL in the SPEEDBERG_PATH parameter to (1) entrancePage.tpl.php, (2) generalToolBox.tlb.php, (3) myToolBox.tlb.php, (4) scriplet.inc.php, (5) simplePage.tpl.php, (6) speedberg.class.php, and (7) standardPage.tpl.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en SpeedBerg 1.2beta1 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro SPEEDBERG_PATH a (1) entrancePage.tpl.php, (2) generalToolBox.tlb.php, (3) myToolBox.tlb.php, (4) scriplet.inc.php, (5) simplePage.tpl.php, (6) speedberg.class.php, y (7) standardPage.tpl.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:speedberg:speedberg:1.2_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD0D8C-B717-43E9-851C-E0F829B80234"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001091.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449468/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20670",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001091.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449468/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-24T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Webmail en Sun Java System Messaging Server 6.0 hasta 6.2 y en iPlanet Messaging Server 5.2 permite a atacantes remotos ejecutar código Javascript de su elección mediante mensajes artesanales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:iplanet_messaging_server:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB46EE9-8B54-4C14-8850-C7D5B6C62BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_messaging_server:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5C5BCA-AE01-4B2E-A58A-7008204ECBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_messaging_server:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B21520C-F3F0-4729-9EEF-D7C8126909D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_messaging_server:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF7F585-E068-4555-B2B1-505C6299BEE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22575",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017113",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20708",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4183",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginNick parameter during login.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en XchangeBoard 1.70, y posiblemente versiones anteriores, cuando el magic_quotes_gpc está deshabilitado, permite a atacantes remotos la ejecución de comandos SQL de su elección a través del parámetro loginNick durante la autenticación. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xchangeboard:xchangeboard:1.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86497647-5BED-4F5B-B631-2A91768E698F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22489",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service (application hang) via a deleted recurrent meeting instance when changing the attendee's calendar meeting time."
      }, {
        "lang" : "es",
        "value" : "Investigaciones sobre el Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 anterior al Hotfix 1 para IBM Lotus Domino pueden permitir a atacantes remotos, con privilegios de organizador de eventos,  causar la denegación de servicio (colgar la aplicación) a través del borrado de una convocatoria de reunión periódica cuando cambian la hora de encuentro en el calendario de los asistentes."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rim:blackberry_enterprise_server:*:*:domino:*:*:*:*:*",
            "versionEndIncluding" : "4.1_sp2",
            "matchCriteriaId" : "228A0AB8-A0C4-48DB-8450-45CEAAEC098F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22408",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017101",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/4.1.2_HF1_Release_Notes?func=doc.Fetch&nodeId=1276788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29897",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackberry.com/knowledgecenterpublic/livelink.exe/4.1.2_HF1_Release_Notes?func=doc.Fetch&nodeId=1276788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5490",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en Segue Content Management System (CMS) antes de la versión 1.5.8 permite a atacantes remotos la ejecución de comandos SQL de su elección a través de vectores sin especificar.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:middlebury_college:segue_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.7",
            "matchCriteriaId" : "F88AFB87-CD88-428E-84D0-C27A80173F7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22514",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=82171&release_id=456920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20645",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=82171&release_id=456920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en el archivo include/index.php de UltraCMS 0.9 permite a atacantes remotos la ejecución de comandos SQL de su elección a través de los parámetros (1) username o (2) password."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ceary:ultracms:0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "554A443C-8F60-4AA7-86AB-17B4165236B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1768",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449220/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20642",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449220/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive information (document contents) via unspecified attack vectors related to \"grants.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el Maerys Archive (Maarch) antes de la versión 2.0.1 permite a usuarios remotos autenticados la obtención de información sensible (contenido de documentos) a través de ataques no especificados de vectores relacionados con \"grants.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maarch:maarch:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "8ED60A64-459E-4245-A6ED-FEFC49ED3C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22468",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=456553",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=456553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP template/purpletech/base_include.php  en DigitalHive 2.0 RC2 permite a los atacantes remotos la ejecución de código PHP de su elección a través de una URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digitalhive:digitalhive:2.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716F249C-E918-450D-8AAE-72499FFBD1F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/31068",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017095",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449214/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20639",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2566",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/31068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449214/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters.  NOTE: this issue might overlap CVE-2006-6795."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos de PHP en modules/My_eGallery/public/displayCategory.php en el módulo pandaBB para PHP-Nuke permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros (1) adminpath o (2) basepath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DB1D99-9F35-43A2-AD72-4B495B5F31BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22505",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20633",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4121",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_red2 parameter to (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php, (c) colorpik2.php, (d) colorpik3.php, (e) extras_menu.php, (f) farbpalette.php, (g) lese_inc.php, and (h) newfile.php in _msdazu_share/richtext/; the (2) path_scr_dat2 parameter to (i)_msdazu_share/share/insert1.php; the (3) path_red parameter to (j) _msdazu_share/extras/downloads/index.php; and unspecified parameters in other files."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos de PHP en Trawler Web CMS 1.8.1 y versiones anteriores, permiten a atacantes remotos la ejecución de código PHP de su elección a través de una URL en el parámetro (1) path_red2 en los archivos (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php, (c) colorpik2.php, (d) colorpik3.php, (e) extras_menu.php, (f) farbpalette.php, (g) lese_inc.php, y (h) newfile.php en _msdazu_share/richtext/; el parámetro (2) path_scr_dat2 en los archivos (i)_msdazu_share/share/insert1.php; el parámetro (3) path_red parameter en los archivos (j) _msdazu_share/extras/downloads/index.php; y otros parámetros sin especificar en otros archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trawler:trawler_web_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.1",
            "matchCriteriaId" : "CD260448-9823-48E0-B3E2-02839502B071"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cmsblog.msdazu.de/?p=209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22525",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29962",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449459/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20662",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2611",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cmsblog.msdazu.de/?p=209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449459/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) index.php, (2) addknowledge.php, and (3) addscreenshot.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades en secuencias de comandos en sitios cruzados (XSS) en Timothy Claason KnowledgeBank 1.01 permite a atacantes remotos la inyección de código Web ejecutable de su elección o de HTML a través de parámetros no especificados en los archivos (1) index.php, (2) addknowledge.php, y (3) addscreenshot.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timothy_claason:knowledgebank:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFC703D-8878-4A5E-B99A-D752833CB3EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449231/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20641",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29700",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449231/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota del archivo en PHP themes/program/themesettings.inc.php en Segue CMS 1.5.8 y anteriores, cuando el registro global está habilitado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro themesdir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:middlebury_college:segue_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.7",
            "matchCriteriaId" : "F88AFB87-CD88-428E-84D0-C27A80173F7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22491",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=625467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29904",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20640",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2600",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=625467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el cruce de directorios en el archivo themes/program/themesettings.inc.php en Segue CMS 1.5.8 y anteriores, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro theme."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:middlebury_college:segue_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.8",
            "matchCriteriaId" : "425851E4-A975-409D-BDB3-60FFF9A83C8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=625467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=625467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5499",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en secuencias de comandos en sitios cruzados (XSS) en Serendipity (s9y) 1.0.1 y anteriores, permite a atacantes remotos la inyección de secuencias de comandos Web o HTML de su elección, a través de vectores no especificados en la página del administrador del gestor de media."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serendipity:serendipity:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "4C8D2FF0-97FB-414D-96C6-86DD09CAAD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22501",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017100",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_112006.136.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29893",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.s9y.org/forums/viewtopic.php?t=7356",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449189/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20627",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29695",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_112006.136.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.s9y.org/forums/viewtopic.php?t=7356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449189/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T10:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) userNick or (2) password parameters.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en la función checkUser del fichero inc/DBInterface.php en XchangeBoard 1.70 y anteriores, cuando está deshabilitada magic_quotes_gpc, permite a atacantes remotos la ejecución de comandos SQL de su elección a través de los parámetros (1) userNick o (2) password. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xchangeboard:xchangeboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.70",
            "matchCriteriaId" : "AAE4F6CE-A054-483C-9239-49F26995A750"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/4129",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5501",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del buffer en el control Active X AOL.PicDownloadCtrl.1 YGPPicDownload.dll) 9.2.3.0 en America Online (AOL) 9.0 Security Edition permite a atacantes remotos la ejecución de código de su elección mediante la propiedad downloadFileDirectory. Vulnerabilidad distinta a la CVE-2006-5502."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol:9.0:*:security:*:*:*:*:*",
            "matchCriteriaId" : "052FC41D-8628-4F29-8B98-F66EC1636BD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=430",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20745",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Users of the affected products are recommended to log in to the AOL service and a fix will be seamlessly applied to their system.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerability than CVE-2006-5501."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del buffer basado en pilas en el control de ActiveX AOL.PicDownloadCtrl.1 (YGPPicDownload.dll) 9.2.3.0 en America Online (AOL) 9.0 Security Edition permite a atacantes remotos la ejecución de código de su elección mediante el método AddPictureNoAlbum. Vulnerabilidad distinta a la CVE-2006-5501."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aol:aol:9.0:*:security:*:*:*:*:*",
            "matchCriteriaId" : "052FC41D-8628-4F29-8B98-F66EC1636BD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=429",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22567",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20747",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4197",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Users of the affected product are recommended to log in to the AOL service and a fix will be seamlessly applied to their system."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en secuencias de comandos en sitios cruzados (XSS) en el archivo index.php en el Simple Machines Forum (SMF) 1.1 RC2 permite a atacantes remotos la inyección de secuencia de comandos de Web o HTML mediante el parámetro de \"action\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FA54F25-0EF9-40B1-A9B6-77F15DD27A71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1772",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449241/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20629",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449241/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5504",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en secuencias de comandos en sitios cruzados (XSS) en el archivo index.php en el Simple Machines Forum (SMF) permite a atacantes remotos la inyección de secuencia de comandos de Web o HTML mediante el valor en el parámetro de \"action\" codificado en Base64."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549FC613-BB72-42FD-AD04-0FAC2FC2A942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1063E88-7F6D-4E42-B196-7292320C4F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6A0089-3041-45E4-A1BB-F35A9039A12B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF69D49-AE48-4195-B958-A5D81AABD824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FA54F25-0EF9-40B1-A9B6-77F15DD27A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE14DC75-497A-4794-9260-E2A1291C9C6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/31070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449307/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449395/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449478/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29689",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/31070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449395/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449478/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5505",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the lang parameter to (1) admin/configuration.inc.php, (2) admin/creer_album.inc.php, (3) admin/changepwd.php.inc, and unspecified other files.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos en PHP en el 2BGal 3.0 permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro lang en los archivos (1) admin/configuration.inc.php, (2) admin/creer_album.inc.php, (3) admin/changepwd.php.inc, y otros archivos sin especificar. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ben3w:2bgal:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946626D2-4096-4536-8CE4-FF2F72666722"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22530",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20859",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29759",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, and (5) tools/utf8conversion/index.php in admin/; and (6) prepend.inc.php, (7) lib/boxes.lib.php, and (8) lib/history.lib.php in inc/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos en PHP en el WiClear 0.10 permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro path en los archivos (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, y (5) tools/utf8conversion/index.php de admin/; y (6) prepend.inc.php, (7) lib/boxes.lib.php, y (7) lib/history.lib.php de inc/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wiclear:wiclear:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD2550E-6641-43B3-BF74-6DB9BC4A5871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22547",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiclear.free.fr/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wiclear.free.fr/?Download",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29943",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29945",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29947",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29948",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29949",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4166",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29720",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2624",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://wiclear.free.fr/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wiclear.free.fr/?Download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5507",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg_dedi[dedi_path] parameter in (1) find.php, (2) insert_line.php, (3) fullscreen.php, (4) changecase.php, (5) insert_link.php, (6) insert_table.php, (7) table_cellprop.php, (8) table_prop.php, (9) table_rowprop.php, (10) insert_page.php, and possibly insert_marquee.php in backend/external/wysiswg/popups/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivos en PHP en el Der Dirigent (DeDi) 1.0.3 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cfg_dedi[dedi_path] en los archivos (1) find.php, (2) insert_line.php, (3) fullscreen.php, (4) changecase.php, (5) insert_link.php, (6) insert_table.php, (7) table_cellprop.php, (8) table_prop.php, y (9) table_rowprop.php, (10) insert_page.php, y posiblemente insert_marquee.php de backend/external/wysiswg/popups/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:der_dirigent:der_dirigent:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220ED4BF-34A3-4EF3-A9AB-30A726E27F11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.org/0610-exploits/Derdirigent.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22546",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29950",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29959",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4164",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.org/0610-exploits/Derdirigent.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5508",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1) the n parameter and (2) the User-Agent HTTP header."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección de SQL en el archivo addentry.php de WoltLab Burning Book 1.1.2 permite a atacantes remotos la ejecución de comandos de SQL de su elección a través del (1) parámetro n y (2) de la cabecera HTTP User-Agent"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_book:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B919D8D-D6E9-4171-9D59-8CA72EA78210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/Odocument711.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448796/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/Odocument711.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448796/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de Eval en el archivo addentry.php de WoltLab Burning Book 1.1.2 permite a atacantes remotos la ejecución de código PHP de su elección mediante peticiones POST manipuladas que almacenan código PHP en la Base de Datos que son luego procesados por el \"eval\", como el demostrado usando inyecciones de SQL a través del parámetros n."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woltlab:burning_book:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B919D8D-D6E9-4171-9D59-8CA72EA78210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22442",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1774",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.security.nnov.ru/Odocument711.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448796/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20563",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4062",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29599",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.security.nnov.ru/Odocument711.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448796/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via \"..\" sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el cruce de directorios en el archivo explorer_load_lang.php en PH Pexplorer 0.24 permite a atacantes remotos la inclusión de ficheros locales de su elección a través de secuencias \"..\" en el lenguaje de las cookie, como el demostrado subiendo un fichero .gif que contenga código PHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluevirus-design:ph_pexplorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.24",
            "matchCriteriaId" : "5E3E5769-E765-44A8-AA2F-C9029EF89B25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22504",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.rahim.webd.pl/exploity/Exploits/104.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20665",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2598",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.rahim.webd.pl/exploity/Exploits/104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección directa de código estático en el archivo delete.php en el JaxUltraBB (JUBB) 2.0, cuando el registro global está habilitado, permite a atacantes remotos la inyección de código web ejecutable de su elección, HTML o PHP a través de los parámetros de contenido, cuyo valor se incluye en un fichero especificado en el parámetro forum."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaxultrabb:jaxultrabb:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01433C3D-4F98-4B80-9006-7A9FAD4E8D54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001095.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20679",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29711",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001095.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en secuencias de comandos en sitios cruzados (XSS) en el archivo article.htm de Zwahlen Online Shop permite a atacantes remotos la inyección de código web ejecutable o HTML a través del parámetro cat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zwahlen_informatik:online_shop:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC86C977-E0B5-4AAC-B7F2-386D158667CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-November/001106.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449467/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20682",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29753",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-November/001106.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449467/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-25T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified \"normally restricted management packets on the device\" that cause the community string to be returned."
      }, {
        "lang" : "es",
        "value" : "El firmware de los conmutadores de 3Com Switch SS3 4400, versiones 5.11, 6.00, 6.10 y anteriores, permite a atacantes remotos la lectura de la cadena SNMP Read-Write Community y realizar acciones no autorizadas mediante paquetes de gestión normalmente restringidos en el dispositivo, que provocan que la cadena community sea devuelta."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:superstack_3_switch_4400:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "firmware_6.10",
            "matchCriteriaId" : "FE9E54F8-121A-463E-B68B-64AF98F75DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:superstack_3_switch_4400:firmware_5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCDE8DF-0DB6-4BD3-BB66-1F3DED59D1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:3com:superstack_3_switch_4400:firmware_6.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14382BA-FEB8-4AE3-8361-69EBB6B17DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017128",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.3com.com/securityalert/alerts/3COM-06-004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20736",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4184",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.3com.com/securityalert/alerts/3COM-06-004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en GeoNetwork opensource anterior a 2.0.3, permite a atacantes remotos ejecutar comandos SQL de su elección, y completar una conexión, mediante vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geonetwork:opensource:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "44F16177-0A38-4B78-9434-928A4EC0787F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22502",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=457195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=457195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attackers to execute arbitrary SQL commands via the qzid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en quiz.php de Web Group Communication Center (WGCC) 0.5.6b y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro qzid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_group_communication_center:web_group_communication_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.6b",
            "matchCriteriaId" : "C0E959C2-0277-4136-A257-B8C233AD8B20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20653",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29712",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2604",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data that is stored by a delivery script and displayed by the admin interface."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples de cruce de sitios en scripts (XSS) en lib-history.inc.php de phpAdsNew y phpPgAds before 2.0.8-pr1 permiten a atacantes remotos inyectar scripts WEB o HTML de su elección mediante vectores sin especificar, relativos a datos inyectados que son almacenados por un script de distribución y mostrados por la interfaz admin."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpadsnew:phpadsnew:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.8",
            "matchCriteriaId" : "43E406E9-8E4D-40AC-8E08-D470B71A4D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phppgads:phppgads:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.8",
            "matchCriteriaId" : "E4AB17EC-76B0-41B2-ACEE-D50D060AD170"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22526",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22529",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=457774&group_id=11386",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=457775&group_id=36679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449484/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=457774&group_id=11386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=457775&group_id=36679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449484/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in actions/usersettings.php in WikiNi before 0.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters to wakka.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples de cruce de sitios en scripts (XSS) en actions/usersettings.php de WikiNi anteriores a 0.4.4 permiten a atacantes remotos inyectar scripts WEB o HTML de su elección mediante los parámetros 1) name y (2) email al wakka.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikini:wikini:0.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9A467B-EAA8-42B2-BF3F-3740273F0B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikini:wikini:0.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFC7FF8-C3D1-4260-9BE9-DCE4B7E0B3EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cvs.gna.org/cvsweb/wikini/actions/usersettings.php.diff?r1=1.14.2.1%3Br2=1.14.2.2%3Bcvsroot=wikini%3Bf=h",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22558",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017116",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449518/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20688",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4159",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wikini.net/wakka.php?wiki=WikiNiChangeLog044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://zone14.free.fr/advisories/6/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cvs.gna.org/cvsweb/wikini/actions/usersettings.php.diff?r1=1.14.2.1%3Br2=1.14.2.2%3Bcvsroot=wikini%3Bf=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449518/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wikini.net/wakka.php?wiki=WikiNiChangeLog044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://zone14.free.fr/advisories/6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) editmeetings/session.php, (2) email/session.php, (3) entityproperties/session.php, or (4) inc/mail.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad múltiples de inclusión remota de archivo en PHP en Rhode Island Open Meetings Filing Application (OMFA) permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro PROJECT_ROOT de (1) editmeetings/session.php, (2) email/session.php, (3) entityproperties/session.php, ó (4) inc/mail.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rhode_island_secretary_of_state:open_meetings_filing_system:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6706A71-CA6F-464D-9230-F85554148629"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22503",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29975",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29977",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29978",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449396/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20656",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4144",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29773",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2609",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449396/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5518",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) xml2rss.php, (2) config_local.php, (3) rssonate.php, and (4) sql2xml.php in Src/getFeed/inc/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Christopher Fowler (Rhode Island) RSSonate permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro PROJECT_ROOT en (1) xml2rss.php, (2) config_local.php, (3) rssonate.php, y(4) sql2xml.php en Src/getFeed/inc/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:christopher_fowler:rssonate:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22C7290-C896-4080-AEF7-48A0029F12D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22496",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29935",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29936",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29937",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29938",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4146",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/29935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in Savant2/Savant2_Plugin_options.php in the MambWeather 1.8.1 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en Savant2/Savant2_Plugin_options.php en MambWeather 1.8.1 y componentes anteriores para Mambo permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mambweather:mambweather:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.1",
            "matchCriteriaId" : "7C6AC289-D0FD-4599-A2DB-22B861CEA45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22521",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20667",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2613",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the set_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en functions.php en DeltaScripts PHP Classifieds 7.1 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro set_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltascripts:php_classifieds:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4585D910-015F-492D-B8CF-8D1B69CBB326"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449295/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20649",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449295/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in DNS/RR.php in Net_DNS 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en DNS/RR.php de Net_DNS 0.03 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpdns_basedir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net_dns:net_dns:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.03",
            "matchCriteriaId" : "234EA34D-AB45-49C1-99FC-B7183B2757CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22522",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20666",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4185",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2614",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2614",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config parameter in (1) main.php or (2) user/account/main.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples de inclusión remota de archivo en PHP en Johannes Erdfelt Kawf 1.0  y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro config en (1) main.php ó (2) user/account/main.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:johannes_erdfelt:kawf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "ED9032C0-3783-44DB-BE18-E4BCA0996A9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20659",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ezt_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en common.php en EZ-Ticket 0.0.1 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro ezt_root_path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ez-ticket:ez-ticket:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4BFBE0-976F-4A31-BE4A-038ACD84DED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://arfis.wordpress.com/2007/09/14/rfi-02-ez-ticket/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20669",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2620",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://arfis.wordpress.com/2007/09/14/rfi-02-ez-ticket/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5524",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web script or HTML via the p parameter.  NOTE: This issue might overlap CVE-2006-5321."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en index.php de phplist 2.10.2 permite a atacantes remotos inyectar scripts WEB o HTML de su elección mediante el parámetro p.\r\nNOTA: Esta vulnerabilidad podría sobreponerse con CVE-2006-5321."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AB6728E-74D6-4939-AA0F-6560678201CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22431",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1779",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Oct/1017102.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448923/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20577/info",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4084",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Oct/1017102.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/448923/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20577/info",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5525",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (1) \"/**/UNION \" or (2) \" UNION/**/\" sequences, which are not rejected by the protection mechanism, as demonstrated by a SQL injection via the eid parameter in a search action in the Encyclopedia module in modules.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lista negra incompleta en mainfile.php en PHP-Nuke 7.9 y anteriores permite a un atacante remoto llevar a cabo un ataque de inyección SQL a través de las secuencias (1) \"/**/UNION \" o (2) \" UNION/**/\", lo cual no es aceptado por los mecanismos de protección, como se demostró por la inyección SQL a través del parámetro eid en una acción de búsqueda en el módulo Encyclopedia en modules.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9",
            "matchCriteriaId" : "5BC56275-9F65-43B6-A091-68FB42968C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E8572B-43BE-4068-929F-2B6FAA9EF959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8882C59-6721-4925-8EB6-1C54455BD03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6F6110-F77B-42CE-BAD0-0AEAFC04E982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017A5AD3-CD1C-41E0-B53D-3881C31F7463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68BA9153-537A-4CC5-A3E8-DE4FCF49EB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7481433-4DFA-4D32-BA93-FBEAC37D8D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85535C0D-C858-4AF8-8350-EFBF74609CBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC4F979-7F10-4F0D-96AD-5EE88E437897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3B4A35-6019-468E-89FA-BC2EEADB7D31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=27",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20674",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4149",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2617",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the foing_root_path parameter in (a) faq.php, (b) index.php, (c) list.php, (d) login.php, (e) playlist.php, (f) song.php, (g) gen_m3u.php, (h) view_artist.php, (i) view_song.php, (j) flash/set_na.php, (k) flash/initialise.php, (l) flash/get_song.php, (m) includes/common.php, (n) admin/nav.php, (o) admin/main.php, (p) admin/list_artists.php, (q) admin/index.php, (r) admin/genres.php, (s) admin/edit_artist.php, (t) admin/edit_album.php, (u) admin/config.php, and (v) admin/admin_status.php in player/, different vectors than CVE-2006-3045.  NOTE: CVE analysis as of 20061026 indicates that files in the admin/ and flash/ directories define foing_root_path before use."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de inclusión PHP de múltiples ficheros remotos en Teake Nutma Foing, como modificados en Fully Modded phpBB (phpbbfm) 2021.4.40 y anteriores, permite a atacantes remotos ejecutar código de su elección mediante un URL en el parámetro foing_root_path en a) faq.php, (b) index.php, (c) list.php, (d) login.php, (e) playlist.php, (f) song.php, (g) gen_m3u.php, (h) view_artist.php, (i) view_song.php, (j) flash/set_na.php, (k) flash/initialise.php, (l) flash/get_song.php, (m) includes/common.php, (n) admin/nav.php, (o) admin/main.php, (p) admin/list_artists.php, (q) admin/index.php, (r) admin/genres.php, (s) admin/edit_artist.php, (t) admin/edit_album.php, (u) admin/config.php, y (v) admin/admin_status.php in player/, vectores diferentes al CVE-2006-3045.\r\nNOTA: El análisis de CVE del 20061026 indica que los ficheros de los directorios admin/ y flash/ definen foing_root_path antes de ser usado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fully_modded_phpbb:fully_modded_phpbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021.4.40",
            "matchCriteriaId" : "840A7F2F-C32A-47B6-9903-ED7FE52F670D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22499",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4165",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the sys_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en lib.editor.inc.php de Intelimen InteliEditor 1.2.x permite a atacantes remotos ejecutar código de su elección mediante una URL en el parámetro sys_path.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intelimen:intelieditor:1.2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2DD351-032E-4570-8EC1-3A781B1B22D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449578/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20703",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2630",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449578/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de directorios en mod.php de SchoolAlumni Portal 2.26 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante .. (punto punto) en el parámetro mod. \r\nNOTA: algunos de estos detalles se obtienen a partir de la información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schoolalumni_portal:schoolalumni_portal:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75624B85-7671-4B8B-9DEF-3D279EF4A18B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in smumdadotcom_ascyb_alumni/mod.php in SchoolAlumni Portal 2.26 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the katalog module.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en smumdadotcom_ascyb_alumni/mod.php de SchoolAlumni Portal 2.26 permite a atacantes remotos inyectar scripts web o HTML de su elección mediante el parámetro query en una operación de búsqueda en el módulo katalog.\r\nNOTA: Alguno de estos detalles se han obtenido mediante información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schoolalumni_portal:schoolalumni_portal:2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75624B85-7671-4B8B-9DEF-3D279EF4A18B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017105",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20673",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1017105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/index.php, (2) admin/pwlost.php, and unspecified other files.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades de cruce de sitios en scripts (XSS) en Boesch SimpNews versiones anteriores a   2.34.01 permiten a atacantes remotos inyectar scripts WEB o HTML mediante parámetros sin especificar en (1) admin/index.php, (2) admin/pwlost.php, y otros filos sin especificar.\r\nNOTA. El origen de esta información es desconocido; los detalles se han obtenido a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boesch_it-consulting:simpnews:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.34",
            "matchCriteriaId" : "3BB0D51D-F81C-41A2-80F3-67AB7427DE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boesch_it-consulting:simpnews:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D17BA8-6440-4DE9-8BD9-E237A3346E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boesch_it-consulting:simpnews:2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB59FC7-0D8B-499A-911C-7BA22F8083EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boesch_it-consulting:simpnews:2.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFCB8E0-4EBD-4183-A911-EECBA0431348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22535",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.boesch-it.de/sw/php-scripts/simpnews/english/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20714",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4162",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.boesch-it.de/sw/php-scripts/simpnews/english/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in embedded.php in Ascended Guestbook 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en embedded.php de Ascended Guestbook 1.0.0 y versiones anteriores permite a atacantes remotos ejecutar código de su elección mediante un URL en el parámetro CONFIG[path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ascended_development:ascended_guestbook:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "D0745DBC-C038-40D6-ADC6-77E1794E988E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22554",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20710",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4187",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29756",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2631",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en rmgs/images.php de RMSOFT Gallery System 2.0 permite a atacantes remotos inyectar scripts WEB o HTML de su elección mediante el parámetro kw.\r\nNOTA: Algunos de estos detalles se han obtenido a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoops:xoops_rmsoft_gallery_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4241F0-7B5E-49F7-A73D-567957812673"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22426",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449458/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4161",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449458/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9, and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter in template/barnraiser_01/pol_view.tpl.php and other unspecified PHP scripts, a different vector than CVE-2006-5401."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples de inclusión remota de archivo en PHP en AROUNDMe 0.6.9 y posiblemente versiones anteriores, cuando register_globals está habilitado, permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro templatePath en template/barnraiser_01/pol_view.tpl.php y otros\r\nscripts PHP sin especificar, vector diferente al CVE-2006-5401."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aroundme:aroundme:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.9",
            "matchCriteriaId" : "38E3321C-8CAE-43C8-8B15-8DCCFF1D5E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=116154841209515&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1786",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017106",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449476/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116154841209515&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449476/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5534",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.htm in Zwahlen Online Shop Freeware 5.2.2.50, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) Kat, (3) id, or (4) no parameters. NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.htm de Zwahlen Online Shop Freeware 5.2.2.50 y posiblemente anteriores, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1)  cat, (2) Kat, (3) id, ó (4) no."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zwahlen_informatik:online_shop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.2.50",
            "matchCriteriaId" : "8ECF4D86-2482-4EAC-B136-A0F8E1466810"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-November/001106.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22571",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30016",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4160",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-November/001106.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5535",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the (1) theme parameter to scripts/dosetmytheme and the (2) template parameter to scripts2/editzonetemplate."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples de cruce de sitios en scripts (XSS) en WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 permiten a atacantes remotos inyectar scripts WEB o HTML mediante 1) parámetro theme en scripts/dosetmytheme y (2) parámetro template en scripts2/editzonetemplate."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:10.9.0_r50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81DB146-1739-4C9E-9C47-B558A25CB9E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://changelog.cpanel.net/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22555",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449472/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20683",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4190",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://changelog.cpanel.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449472/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\ncPanel, cPanel, 10.9.0-R56"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5536",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary files via a .. (dot dot) in the getpage parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de directorios en cgi-bin/webcm de D-Link DSL-G624T en el firmware 3.00B01T01.YA-C.20060616 permite a atacantes remotos leer ficheros de su elección mediante .. (punto punto) en el parámetro getpage."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsl-g624t:firmware_3.00b01t01.ya_c.2006-06-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62150B84-57ED-4200-B4A3-CE9A8492B837"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22524",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449486/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20689",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449486/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5537",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1) upnp:settings/state or (2) upnp:settings/connection parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples de cruce de sitios en scripts (XSS) en cgi-bin/webcm de D-Link DSL-G624T en el firmware 3.00B01T01.YA-C.20060616 permiten a atacantes remotos inyectar scripts WEB o HTML de su elección mediante los parámetros 1) upnp:settings/state ó (2) upnp:settings/connection"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsl-g624t:firmware_3.00b01t01.ya_c.2006-06-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62150B84-57ED-4200-B4A3-CE9A8492B837"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22524",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449486/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4191",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449486/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5538",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably a direct request."
      }, {
        "lang" : "es",
        "value" : "Firmware 3.00B01T01.YA-C.20060616 de D-Link DSL-G624T permite a atacantes remotos listar contenidos del directorio cgi-bin mediante vectores sin especificar, probablemente en una petición directa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:d-link:dsl-g624t:3.00b01t01.ya_c.2006-06-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAC559C-98C9-4A64-8435-88C21ABB4BD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449486/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449486/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfg[homepath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en login/secure.php de UeberProject Management System 1.0 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cfg[homepath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ueberproject_management_system:ueberproject_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "FF394A3C-7E70-484B-BBB8-46781099B16D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22565",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30015",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29775",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2640",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a \"MIN/MAX index optimization.\""
      }, {
        "lang" : "es",
        "value" : "El fichero backend/parser/analyze.c en PostgreSQL 8.1.x versiones anteriores a 8.1.5 permite a usuarios remotos sin autenticar provocar una denegación de servicio (daemon crash) mediante funciones agregadas concretas en una sentencia UPDATE, que no han sido debidamente tratadas durante una \"optimización de índices MIN/MAX.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:6.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7D1F6F-044C-478D-991D-D70281FD7C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:6.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB98484-1234-4BA2-ACB0-28F4BE684D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E42F6221-1AFF-4A4B-A08A-6E976D1EBBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7C5056-E280-4BD3-9924-2345B0B82776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D16C66-3688-4CF1-8788-F7D7766F04F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F520EC9F-7B20-4108-B3DC-ABF4947A2D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D324E1-A723-4ECC-A58F-660A5125FD05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F8CB95-DCEE-49C9-8985-E39E8E0498BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E0614E-0911-43EE-9F3D-2CF87E0F1851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFF09CFB-F7CE-4659-BB20-83231539F765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE8C2A3-7575-41C6-896C-C367E6D35015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88ED8E8C-9044-4E77-923A-D5C6C02A1081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037FF208-82A1-4448-88FE-FACB922FE1E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B710BA-91FF-47B9-BB56-4711CD50D50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A96D-84D5-4257-9981-1139CD4CD08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98290E4-2919-4492-BD14-BB24BA85C729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B56E9F72-6CBF-4784-89CD-435A030AC0B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B480F0-8FFC-4463-ADC6-95906751811C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629881D2-2A6D-4461-8C35-6EE575B63E6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A19EB5-A1AF-4293-854D-347CD21065DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18ED293-B408-435F-9D1F-2365A2E51022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7106B29-76F3-43FD-BF57-4693D5B55076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B804CD-AE47-4B46-9B37-7F46D4C9A332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23E89A3-551D-42E2-90EC-59A9DAB4F854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC46594-100B-459F-BCB7-1FA9D0719D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECD278B-55A7-4BCC-8AF1-004F02A96BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95DB94EF-32AE-4DD9-A9A4-4F7D4BE5F1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE2567C-BF48-4255-9E56-590A6F9DD932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20C8302B-631A-4DF7-839B-C6F3CC39E000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB318EB9-1B49-452A-92CF-89D9BA990AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5913A53B-7B72-4CBD-ADAE-318333EB8B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E58C0-327D-4F14-B496-05FC8179627E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF2D056-5120-4F98-8343-4EC31F962CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516E0E86-3D8A-43F9-9DD5-865F5C889FC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC7F18-B227-4C46-9A33-FB34DDE456CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCDB903F-0C89-4E65-857E-553CF9C192E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0DEB63-CA70-44C1-9491-E0790D1A8E21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "105E9F52-D17E-4A0B-9C46-FD32A930B1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DE2055D-AAA4-4A6A-918F-349A9749AF09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12409B2-161B-4F78-B7AD-3CF69DDCC574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2F1DA4-6625-469D-988B-5457B68851A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870F4348-6001-4C2F-A547-61964074E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E26D52-D95A-4547-BE6E-4F142F54A624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AAB2D1D-BE61-4D7C-B305-58B4F4126620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF590F2-899F-42E1-8A57-6F514C94CE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEC35A2-B17C-46EC-8697-9E03568339BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00562C18-DD81-4B09-AF93-739AF8757A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B52D093-7867-4FE8-B055-D8190103A1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.commandprompt.com/public/pgsql/changeset/25504",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22584",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24094",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24284",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_27_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/about/news.664",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0064.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0067.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0068.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0059/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://projects.commandprompt.com/public/pgsql/changeset/25504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/about/news.664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0064.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0068.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0059/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY."
      }, {
        "lang" : "es",
        "value" : "El fichero backend/parser/parse_coerce.c en PostgreSQL versiones 7.4.1 hasta 7.4.14, 8.0.x anteriores a 8.0.9, y 8.1.x anteriores a 8.1.5 permite a usuarios remotos autenticados, provocar una denegación de servicio (daemon crash) mediante una coacción de un elemento desconocido a ANYARRAY."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4",
            "versionEndExcluding" : "7.4.14",
            "matchCriteriaId" : "617ED667-C8A3-49E3-BF54-56A6721C3AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.9",
            "matchCriteriaId" : "973D7B2A-B63D-4D6A-88E1-598335690CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.5",
            "matchCriteriaId" : "4E8994FC-90C5-469C-BF9F-8AE484C2F172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.commandprompt.com/public/pgsql/changeset/26457",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22562",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/22584",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/22606",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/22636",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/23048",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/23132",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/24577",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://securitytracker.com/id?1017115",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry", "URL Repurposed" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:194",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_27_sr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.postgresql.org/about/news.664",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0067.html",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0068.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0059/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4182",
        "source" : "cve@mitre.org",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10905",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://projects.commandprompt.com/public/pgsql/changeset/26457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/22584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/22606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/22636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/23048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/23132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://secunia.com/advisories/24577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://securitytracker.com/id?1017115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry", "URL Repurposed" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.postgresql.org/about/news.664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0068.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0059/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "URL Repurposed" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements."
      }, {
        "lang" : "es",
        "value" : "El fichero backend/tcop/postgres.c de PostgreSQL 8.1.x anterioers a 8.1.5, permite a usuarios remotos autenticados, provocar una denegación de servicio (daemon crash) relativo a la duración de logado del protocolo-V3. Ejecuta mensajes para las sentencias SQL (1) COMMIT y(2) ROLLBACK."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF590F2-899F-42E1-8A57-6F514C94CE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEEC35A2-B17C-46EC-8697-9E03568339BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00562C18-DD81-4B09-AF93-739AF8757A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B52D093-7867-4FE8-B055-D8190103A1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.commandprompt.com/public/pgsql/changeset/25953",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22584",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22606",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23048",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24577",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_27_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.postgresql.org/about/news.664",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0067.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0068.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20717",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0059/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4182",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.commandprompt.com/public/pgsql/changeset/25953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_27_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.postgresql.org/about/news.664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0067.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2007-0068.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.trustix.org/errata/2006/0059/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-369-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en misc/function.php3 del Generador PHP de Object SQL Database (PGOSD), cuando register_globals está habilitado, permite a atacantes remotos ejecutar código de su elección mediante una URL en el parámetro path."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgosd:pgosd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAFE0D7-C4F2-44BB-90D7-C98337BA6990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001097.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449475/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20668",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20677",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29696",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2612",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001097.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449475/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces (%A0), which causes the address bar to omit some characters from the URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de truncamiento visual en Microsoft Internet Explorer 7 permite a atacantes remotos suplantar la barra de direcciones y posiblemente conducir ataques de phising mediante una URL maliciosa que contiene espacios non-breaking (%A0), y que causa que la barra de direcciones omita algunos caracteres de la URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ie:7.0:*:vista:*:*:*:*:*",
            "matchCriteriaId" : "3E51CBF2-EFFD-407D-AB34-BDE69EFD60E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/10/26/ie-address-bar-issue.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22542",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/internet_explorer_7_popup_address_bar_spoofing_test/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/347188",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/30022",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449917/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20728",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/10/26/ie-address-bar-issue.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/internet_explorer_7_popup_address_bar_spoofing_test/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/347188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/30022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449917/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allows remote attackers to use the product as a spam relay."
      }, {
        "lang" : "es",
        "value" : "Premium Antispam de Symantec Mail Security para Domino Server 5.1.x anterioers a 5.1.2.28  no filtra formatos de direcciones SMTP concretas, que permite a atacantes remotos utilizar el producto como un retransmisor de correo no deseado (spam)."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:mail_security:5.1.0:*:domino:*:*:*:*:*",
            "matchCriteriaId" : "A3D2C4B6-2F13-4487-989E-AC247D4D011A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22490",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.10.19.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017094",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29895",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19866",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29676",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityresponse.symantec.com/avcenter/security/Content/2006.10.19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/29895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/19866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.3.0 through 1.4.1 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][otscms][directories][classes] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en OTSCMS/OTSCMS.php de Open Tibia Server Content Management System (OTSCMS) 1.3.0 hasta 1.4.1 permite a atacantes remotos ejecutar código de su elección mediante una URL en el parámetro GLOBALS[config][otscms][directories][classes]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otscms:otscms:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED91F27-EC10-46AD-ABEF-912E8B4F41BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otscms:otscms:1.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FFD35CE-A525-4C15-8436-A55B18509CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otscms:otscms:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E500411F-A6DE-4386-99EE-5A88600B4FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otscms:otscms:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54644291-1DFB-4B1B-BAFB-E5DF5C3E4082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001096.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22577",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20694",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.0.0 through 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][otscms][directories][includes] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en OTSCMS/OTSCMS.php de Open Tibia Server Content Management System (OTSCMS) 1.0.0 hasta 1.0.3 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro GLOBALS[config][otscms][directories][includes]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otscms:otscms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "BFF85D0C-4842-44D7-9778-F4EBAFE47B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otscms:otscms:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6976865-F6D5-4E3B-B213-D76970FEB24C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001096.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22577",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20694",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][directories][classes] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en OTSCMS/OTSCMS.php de Open Tibia Server Content Management System (OTSCMS) 2.0.0 hasta 2.1.3 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro GLOBALS[config][directories][classes]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otscms:otscms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.3",
            "matchCriteriaId" : "C05E7787-603C-4AE3-8BA8-7BC99E7363FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otscms:otscms:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546328DA-9165-4778-B8F8-EE513A3A75DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001096.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22548",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20694",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29719",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2622",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://attrition.org/pipermail/vim/2006-October/001096.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in libraries/amfphp/amf-core/custom/CachedGateway.php in Adobe PHP SDK allows remote attackers to execute arbitrary PHP code via the AMFPHP_BASE parameter.  NOTE: this issue has been disputed by a third-party researcher who states that AMFPHP_BASE is a constant"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADO ** Vulnerabilidad de inclusión remota de archivo en PHP en libraries/amfphp/amf-core/custom/CachedGateway.php de Adobe PHP SDK permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro AMFPHP_BASE.\r\nNOTA: Esta vulnerabilidad ha sido impugnado por un investigador tercero que afirma que AMFPHP_BASE es una constante."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:adobe_php_ria_sdk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25E337DD-D6BD-4DBD-9175-53579BA5C957"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1784",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449576/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449616/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449576/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449616/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to /dev/crypto."
      }, {
        "lang" : "es",
        "value" : "El núcleo en FreeBSD 6.1 y OpenBSD 4.0 permite a usuarios locales provocar una denegación de servicio mediante vectores sin especificar relativas a peticiones concretas ioctl al /dev/crypto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:release:*:*:*:*:*:*",
            "matchCriteriaId" : "8C64EE9C-18E1-49C6-96DE-7E6F1607C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:release_p10:*:*:*:*:*:*",
            "matchCriteriaId" : "B36B3805-8A85-4357-ABC1-AB22C61E3381"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:stable:*:*:*:*:*:*",
            "matchCriteriaId" : "231B70A8-890A-4790-A33A-64228656BF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC77812C-D84E-493E-9D21-1BA6C2129E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://elegerov.blogspot.com/2006/10/here-is-lame-proof-of-concept-code-for.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22543",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20713",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://elegerov.blogspot.com/2006/10/here-is-lame-proof-of-concept-code-for.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a long argument to the RCPT TO command."
      }, {
        "lang" : "es",
        "value" : "Búfer basado en pila en QK SMTP 3.01 y anteriores pudieran permitir a atacantes remotos ejecutar código de su elección mediante a un argumento long en el comando RCPT TO."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qksoft:qk_smtp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "26CABF03-FCEF-4749-8AA0-0ECFFEA96F1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22563",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017114",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20681",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial of service (CPU consumption or application crash) or execute arbitrary code via a long argument to the (1) MAIL FROM or (2) RCPT TO command."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en montón en RevilloC MailServer 1.21 y anteriores permite a atacantes remotos provocar una denegación de servicio (agotamiento de CPU o caída de aplicación) o ejecutar código de su elección mediante un argumento long los comandos (1) MAIL FROM o (2) RCPT TO.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revilloc_solutions:revilloc_mailserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "70C22E5E-68C4-4268-B0DC-4CD0984176EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22559",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20709",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4181",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2650",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain options."
      }, {
        "lang" : "es",
        "value" : "Cisco Security Agent (CSA) para Linux 4.5 anteriores a 4.5.1.657 y 5.0 anteriores a 5.0.0.193, tal y como se usan en Unified CallManager (CUCM) y Unified Presence Server (CUPS), permite a atacantes remotos provocar una denegación de servicio (resource consumption) mediante una exploración de puertos con opciones concretas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_agent:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5562E755-E4A3-4656-859A-40757012BE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_agent:4.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A1657D-BBC9-4CF5-8F5A-486FAC8B9489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_agent:4.5.1.639:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F08C40-7A58-4B0B-A3A1-6F23DB113F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_agent:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E171031D-51C1-41BB-96E4-DFFF0C36B74B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5865997-F8B2-4ABB-96DF-3AE691A7CE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9211420-9F35-4872-879A-5F7CA29C6299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DD4B55-4C68-45CD-988E-D470C26E5E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C1B081-1FD7-4BBD-84BD-E1E5F80C74FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_callmanager:5.0\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC32C417-3E61-4892-9A42-C31C6D62F09D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F897DA4-E313-45C8-A4FB-52404D6541BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_presence_server:1.0\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA3BA5D-2CEB-4AAC-8CB4-4A2CDC574076"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22574",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a00807693c7.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30055",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20737",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4198",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a00807693c7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product updates:\r\nCisco, Unified CallManager, 5.0(4)\r\nCisco, Unified CallManager, 5.0(4a) with CSA COP upgrade\r\nCisco, Unified Presence Server, 1.0(2) with CSA COP upgrade\r\nCisco, Security Agent, 5.0.193\r\nCisco, Security Agent, 4.5.1.657\r\nCisco, Security Agent, 5.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local files via a .. (dot dot) in the user_settings cookie, as demonstrated by using the MyFile parameter in albumview.php to upload a text/plain .gif file containing PHP code, which is executed by index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de directorios en index.php de Imageview 5 permite a atacantes remotos leer o ejecutar ficheros locales de su elección mediante un .. (punto punto) en la cookie user_settings, como se demuestra utilizando le parámetro MyFile en albumview.php parar enviar un fichero text/plain .gif conteniendo código PHP, que es ejecutado por index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackdot:imageview:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5",
            "matchCriteriaId" : "42D81851-8F4A-4DD7-800E-99FBA3CE318F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22552",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20731",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4188",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2647",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-26T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execute arbitrary PHP code via the langage parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en constantes.inc.php de EPNadmin 0.7 y 0.7.1 permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro langage."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epnadmin:epnadmin:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FFFC7F-C5E7-4D1F-B074-A5FA3A17C7FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epnadmin:epnadmin:0.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B83DBB9C-B0DC-4334-8FF1-337501F84688"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22508",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001098.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20624",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4167",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2596",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001098.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la función localtime_r y otras ciertas funciones, en libc en HP-UX B.11.11 y posiblemente otras versiones permiten usuarios locales ejecutar código de su elección a través de una variable de entorno TZ."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.23.nu/prdelka/stories/13144/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20718",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2636",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.23.nu/prdelka/stories/13144/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument.  NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en los comandos swpackage y (2) swmodify en HP-UX B.11.11 y posiblemente otras versiones permiten a usuarios locales ejecutar código de su elección a través de un argumento -S. NOTA: esto podría ser un duplicado de CVE-2006-2574, pero los detalles relacionados con CVE-2006-2574 son muy vagos para ser ciertos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.23.nu/prdelka/stories/13144/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/33993",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/33994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20706",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20735",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5035",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2633",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.23.nu/prdelka/stories/13144/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://osvdb.org/33993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/33994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument.  NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cadena de formato en comando swask en HP-UX B.11.11 y posiblemente otras versiones permiten a un usuario local ejecutar código de su elección a través de especificaciones del formato de cadena en el argumento -S. NOTA: este podría ser un duplicado de CVE-2006-2574, pero los detalles relacionados con CVE-2006-2574 sonmuy vagos para ser ciertos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771931F7-9180-4EBD-8627-E1CF17D24647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F038B325-A982-43FB-9146-E103CCFB5C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD9BE2B-7255-4FC1-B452-E8370632B03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*",
            "matchCriteriaId" : "D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.23.nu/prdelka/stories/13144/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20726",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2635",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.23.nu/prdelka/stories/13144/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote attackers to cause a denial of service (Internet Explorer crash) and possibly execute arbitrary code via certain strings in the second and third arguments."
      }, {
        "lang" : "es",
        "value" : "El objeto de control ActiveX ADODB.Connection 2.7 (ADODB.Connection.2.7) permite a atacantes remotos provocar una denegación de servicio (caída de Internet Explorer) mediante argumentos largos para la función Execute."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.5:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B901D0A6-2F68-4CAC-B985-6A2BA0A1705B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "036C836C-6387-4DAC-96B2-94C979D236E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F233914-2763-42E8-BCB9-E0D1186783E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.7:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "819DDAAF-D9A3-4540-B467-2A7233D36038"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F233914-2763-42E8-BCB9-E0D1186783E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:data_access_components:2.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "036C836C-6387-4DAC-96B2-94C979D236E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/10/27/adodb-connection-poc-published.aspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20061027.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22452",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017127",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/589272",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/31882",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20704",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-044A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-009",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29837",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/10/27/adodb-connection-poc-published.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20061027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/589272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/31882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-044A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorImpact" : "Failed exploit attempts will likely result in an application level denial-of-service condition."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/index.php, and unspecified vectors related to certain other files.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en heading.php en Boesch ProgSys 0.151 y anteriores permiten a un atacante remoto inyectar secuencias de comandos web o HTML a través de PATH_INFO a admin/index.php,y vectores no especificados a otros ciertos archivos. NOTA: algunos de estos detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boesch_it-consulting:progsys:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.151",
            "matchCriteriaId" : "C24C9EA6-4E28-4109-ADB8-36687CD66420"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22532",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449571/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20720",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vigilon.com/advisories/vg-progsys-24-10-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449571/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vigilon.com/advisories/vg-progsys-24-10-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdb_auth cookie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en admincp.php en Discuz! GBK 5.0.0 permiten a un atacante remoto ejecutar comandos SQL de su elección a través de la cookie cdb_auth."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discuz:discuz_gbk:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B63CC8DD-710E-4A42-833A-3717BE40D936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22534",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4210",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2644",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5562",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/database.php in SourceForge (aka alexandria) 1.0.4 allows remote attackers to execute arbitrary PHP code via the sys_dbtype parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en include/database.php en SourceForge (también conocido como alexandria) 1.0.4 permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro sys_dbtype."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open_source_technology_group:sourceforge:1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AA537B-DB5D-4673-A374-10667E1F8D7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20692",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2623",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5563",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Yahoo! Messenger (Service 18) before 8.1.0.195 allows remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Yahoo! Messenger (Service 18) anterior a 8.1.0.195 permite a atacantes remotos provocar una denegación de servicio (referencia a NULL y caída de aplicación) mediante un nombre de sala manipulado en una Invitación de Conferencia. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yahoo:messenger:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7178A56-42F9-44BC-8742-402480F761FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0518.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0566.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22510",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449667/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20625",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4193",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0518.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0566.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449667/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary web script or HTML via the op parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en user.php en MAXdev MD-Pro 1.0.76 permite a un atacante remoto inyectar secuencias de comandos web o HTML través del parámetro op. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.76",
            "matchCriteriaId" : "2361458F-28EB-450F-A3B2-5F64EE350734"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22564",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5565",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) name, (2) file, (3) module, and (4) func parameters in (a) index.php; and the (5) file parameter in (b) modules.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en MAXdev MD-Pro 1.0.76 permite a un atacante remoto inyectar cabeceras HTTP de su elección a través de una secuencia CRLF en los parámetros (1) name, (2) file, (3) module, y (4) func en (a) index.php; y el (5)parámetro file en (b) modules.php. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.76",
            "matchCriteriaId" : "2361458F-28EB-450F-A3B2-5F64EE350734"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22564",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, and (10) inside parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección CRLF en premium/index.php en Shop-Script permite a atacantes remotos inyectar cabeceras HTTP de su elección y realizar ataques de división de respuesta HTTP mediante secuencias CRLF en los parámetros (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, y (10) inside."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webasyst_llc:shop-script:*:*:free:*:*:*:*:*",
            "matchCriteriaId" : "B9F7CFC0-2A5F-49A9-9198-CD393FDEE29C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22541",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1791",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449499/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20685",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4219",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449499/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) ultravox-max-msg header to the Ultravox protocol handler or (2) unspecified Lyrics3 tags."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer basado en montón en AOL Nullsoft WinAmp anterior a 5.31 permite a un atacante remoto con la intervención del usuario ejecutar código de su elección a través de una cabecera manipulada (1)ultravox-max-msg a el manejador de protocolo Ultravox o (2) etiquetas no especificadas Lyrics3."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DEF8714-56FC-4D6C-AE87-072ADD7698A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=431",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=432",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22580",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/449092",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20744",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4196",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.winamp.com/player/version_history.php#5.31",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/449092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.winamp.com/player/version_history.php#5.31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Upgrade to 5.31"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long MKD command."
      }, {
        "lang" : "es",
        "value" : "FtpXQ Server 3.0.1 permite a un atacante remoto provocar denegación de servicio (agotamiento de CPU) a través de un comando MKD.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datawizard:ftpxq:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B60FB860-3A91-4BB8-9C27-405911E7ED23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050335.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22540",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1789",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4192",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29778",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050335.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "FtpXQ Server 3.0.1 se instala con dos cuentas por defecto de testeo , lo cual permite a un atacante remoto leer o escribir archivos de su elección a través de vectores desconocidos. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datawizard:ftpxq:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B60FB860-3A91-4BB8-9C27-405911E7ED23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to read arbitrary files via a .. (dot dot) in the doc parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de directorios en/scripts/cruise/cws.exe en CruiseWorks 1.09c y 1.09d permite a un atacante remoto leer ficheros de su elección a través de la secuencia ..(punto punto) en el parámetro doc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kynoslogic:cruiseworks:1.09c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29B28CA-85C6-42D5-9D88-07C0A934A3BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kynoslogic:cruiseworks:1.09d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52AE4C4-6489-4FB5-AFDD-ECD9DC3E8931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=116167230400165&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22139",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Oct/1017110.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://vuln.sg/cruiseworks109d-en.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449572/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20698",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29765",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116167230400165&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Oct/1017110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://vuln.sg/cruiseworks109d-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449572/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T16:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to execute arbitrary code via a long string in the doc parameter."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en /scripts/cruise/cws.exe en CruiseWorks 1.09c y 1.09d permite a un atacante remoto ejecutar código de su elección a través de una cadena en el parámetro doc."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kynoslogic:cruiseworks:1.09c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29B28CA-85C6-42D5-9D88-07C0A934A3BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kynoslogic:cruiseworks:1.09d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52AE4C4-6489-4FB5-AFDD-ECD9DC3E8931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=116167230400165&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Oct/1017110.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://vuln.sg/cruiseworks109d-en.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449572/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20699",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4158",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29763",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116167230400165&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Oct/1017110.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://vuln.sg/cruiseworks109d-en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449572/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nKynoslogic, CruiseWorks, 1.09e"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5467",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a \"-\" instead of \"--\" and contains an inconsistent ID."
      }, {
        "lang" : "es",
        "value" : "La libreria CGI cgi.rb para Ruby 1.8 permite a un atacante remoto provocar denegación de servicio (bucle infinito y consumo de CPU) a través de una respuesta HTTP con un cuerpo multiparte MIME que contiene un limite especifico no valido, como se demosotro usando una especificaión que comenzaba con un \"-\" en vez de \"--\" y contiene un ID inconsistente."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05A4185F-1CE1-48D1-B967-01A96527417B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rubyforge.org/pipermail/mongrel-users/2006-October/001946.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22615",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22624",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22761",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22932",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23040",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23344",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-12.xml",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017194",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1234",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1235",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:192",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.030-ruby.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0729.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20777",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-371-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4244",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4245",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10185",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rubyforge.org/pipermail/mongrel-users/2006-October/001946.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/25402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-12.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.030-ruby.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0729.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-371-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5587",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers to execute arbitrary PHP code via a URL in the chemin_appli parameter in (1) admin/inc/organisations/form_org.inc.php and (2) admin/inc/organisations/country_insert.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en MDweb 1.3 y anteriores (Mdweb132-postgres) permiten a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro chemin_appli (1)admin/inc/organisations/form_org.inc.php y (2) admin/inc/organisations/country_insert.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mdweb:mdweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "596DC7A3-92B6-4FDB-AE6A-437FA28895DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22561",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20687",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29721",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2626",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5588",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when register_globals and magic_quotes_gpc are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter to (1) includes/rss-reader.php or (2) admin/config.php, different vectors than CVE-2006-3185."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en CMS Faethon 2.0 Ultimate y anteriores, cuando register_globals y magic_quotes_gpc están habilitados, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro mainpath en (1) includes/rss-reader.php o (2) admin/config.php, vector diferente que CVE-2006-3185."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cms_faethon:cms_faethon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0_ultimate",
            "matchCriteriaId" : "CEC59F5E-0E41-4DD2-978A-64D2C6C57370"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cmsfaethon.org/news.php#8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://dev.cmsfaethon.org/tracker/?do=details&id=43",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29757",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2632",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://cmsfaethon.org/news.php#8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://dev.cmsfaethon.org/tracker/?do=details&id=43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) OE.pm, (2) AM.pm, and (3) Form.pm."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en LedgerSMB (LSMB) 1.1.0 y anteriores permite a un atacante remoto ejecutar comandos SQL de su eleción a través de un vectores no especificados en (1) OE.pm, (2) AM.pm, y(3) Form.pm."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "DCD93588-6CFF-4ED9-9464-09A7519DC531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ledgersmb:ledgersmb:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBCE1BDC-52DF-4555-AB36-3A0AD4DF6EFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22483",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=456803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464789/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4209",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=456803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/464789/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en index.php en ArticleBeach Script 2.0 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro page."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:articlebeach:articlebeach_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "2E9519C0-5152-4AA4-91A2-7D1F2128CDD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22539",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449924/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4213",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29785",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2645",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449924/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Admin/check.asp in PacPoll 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en Admin/check.asp en PacPoll 4.0 y anteriores permiten a un atacante remoto ejecutar comandos SQL de su elección a través de los parámetros (1) uid y(2) pwd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pacos_drivers:pacpoll:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "E757F691-EBDF-4DB5-9DBA-FC0C495CD07A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22576",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-445.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449668/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20746",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-445.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449668/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by setting the polllog cookie value to \"xx\"."
      }, {
        "lang" : "es",
        "value" : "Admin/adpoll.asp en PacPoll 4.0 y anteriores permite a un atacante remoto evitar la validación a través de la configuración del valor cookie pollog a \"xx\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pacos_drivers:pacpoll:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "E757F691-EBDF-4DB5-9DBA-FC0C495CD07A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22576",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1788",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kapda.ir/advisory-445.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449668/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20742",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4208",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kapda.ir/advisory-445.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449668/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in Desknet's (niokeru) before 5.0J R1.0 might allow remote authenticated users to execute arbitrary code via unspecified vectors.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en Desknet's (niokeru) anteriores a 5.0J R1.0 permitirían a un usuario remoto validado ejecutar código de su elección a través de vectores no especificados. NOTA: algunos de estos detalles se obtuvieron de terceras fuentes de información."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neo_japan:desknets:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5j_r2.4",
            "matchCriteriaId" : "74C8D7DF-F3B6-4646-AA6E-4380FE446744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/jp/JVN%2307235355/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22456",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.desknets.com/standard/download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20716",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4163",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29758",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://jvn.jp/jp/JVN%2307235355/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.desknets.com/standard/download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nNeo Japan, Desknet's, 5.0J R1.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.  NOTE: it is possible that this issue is related to CakePHP."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en University of British Columbia iPeer 2.0, y posiblemente anteriores, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro page. NOTA: es posible que este asunto esté relacionado con CakePHP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_of_british_columbia:ipeer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "77832F5E-636F-4BF3-A008-348A7382E99E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449460/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29754",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449460/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4805",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service (memory consumption and crash) via an encoded XOT packet that produces a zero length value when it is decoded."
      }, {
        "lang" : "es",
        "value" : "epan/dissectors/packet-xot.c en el separador XOT (dissect_xot_pdu) en Wireshark (antes conocido como Ethereal) 0.9.8 hasta la 0.99.3 permite a un atacante remoto provocar denegación de servicio (consumo de memoria y caida) a través de un paquete XOT codificado que crea un valor de longitud zero cuando está codificado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60178790-62CC-41A9-8B5A-78CF49069E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22659",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017129",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/723736",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1201",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29843",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10199",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/723736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 0.99.4.\r\n"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5468",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el separador HTTP en Wireshark (antes conocido como Ethereal) 0.99.3 permite a un atacante remoto provocar denegación de servicio (caida) a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017129",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/363992",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29840",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10707",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14120",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/363992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5740",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-27T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via a crafted LDAP packet."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el separador LDAP en Wireshark (antes conocido comoEthereal) 0.99.3 permite a un atacante remoto provocar denegación de servicio (caida) a través de un paquete LDAP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Oct/1017129.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29841",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9482",
        "source" : "cve@mitre.org"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/alerts/2006/Oct/1017129.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word (DOC) file that produces (1) large LFO clfolvl values in the wvGetLFO_records function or (2) a large LFO nolfo value in the wvGetFLO_PLF function."
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de entero en la biblioteca WV en wvWare (anteriormente conocido como mswordview) versiones anteriores a 1.2.3, utilizado por AbiWord, KWord, y posiblemente otros productos, permiten a atacantes remotos con la intervención del usuario, ejecutar código de su elección mediante un fichero manipulado Microsoft Word (DOC) que produce 1) valores elevados LFO clfolvl en la función wvGetLFO_records ó (2) un valor elevado LFO nolfo en la función wvGetFLO_PLF."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wvware:wvware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "F3A07000-2EB3-479F-936C-45BE0CEBCD79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=433",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=434",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22595",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22680",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22705",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23335",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200612-01.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017126",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_28_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20761",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-374-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4221",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29833",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200612-01.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_28_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-374-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable.  This issue did not affect versions of wvWare library included in koffice packages as shipped with Red Hat Enterprise Linux 2.1",
        "lastModified" : "2007-02-09T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4574",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values."
      }, {
        "lang" : "es",
        "value" : "Error por un paso en el disector MIME Multipart en Wireshark (anteriormente Ethereal) desde la versión 0.10.1 hasta la 0.99.3 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado) mediante determinados vectores que desencadenan un error de aserción relacionado con valores de longitud inesperados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.1",
            "versionEndIncluding" : "0.99.3",
            "matchCriteriaId" : "4D0290BD-E0AE-4DC5-BE29-D8B9A25309CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22659",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1017129",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1201",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29844",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9740",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://securitytracker.com/id?1017129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5469",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal) 0.10.11 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger a null dereference."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el diseccionador WBXML (antiguamente Ethereal)desde la versión 0.10.11 hasta la 0.99.3., permite a atacantes remotos causar la denegación de servicio (caída) mediante determinados vectores que disparen referencias nulas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9053B950-143E-4941-9C58-A57D9F1FF78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017129",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29842",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9537",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_65_ethereal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0726.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450307/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the AirPcap support in Wireshark (formerly Ethereal) 0.99.3 has unspecified attack vectors related to WEP key parsing."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad sin especificar en el soporte AirPcap en Wireshark (anteriormente conocido como Ethereal) 0.99.3 tiene vectores de ataque sin especificar referido al analizador sintáctico WEP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9053B950-143E-4941-9C58-A57D9F1FF78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41535173-00D3-4E52-9441-D7ED44BE9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F19A6-98D5-4B6A-8AF0-D88561D50296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503E7F73-0E2A-442C-9B76-679A2AD03052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C422E5-3252-48C2-B4FF-E32AA5463D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C43A78-E578-4B1C-8E33-24529E973E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14787",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wireshark.org/security/wnpa-sec-2006-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\\ (dot dot backslash) sequences in an HTTP GET request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorios en el  servidor SSL de AEP Smartgate 4.3b permite a atacantes remotos descargar ficheros de su elección mediante secuencias ..\\ (punto punto barra invertida) en una petición HTTP GET."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aep_networks:smartgate_ssl_server:4.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EED6A56-742A-4CE1-981B-A636782B5A8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22550",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4224",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Update to version 4.3C or later."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters."
      }, {
        "lang" : "es",
        "value" : "join.asp en MiniHTTP Web Forum & File Server PowerPack 4.0 permite a atacantes remotos añadir o modificar cuentas de usuario de su elección a través de la modificación de los parámetros (1) frmMailBox y (2)frmUserPass."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minihttp:web_forum_file_sharing_sever_powerpack:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C8F75A-03AF-4BA7-999B-CC94851F4E7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22568",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20743",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4217",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29826",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php para GOOP Gallery 2.0, y posiblemente otras versiones anteriores a 2.0.3, permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro image."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webgeneius:goop_gallery:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A40472-6264-428E-8D5A-19CE45A5C0B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webgeneius:goop_gallery:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF276DD-0FF9-4E24-8253-A2BD13A9446F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webgeneius:goop_gallery:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9450C9D5-8FE6-42D6-9BC1-06F02E6A8613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lostmon.blogspot.com/2006/10/goop-gallery-image-param-cross-site.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1017081",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://webgeneius.com/index.php?mod=blog&id=49",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20554",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29643",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lostmon.blogspot.com/2006/10/goop-gallery-image-param-cross-site.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securitytracker.com/id?1017081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://webgeneius.com/index.php?mod=blog&id=49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "URL Repurposed" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWV_FLOW_ITEM_HELP package.  NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle has not publicly disputed claims by a reliable researcher that this has been fixed by the October 2006 CPU."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en Oracle Application Express (anteriormente conocido como HTML DB) versiones anteriores a 2.2.1 permite a atacantes remotos inyectar scripts WEB o HTML de su elección mediante el paquete WWV_FLOW_ITEM_HELP.\r\nNOTA: Es probable que esta vulnerabilidad se solape con alguna de las VulnIDs de Oracle, descritas en CVE-2006-5351. Oracle no ha impugnado públicamente los comentarios de un investigador fiable que indica que esto se ha corregido en el CPU de Octubre de 2006."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95351E3F-5B5C-48F1-9137-2CCCE11775AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1792",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_apex_css_wwv_flow_item_help.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449500/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "US Government Resource" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.red-database-security.com/advisory/oracle_apex_css_wwv_flow_item_help.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449500/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files with insecure permissions, which allows local users to gain privileges by reading the passwords from (1) KeyTool\\keytool.config or (2) webapps\\protiva\\WEB-INF\\classes\\authserver.config."
      }, {
        "lang" : "es",
        "value" : "Axalto Protiva 1.1 posiblemente sólo en versiones no comerciales, almacena claves de acceso en texto plano en ficheros sin permisos seguros, que permite a usuarios locales obtener privilegios leyendo las claves de acceso en KeyTool\\keytool.config ó (2) webapps\\protiva\\WEB-INF\\classes\\authserver.config."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axalto:protiva:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C735579-D3D9-4035-AA06-9103B130BAB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1793",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449891/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20755",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29839",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449891/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote authenticated users to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila la función eap_do_notify en eap.c en xsupplicant anterior a la versión 1.2.6. y, posiblemente, otras versiones, permite a usuarios remotos autenticados, la ejecución de código arbitrario de su elección a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "6020906D-C769-4B13-BEE2-E80A3768F062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91577B2B-003B-4B7D-A0DF-6D9B09964793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0958592C-441E-40D7-A944-68A1777042AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6147D5B-2628-4C75-B7F0-3BA4546C7F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5541BD6-DC5A-4A11-A65F-95689BD85C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1378B5A9-A81D-48C7-A515-49DD5E56FDB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A66D7E3-A179-4F14-99C0-B9857BD92C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237E427F-722F-496D-A8DE-D239987FD8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A36D0B9C-A22E-4B66-B044-D7EC2E5C77D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551BD262-B12C-4648-9780-6D538312C167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8037E1C6-5CBA-41EE-A738-EBA32CC19576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206C8E85-FE93-494B-A3CF-B77FD39D86B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29608A2-7F8F-4587-85BB-A2CCD7A3480F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05DDA25-5BB7-44FB-A466-624DBFC96248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A797F76B-9C79-46C3-A6F5-77FB5158CFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A5B89E-2996-4BA9-9F66-1B057AE6A9EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://open1x.cvs.sourceforge.net/open1x/xsupplicant/src/eap.c?r1=1.135&r2=1.136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22612",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22641",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_01_sr.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20775",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4233",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29902",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://open1x.cvs.sourceforge.net/open1x/xsupplicant/src/eap.c?r1=1.135&r2=1.136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2007_01_sr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-28T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple memory leaks in xsupplicant before 1.2.6, and possibly other versions, allow attackers to cause a denial of service (memory consumption) via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples agujeros de memoria en el el xsupplicant anterior a la versión 1.2.6. y, posiblemente, otras versiones, permite a atacantes denegación de servicio (agotamiento de memoria) a través de vectores sin especificar."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "6020906D-C769-4B13-BEE2-E80A3768F062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91577B2B-003B-4B7D-A0DF-6D9B09964793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0958592C-441E-40D7-A944-68A1777042AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6147D5B-2628-4C75-B7F0-3BA4546C7F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5541BD6-DC5A-4A11-A65F-95689BD85C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:0.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1378B5A9-A81D-48C7-A515-49DD5E56FDB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A66D7E3-A179-4F14-99C0-B9857BD92C95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237E427F-722F-496D-A8DE-D239987FD8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.0pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A36D0B9C-A22E-4B66-B044-D7EC2E5C77D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.0pre2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551BD262-B12C-4648-9780-6D538312C167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8037E1C6-5CBA-41EE-A738-EBA32CC19576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206C8E85-FE93-494B-A3CF-B77FD39D86B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29608A2-7F8F-4587-85BB-A2CCD7A3480F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05DDA25-5BB7-44FB-A466-624DBFC96248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A797F76B-9C79-46C3-A6F5-77FB5158CFC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xsupplicant:xsupplicant:1.2pre1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A5B89E-2996-4BA9-9F66-1B057AE6A9EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22612",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22641",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=421973&group_id=60236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:189",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4232",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29903",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=421973&group_id=60236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nxsupplicant, xsupplicant, 1.2.8"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5603",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-30T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the RC parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en pop_mail.asp en Snitz Forums 2000 3.4.06 permite a atacantes  remotos ejecutar comandos SQL de su elección mediante el parámetro RC. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6A7A03-4580-4FB9-958E-992717F2AE72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20712",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-30T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the CardLanguageFile parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorios en phpcards.header.php en phpCards 1.3 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante secuencias .. (punto punto) en el parámetro CardLanguageFile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcards:phpcards:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258D9070-351B-422D-860F-45CEBD60DF96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017070",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29615",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-30T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow remote attackers to inject arbitrary web script or HTML via the CardFontFace parameter and other unspecified parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en phpcards.footer.php de phpCards 1.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro CardFontFace y otros parámetros no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcards:phpcards:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258D9070-351B-422D-860F-45CEBD60DF96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017070",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29616",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5470",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-10-30T20:07:00.000",
      "lastModified" : "2023-11-07T01:59:31.717",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-5740.  Reason: This candidate is a duplicate of CVE-2006-5740 due to a typo.  Notes: All CVE users should reference CVE-2006-5740 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-30T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a \"/./.\" (modified dot dot) sequences in the getpage parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en /cgi-bin/webcm en INCA IM-204 permite a atacantes remotos leer archivos de su elección mediante una secuencia \"/./.\" (punto punto modificada) en el parámetro getpage."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:inca:im-204_adsl_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B30F72B6-9F12-486B-8F9A-65A4A25A40EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22557",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1796",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449504/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20696/info",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449504/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20696/info",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-30T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to \"parameters from URLs.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en Extended Tracker (xtracker) 4.7 anterior a 1.5.2.1 para Drupal, permite a un atacante remoto ejecutar comandos SQL de su elección a través de vectores no especificados realcionados con \"parámetros de URLs.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:extended_tracker:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4E2489-1F1D-446C-9BA0-2CBCEEE01C02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://drupal.org/node/91358",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22566",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20759",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://drupal.org/node/91358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-30T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via \"\\.\\./\" sequences in the dir parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorios en dir.php en TorrentFlux 2.1 permite a atacantes remotos listar directorios de su elección mediante secuencias \"\\.\\./\" en el parámetro dir."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torrentflux:torrentflux:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA636773-F5FC-4051-BBA7-06F433A4E2D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1797",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449893/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20771",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449893/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en player/includes/common.php de Teake Nutma Foing, como se encuentra modificado en Fully Modded phpBB (phpbbfm) 2021.4.40, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fully_modded_phpbb:fully_modded_phpbb:2021.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93305706-295E-4E2E-AE47-5DF98F48896F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22499",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and attack vectors, related to the 4.20.01(T) \"Security fix.\" NOTE: due to the lack of details in the vendor advisory, it is not clear whether this issue is related to CVE-2006-5405."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Toshiba Bluetooth Stack anterior a 4.20.01 tiene un impacto desconocido y vectores de ataque, relacionados con 4.20.01(T) \"Security fix.\" NOTA: debido a la carencia de detalles del vendedor consultado, no está claro si esta edición está relacionada con CVE-2006-5405."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toshiba:bluetooth_stack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.20.00",
            "matchCriteriaId" : "E92D22FC-804D-45DC-A370-BC978F6CC664"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=bltstack-42001-notebook",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44391",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=bltstack-42001-notebook",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the aide parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad PHP de inclusión remota de archivo en aide.php3 en GestArt beta 1, cuando register_globals está activado, permite a un atacante remoto ejecutar código PHP de su elección a través del parámetro aide."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:michel_pradel:gestart:beta_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B8C4BB-6417-4CDC-84D0-CFE9FA821849"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449887/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20750",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0943",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29853",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3467",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449887/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/3467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter"
      }, {
        "lang" : "es",
        "value" : "Inclusión remota de archivo PHP en Core/core.inc.php en MP3 Streaming DownSampler (mp3SDS) 3.0, cuando está habilitado register_globals, permite a atacantes remotos ejecutar código PHP arbitrario a través del parámetro fullpath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp3_streaming_downsampler:mp3_streaming_downsampler:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47FADFC6-8E50-4D34-A3E5-926FD6C535C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22605",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20783",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4230",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2666",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Microsoft Windows NAT Helper Components (ipnathlp.dll) sobre Windows XP SP2, cuando Internet Connection Sharing está activado, permite a un atacante remoto provocar denegación de servicio (caida svchost.exe) a través de una consulta DNS mal formada, el cual termina en un puntero de referencia nulo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_nt_helper_components:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3CF1DF6-F358-40D2-9023-43BCC9ED8C5E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20061028.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22592",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30096",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4248",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29917",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2672",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20061028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the txpcfg[txpath] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de archivo remoto en PHP en publish.php de Textpattern 1.19, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro txpcfg[txpath]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:textpattern:textpattern:1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F462404-8934-40B9-B3C3-7B15344291B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1794",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449907/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449907/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in OpenPBS, as used in SUSE Linux 9.2 through 10.1, allow attackers to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades no especificadas en OpenPBS, tal y como se usa en SUSE Linux 9.2 hasta la 10.1, permite a un atacante ejecutar código de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openpbs:openpbs:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF8E136-B17A-4048-8C14-DF19FA01757F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "C89BA3B6-370B-4911-A363-935A9C9EACF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*",
            "matchCriteriaId" : "4F1B4D15-0562-44D6-B80B-35A8F432BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "D84ABF78-0D85-4E15-907E-B5ACE86EB8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "matchCriteriaId" : "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*",
            "matchCriteriaId" : "16915004-1006-41D6-9E42-D1A5041E442D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "994ABCE2-3B9E-4E4E-83F7-CE2A79C70F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:suse_linux:10.1:*:professional:*:*:*:*:*",
            "matchCriteriaId" : "397B7AE2-248A-4D89-A562-CAA3AD66C862"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Oct/0007.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22637",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24716",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200704-04.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20776",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4250",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29944",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Oct/0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200704-04.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Failed exploit attempts may result in denial-of-service conditions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or download arbitrary files via a base64-encoded file path containing a .. (dot dot) sequence in the file parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de directorios en index.php en Thepeak File Upload Manager 1.3 permite a atacantes remotos leer o bajar ficheros de su elección mediante una ruta de fichero codificada en base64 conteniendo una secuencia .. (punto punto) en el parámetro file."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thepeak:thepeak_file_upload_manager:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60A65B8-894B-425F-9159-627D47F36F1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1798",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449936/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20760",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449936/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5618",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the ad_direct parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en script/cat_for-aff.php en Netref 4 permite a atacantes remotos leer archivos de su elección mediante una secuencia .. (punto punto) en el parámetro ad_direct."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netref:netref:4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FC4480-4073-4A74-968E-E7275BDB0801"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22610",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20789",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29889",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4248",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2006-10-31T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary files via a symlink attack on the start_thttpd temporary file."
      }, {
        "lang" : "es",
        "value" : "thttpd en Debian GNU/Linux, y posiblemente otras distribuciones, permite a usuarios locales crear o tocar ficheros de su elección mediante un ataque de enlaces simbólicos en el fichero temporal start_thttpd."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acme_labs:thttpd:2.25b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE72B09-4A62-4C57-9695-AB359F6C0A2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396277",
        "source" : "security@debian.org"
      }, {
        "url" : "http://secunia.com/advisories/22712",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1205",
        "source" : "security@debian.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20891",
        "source" : "security@debian.org"
      }, {
        "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in BytesFall Explorer (bfExplorer) 0.0.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the username ($User variable) to login/doLogin.php and other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en BytesFall Explorer (bfExplorer) 0.0.7.1 y anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección mediante un nombre de usuario (variable $User) a login/doLogin.php y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytesfall_explorer:bytesfall_explorer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.7.1",
            "matchCriteriaId" : "F57A95A9-0B8B-4248-B52B-DFAA71134ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=627671",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=458642&group_id=174110",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-007.php?lang=en",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450166/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4255",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=627671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=458642&group_id=174110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redteam-pentesting.de/advisories/rt-sa-2006-007.php?lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450166/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T19:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The seqfile handling (ip6fl_get_n function in ip6_flowlabel.c) in Linux kernel 2.6 up to 2.6.18-stable allows local users to cause a denial of service (hang or oops) via unspecified manipulations that trigger an infinite loop while searching for flowlabels."
      }, {
        "lang" : "es",
        "value" : "El manejo de (seqfile) ficheros secuenciales  (función ip6fl_get_n en ip6_flowlabel.c) en el núcleo de Linux 2.6 hasta 2.6.18-stable permite a usuarios locales provocar una denegación de servicio (cuelgue o \"oops\") mediante manipulaciones no especificadas que disparan un bucle infinito al buscar etiquetas de flujo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "81941077-0011-4272-A8C7-21D0AFE7DECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "02F89C7A-24F2-4518-A605-78A5B7056A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2C43BA02-0686-42F0-B901-4CB88459E2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "59393187-1D1E-45CD-BE0E-385F978E4834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CCDF6B-0365-4553-B161-3F6D68A58F72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B2BB71-0489-40F6-9CB6-A95B96E92106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "05F0391C-D4CC-4652-A24C-DC47F4C3DC91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "56340FF9-EE77-4EB3-9720-240FAAEF39F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "79EB0E94-6AE8-4703-96BD-B927E0F2893F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1F1242-0F07-4D81-9175-3BA5B2C7B564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF4EC75-06A2-4BD4-A39A-183F00C46E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A6501752-2595-4412-9140-C78EB9FD41CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D78F881-DB3A-423A-8DAD-314645B2B3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "70D1E088-5A9B-4CBF-A4FF-969201942CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455E647F-73DD-400A-AA19-3D93FE2E57AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC106BDA-2EA4-41A2-AA01-6352A5C255B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB515243-7519-4CA4-9267-D9A6798CBC49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "B672E1B6-E8E9-473F-853F-906EA56D712E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F727CD3-D3C2-4648-9EC5-092DF3F73B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D1765065-ABE5-478C-9ACC-EFFA8E4A7043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD4647-564E-4067-A945-F52232C0A33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81DE32C2-5B07-4812-9F88-000F5FB000C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7936B7EE-9CD1-4698-AD67-C619D0171A88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "31523E67-5E4F-43F7-9410-20CB3F287DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B627DE3-2702-4EB2-9733-253D315FB594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36F432D-FED1-4B8D-A458-BEDEEF306AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B76C21-70C8-4911-A24B-270F876EF7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E85846A-61BE-4896-B4A6-42A7E1DBA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E3B925-031D-4F6D-915A-A16F0FFA878C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A89DC9CD-C06F-4B9B-B376-900E65016296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "707ECC75-65B6-4B02-BE85-A4804549A2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE2F94D-E8E0-4BB7-A910-378012580025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F5AE3B-B701-4579-B44A-0F7A4267852E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48777A01-8F36-4752-8F7A-1D1686C69A33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42DA6A18-5AA1-4920-94C6-8D0BB73C5352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4E1245-C6BB-462C-9E27-C608595DAE3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795C3B17-687E-4F33-AA99-8FEC16F14693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD589CC-666B-4FAA-BCF0-91C484BDDB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD622EE-A840-42E1-B6BF-4AA27D039B12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900D6742-DE0F-45C5-A812-BF84088CB02A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225CA94C-8C84-4FA6-95D0-160A0016FBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D88ED3C4-64C5-44B2-9F23-E16087046C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4A781A-4A41-466F-8426-10B40CF8BA1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6316369-B54A-4E59-A022-E0610353B284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB33DEA-13C7-4B36-AB8A-ED680679A071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86DD0FCC-BB12-410D-8C82-AB99C7C5311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9F4CEC-7781-468B-B460-4F487B7C6601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C75A62-8807-4821-9362-1E0D63C0A1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894D4812-D62F-489E-8D0E-5E9468CE8EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F92E01-4F08-4364-9E87-FFBC095E32E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9960640-F02D-4E81-A34B-1893D8FD7F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D00DAD-4F2D-45C7-B87C-85118D9DD855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C398D26-7132-4A6E-9003-77246644451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF425F00-41BA-4F59-A0DE-6362A1E9A142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33577E79-1B6E-406D-A49B-2CEF1754F5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B21D90E-5172-485E-87AC-F1681604AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "641EECFD-A985-4026-A53A-10FBE47EAD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47595F81-2083-4236-A0B0-E2B98DD78402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5FC758-5A5D-466A-8386-5FC469F79F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCA5C83-5293-4107-8E6A-85F82ECF2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D0AADC-BC34-40FB-BD69-37981DC8E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12547B6B-78F1-4426-81CE-5F208794658C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38429E64-276B-46D4-AACD-05349D6F6615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89640F8-313B-4A36-A591-36645D1EF838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0271F0-41F2-4096-8C91-DAD1A81AF855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40DCBB-B41B-468E-A918-6EA3F9A125E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B6A54-85E3-4867-8EDF-93EB86BAFBD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B004CF1-0ACC-441C-9F61-9B20504F4ECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B42F06-AC6D-40F3-BC03-5126BED48F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8002C7-19E2-4F20-890E-4BA2029174D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DA9C54-742C-4057-8BAB-18755B4A42D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53037B40-D534-41D1-9895-8EDB0D884C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5549096F-C640-463E-AD07-FD8D254CC098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DCAF19-879C-42BB-B56A-84504E79758A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "980A6C7D-6175-4A44-8377-74AA7A9FD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C226902-04D9-4F32-866C-20225841ECF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "655DB612-AF49-4C17-AFB9-2E33EE8E0572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F65DF2-2794-47B7-9676-CCF150683CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6555D45B-D3B3-4455-AB1E-E513F9FB6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56C6C01B-4CED-4F37-A415-0603496C27DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF39E62B-EAB4-44B0-A421-2A71B7DD8341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1817C772-D367-4ABE-B835-466D31A6DC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C667B8E4-64EB-4A05-84FF-B2243DEF757D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9484B41A-DFB6-4481-80D8-440C711CEA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "53D373AF-DE6B-428E-9F0F-F1D220900A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F2975DF7-F916-456C-BF7C-2694559E5282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "784EB96E-2FD3-4F77-8DB6-4D6C7A928946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lkml.org/lkml/2006/11/5/46",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22665",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22754",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23593",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bcd620757d3a4ae78ef0ca41adb5d9e400ed92b6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451097/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4297",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29970",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-760",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lkml.org/lkml/2006/11/5/46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bcd620757d3a4ae78ef0ca41adb5d9e400ed92b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451097/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us.debian.org/security/2006/dsa-1233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.rpath.com/browse/RPL-760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and are tracking it via bug 213214 for Red Hat Enterprise Linux 4:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213214\n\nThis issue does not affect Red Hat Enterprise Linux 2.1 or 3",
        "lastModified" : "2006-11-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3) and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[page_dir] parameter, a different vector than CVE-2006-4489."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en include/menu_builder.php de MiniBILL 2006-10-10 (1.2.3) y anteriores, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro config[page_dir], un vector diferente que CVE-2006-4489."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minibill:minibill:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842D1D50-D46D-43BE-A17D-5BF874E4A896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minibill:minibill:1.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325AAD03-2ED6-43D2-8A0D-E1E208BF7D9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22632",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1803",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449890/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20766",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ultrize.com/minibill/index.php?page=changelog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4249",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29834",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2656",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449890/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ultrize.com/minibill/index.php?page=changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en end.php de ask_rave 0.9 PR, y otras versiones anteriores a 0.9b, permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en parámetro footfile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ask_rave:ask_rave:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9_pr",
            "matchCriteriaId" : "DB0B18D3-FC28-4349-AE50-F8C56B05F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20758",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4211",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29825",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2654",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nask_rave, ask_rave, 0.9b",
      "vendorComments" : [ {
        "organization" : "Rave",
        "comment" : "Ask_rave 0.9b has been released for immediate download and versions 0.9PR and below have been rendered obsolete. All users using versions 0.9PR and prior are recommended to upgrade their versions immediately. Users can use the following URI to download this new version: http://rave.jk-digital.com/site/scripts/ask.php",
        "lastModified" : "2006-12-12T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en picmgr.php en Coppermine Photo Gallery 1.4.9 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro aid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A89B92-8323-4240-80CE-102070202A09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=37895.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22625",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20774",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2660",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://coppermine-gallery.net/forum/index.php?topic=37895.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nCoppermine, Photo Gallery, 1.4.10"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool (EE Tool) 0.4-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cgipath parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en ip.inc.php de Electronic Engineering Tool (EE Tool) 0.4-1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cgipath."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ee_tool:ee_tool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4_1",
            "matchCriteriaId" : "AB7930B8-3293-44DF-A53D-1EB554A56375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4231",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29884",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System (MPCS) 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) include.php or (2) functions.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Multi-Page Comment System (MPCS) 1.0.0 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro path a (1) include.php o (2) functions.php. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpcs:mpcs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "C45167D5-A7CD-4423-AE4C-7456E634D915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mpcs:mpcs:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D23807-187C-4521-8531-C508174739E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22578",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tpvgames.co.uk/web/mpcs/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20751",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4212",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://tpvgames.co.uk/web/mpcs/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nMPCS, MPCS, 1.1.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the c[path] parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en wwwdev/nxheader.inc.php de N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro c[path]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nx:n_x_wcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "901DB508-D8F9-4DD2-9E05-3CE94D7104DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nx:n_x_wcms:2002_prerelease1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFE55F3-E6D0-48AD-8F7E-A35748CD4DA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22627",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20773",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4227",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2659",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (CMS) before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probably via arbitrary parameters in the query string, as demonstrated with a vigilon parameter.  NOTE: earlier downloads of 1.3.36 have the vulnerability; the software was updated without changing the version number."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en cms_images/js/htmlarea/htmlarea.php en phpFaber Content Management System (CMS) anterior a 1.3.36 del 26/10/2006 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección, probablemente a través de parámetros de su elección, como ha sido demostrado mediante el parámetro vigilon. NOTA: descargas anteriores a la 1.3.36 tienen la vulnerabilidad; el software fue actualizado sin cambiar el número de versión."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpfaber:phpfaber_content_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.36",
            "matchCriteriaId" : "40FAA445-CCBB-4461-BD10-583D95766BAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22629",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449894/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vigilon.com/advisories/vg-phpfaber-24-10-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vigilon.com/resources/102506c.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4260",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449894/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vigilon.com/advisories/vg-phpfaber-24-10-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vigilon.com/resources/102506c.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nphpFaber, phpFaber Content Management System, 1.3.36 20061026"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to (1) headerscripts.php, (2) footerhome.php, and (3) footermain.php in admin/include/; (4) photogallery/headerscripts.php; and (5) footerhome.php, (6) footermain.php, (7) headermain.php, (8) sitemapfooter.php, and (9) sitemapheader.php in templates/."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en QnECMS 2.5.6 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro adminfolderpath a (1) headerscripts.php, (2) footerhome.php y (3) footermain.php en admin/include/; (4) photogallery/headerscripts.php; y (5) footerhome.php, (6) footermain.php, (7) headermain.php, (8) sitemapfooter.php, y (9) sitemapheader.php en templates/."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnecms:qnecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.6",
            "matchCriteriaId" : "4B43FE3F-902B-468F-AC34-66F05634656C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://advisories.echo.or.id/adv/adv53-K-159-2006.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22623",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30117",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30118",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30119",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30120",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30121",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30122",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30123",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30124",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30125",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450056/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452356/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4258",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29871",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2681",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://advisories.echo.or.id/adv/adv53-K-159-2006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450056/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452356/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5628",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass fields."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en login.asp en UNISOR Content Management System (CMS) permite a atacantes remotos ejecutar comandos SQL de su elección mediante los campos (1) user o (2) pass."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisor_cms:unisor_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F7A44-F035-4634-922F-4206D12113AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1800",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449905/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20770",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449905/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp.  NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier."
      }, {
        "lang" : "es",
        "value" : "Multiples vulnerabilidades de inyección de SQL en el Hosting Controller 6.1 anterior al Hotfix 3.3 permite a atacantes remotos la ejecución de comandos SQL a través del parámetro ForumID en  el (1) DisableForum.asp y (2) enableForum.asp. NOTE: se reportó posteriormente que la vulnerabilidad está presente en el Hotfix 6.1  3.3 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1_hotfix_3.2",
            "matchCriteriaId" : "FD0B34AC-0C2D-4E17-AC72-4BDF1769F54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94170D21-1196-4BA2-AEB9-C28A4F08B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3364FE23-345B-428B-BF18-A0AE4D23B03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDE2038-F5C8-49A9-86D6-E94DA2A93016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9E17B-92A3-434F-B238-8B403BE4F539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1220294A-27FC-4D1C-BFA8-2B7189E04469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD6BB80-8513-4294-8A81-FE8B11FA8BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDFC8A-C341-4137-AF44-F93E814E218B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDE7F42-4372-440E-9E8A-D4B123EB9045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E517F5-FA8C-4099-9D2C-6818A3082881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC9B48D-8D14-40D1-A444-2EC2661E40A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52010E43-81DA-4E60-8CE9-7E60DC017DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBFE7C3-7F21-4F63-9EB1-42C33E93B702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAEE0D-CDCE-46F2-8FCD-E9C9CD7BB159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E051F8D0-46E1-4609-9C39-BE2BBD291DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2F192C-B59F-4EA7-9399-D1AF7F233058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F80268-2491-4900-ABEB-9DDBC9E54DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:2002_rc_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BABF84D-F609-429E-9C77-7C251F23AB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22607",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28973",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-442.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485028/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20661",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/26862",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4296",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39036",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4730",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/28973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/485028/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/26862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/4730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nHosting Controller, Hosting Controller, 6.1 Hotfix 3.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and (2) create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum action in EnableForum.asp."
      }, {
        "lang" : "es",
        "value" : "Hosting Controller 6.1 versiones anteriores a Hotfix 3.3 permite a atacantes remotos (1) borrar el directorio virtual de un sitio de su elección mediante el párametro modificado ForumID en una acción \"deshabilita foro\" en DisableForum.asp y (2) crear un directorio virtual de foro de su elección mediante un paráemtro vacío ForumID en una acción \"habilita foro\" en EnableForum.asp"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1_hotfix_3.2",
            "matchCriteriaId" : "FD0B34AC-0C2D-4E17-AC72-4BDF1769F54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94170D21-1196-4BA2-AEB9-C28A4F08B05D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3364FE23-345B-428B-BF18-A0AE4D23B03B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDE2038-F5C8-49A9-86D6-E94DA2A93016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9E17B-92A3-434F-B238-8B403BE4F539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1220294A-27FC-4D1C-BFA8-2B7189E04469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD6BB80-8513-4294-8A81-FE8B11FA8BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDFC8A-C341-4137-AF44-F93E814E218B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDE7F42-4372-440E-9E8A-D4B123EB9045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E517F5-FA8C-4099-9D2C-6818A3082881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC9B48D-8D14-40D1-A444-2EC2661E40A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52010E43-81DA-4E60-8CE9-7E60DC017DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DBFE7C3-7F21-4F63-9EB1-42C33E93B702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAAEE0D-CDCE-46F2-8FCD-E9C9CD7BB159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E051F8D0-46E1-4609-9C39-BE2BBD291DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2F192C-B59F-4EA7-9399-D1AF7F233058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F80268-2491-4900-ABEB-9DDBC9E54DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hosting_controller:hosting_controller:2002_rc_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BABF84D-F609-429E-9C77-7C251F23AB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22607",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1804",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-442.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449937/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4296",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.kapda.ir/advisory-442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449937/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nHosting Controller, Hosting Controller, 6.1 Hotfix 3.3"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5631",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not \"1\", as demonstrated using script in the action parameter, a different vulnerability than CVE-2006-5632."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en change_pass.php de iG Shop 1.4 permite a atacantes remotos inyectar scripts WEB o HTML de su elección mediante cadenas de consulta de su elección cuando el parámetro action no es \"1\", como se demuestra usando un script en el parámetro action, vulnerabilidad distinta a CVE-2006-5632."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ig_shop:ig_shop:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F1A830-E6F0-4B9A-B01C-8E235E093B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017130",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001099.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29890",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5632",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en change_pass.php de iG Shop 1.4 permite a atacantes remotos inyectar scripts WEB o HTML de su elección mediante el parámetro id, vulnerabilidad distinta a CVE-2006-5631.\r\nNOTA: El origen de esta información es desconocido; los detalles se han obtenido a partir de información de  terceros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ig_shop:ig_shop:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F1A830-E6F0-4B9A-B01C-8E235E093B5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22701",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017130",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001099.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20768",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001099.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5633",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-10-31T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service (crash) by creating a range object using createRange, calling selectNode on a DocType node (DOCUMENT_TYPE_NODE), then calling createContextualFragment on the range, which triggers a null dereference.  NOTE: the original Bugtraq post mentioned that code execution was possible, but followup analysis has shown that it is only a null dereference."
      }, {
        "lang" : "es",
        "value" : "Firefox 1.5.0.7 y 2.0, y Seamonkey 1.1b, permite a atacantes remotos provocar una denegación de servicio (caída) creando un objeto rango usando createRange, llamando a selectNode en un nodo DocType (DOCUMENT_TYPE_NODE), y después llamando a createContextualFragment en el rango, lo cual dispara una referencia nula. NOTA: el post original en Bugtraq mencionaba que la ejecución de código era posible, pero análisis posteriores han mostrado que es sólo una referencia nula."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3487FA64-BE04-42CA-861E-3DAC097D7D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D58B704B-F06E-44C1-BBD1-A090D1E6583A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050416.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gotfault.net/research/advisory/gadv-firefox.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450155/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450167/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450168/100/0/threaded",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450682/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452803/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=358797",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213237",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050416.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.gotfault.net/research/advisory/gadv-firefox.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450155/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450167/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450168/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450682/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/452803/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=358797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat does not consider a user-assisted crash of a client application such as Firefox to be a security issue.",
        "lastModified" : "2006-11-07T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5634",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the (1) reqpath parameter to (a) body.inc.php and (b) body_blog.inc.php in users/include/; or the (2) usrinc parameter in users/include/upload_ht.inc.php."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en phpProfiles 2.1 Beta permite a atacantes remotos la ejecución de código PHP de su elección mediante un URL en el parámetro (1) reqpath para (a) body.inc.php y (b) body_blog.inc.php en users/include/; o en el parámetro (2) usrinc en users/include/upload_ht.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpprofiles:phpprofiles:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1_beta",
            "matchCriteriaId" : "F3595547-6F52-45A6-BB66-2C1DBE8CC6B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22644",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30138",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=30136",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20819",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4274",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29900",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2688",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/displayvuln.php?osvdb_id=30136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en forum/search.asp de Web Wiz Forums permite a atacantes remotos ejecutar sentencias SQL de su elección mediante el parámetro KW."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:6.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB43961E-E9FE-41AB-8926-C07AE930A7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53243560-4A49-45A8-A62B-EC2E4930D71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3238BA2-3974-4B38-BC6F-B031A78E18FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA9FDA1-62AC-47D0-8230-CA13E54CB963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3FBB7A-F0E6-4C45-97F2-9132A871C19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1627EA6D-D8B8-4069-AE66-0817B37932C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0CBADA-DA7F-4D82-9084-C10AA7DF1A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E07521B-D01B-4547-BB28-5457075AB730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AEF8E0E-97DD-4F15-9036-3FC9315A8D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902C1448-CC96-4816-9A66-49BE88EFAB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD356DD-896C-49C8-8F33-C45D786A7D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:8.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCF2471-8D67-43B0-A7BA-464822984C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_wiz_forums:web_wiz_forums:8.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6464AA80-132A-4123-9342-833EE87D66E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1801",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450034/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20778",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29898",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450034/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en common.php de Simple Website Software (SWS) 0.99 y anteriores permite a atacantes remotos ejecutar código de su elección mediante una URL en el parámetro SWSDIR."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sws:simple_website_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.99",
            "matchCriteriaId" : "0DF9442F-722C-437F-95B7-57C73D9E51AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22618",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1799",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450050/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20787",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4262",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29861",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2673",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450050/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in faq_reply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code via a URL in the email parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP faq_reply.php en el Faq Administrator 2.1b permite a atacantes remotos la ejecución de código PHP de su elección mediante una URL en el parámetro email."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faq_administrator:faq_administrator:2.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3309A5CD-A499-4C1D-A26A-90C1D2784FCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22621",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001100.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/30115",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20796",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4254",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29868",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2678",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-October/001100.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/30115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nFAQ Administrator, FAQ Administrator, 3.0"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) limite and (2) mots parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en cherche.php de PHPMyRing 4.2.1 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) limite y (2) mots."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyring:phpmyring:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.1",
            "matchCriteriaId" : "E7101B3E-E20B-40DB-9C95-29A08540D4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyring:phpmyring:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6BB4AD-8E88-4F17-8A59-CEB00ECEF654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22620",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20792",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4261",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29887",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2679",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the random number generator in OpenWBEM (Web Based Enterprise Management) 3.2.0 allows attackers to gain privileges via vectors related to \"local or HTTP Digest authentication.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el generador de números aleatorios en OpenWBEM (Web Based Enterprise Management) 3.2.0 permite a atacantes remotos obtener privilegios mediante vectores relacionados con \"autenticación local o HTTP Digest\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwbem:openwbem:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "25D21CD7-D5E7-471D-9F44-E7940594C3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwbem:openwbem:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D63576-E1F5-4A14-8583-22B9822744CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22709",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=625294",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20807",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=625294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nOpenWBEM, OpenWBEM, 3.2.2"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5640",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to execute arbitrary SQL commands via the key parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en guestbookview.asp de Techno Dreams Guest Book 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_dreams:techno_dreams_guest_book:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "40884124-E24D-4680-9656-0EE735CCAA62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22600",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20802",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4277",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29869",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitrary SQL commands via the key parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en MainAnnounce2.asp de Techno Dreams Announcement permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro key."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techno_dreams:announcement_script:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1D10F1-DC88-4B51-AC12-F7E4EB867E01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22598",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20794",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4276",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29870",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2683",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in NmnLogger 1.0.0 and earlier has unknown impact and attack vectors related to configuration of mesasge drivers."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en NmnLogger 1.0.0 y anteriores tiene impacto y vectores de ataque desconocidos relacionados con la configuración de los controladores de mensaje."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nmnlogger:nmnlogger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "32F14D8C-5C77-4AEF-8006-341883B2EAC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=456767&group_id=168715",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20820",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4237",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=456767&group_id=168715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nNmnLogger, NmnLogger, 1.1"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in search_de.html in foresite CMS allows remote attackers to inject arbitrary web script or HTML via the query parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en search_de.html en el CMS del sitio permite a atacantes remotos inyectar scripts WEB o HTML de su elección mediante el parámetro query."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foresite_cms:foresite_cms:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEC684E-B912-4721-8829-3CD13B8720AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22648",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017134",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.majorsecurity.de/index_2.php?major_rls=major_rls29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450046/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20818",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4278",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29906",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.majorsecurity.de/index_2.php?major_rls=major_rls29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450046/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4517",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Novell iManager 2.5 y 2.0.2 permite a atacantes remotos causar la denegación de servicio (caída) en el servidor Tomcat mediante el parámetro TREE largo en una HTTP POST, que dispara una referencia a NULL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        }, {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "1B7A3F9F-2453-412C-B24D-03DB79ED8AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA6420B-9F6A-48F4-A445-12B60A320347"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:imanager:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83287853-0215-4B83-BF57-D1AEB247FB38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=436",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22657",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017139",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3885713&sliceId=SAL_Public&dialogID=17090866&stateId=0%200%2017098735",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20841",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4292",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29961",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://secunia.com/advisories/22657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3885713&sliceId=SAL_Public&dialogID=17090866&stateId=0%200%2017098735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nNovell, iManager, 2.6"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4704",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2006-11-01T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en zonas cruzadas  en el Control ActiveX (WmiScriptUtils.dll) del  WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) en el Microsoft Visual Studio 2005 permite atacantes remotos evitar las restricciones de la zona de Internet y ejecutar código de su elección instanciando objetos peligrosos, también conocido como  \"Vulnerabilidad WMI Object Broker\"."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBED7535-0091-4B27-B261-384CEADFE362"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20061031.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://secunia.com/advisories/22603",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017142",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/854856",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/927709.mspx",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/454201/100/0/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/454969/100/200/threaded",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20797",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20843",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-346A.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4282",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-047.html",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29915",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://research.eeye.com/html/alerts/zeroday/20061031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/854856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/927709.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/454201/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/454969/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-346A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.zerodayinitiative.com/advisories/ZDI-06-047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service (memory consumption) via a file that is compressed with Petite and contains a large number of sections."
      }, {
        "lang" : "es",
        "value" : "Sophos Anti-Virus 5.1 permite a atacantes remotos provocar una denegación de servicio (agotamiento de memoria) mediante un fichero comprimido con Petite que contiene un gran número de secciones."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:sophos_anti-virus:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9096CCF-D46E-48AE-8357-5F06868A3935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=438",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22635",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/7609.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/7609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when \"Enabled scanning of archives\" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero."
      }, {
        "lang" : "es",
        "value" : "Sophos Anti-Virus y Endpoint Security anteriores a 6.0.5, Anti-virus para Linux 5.0.10, y otras plataformas en versiones anteriores a la 4.11, permite a atacantes remotos causar denegación de servicio (bucle infinito) mediante un fichero RAR mal formado con una sección de Cabecera de Archivo con los campos head_size y pack_size puestos a cero."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D9D6E1E-9FA4-4BA1-8648-2E1A6A8FC4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799249AD-3E8A-4584-A680-A3E618B5372D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587205B1-322E-478D-9B46-8F20F371C87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B6B5D4-E335-4377-8D98-87656522D056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED1228F-0733-42D9-853A-B1EB4EB20A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136B6228-D71B-4985-B555-5ABC38EF2B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4518D58D-BD49-4E02-AB93-B1B45B774F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A398BC60-0F67-4A32-A6CD-F3410D81834F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D2CFB6-F135-40B5-ACF8-D6513C0AB682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B781BEA-E3D6-4260-913F-99D46DCC97D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D7952D2-2FE4-44E3-B964-976964CFFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AF1DE9-A0A1-4193-9AD9-56BF39F3557A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7CC4E8-C039-4895-A3EF-BF1927266744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E8DF83-4F1B-4E4C-A613-EF0C4502FA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08FACDD3-92A8-4325-AD0D-81100BA81F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:endpoint_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.04",
            "matchCriteriaId" : "39B0A565-0E33-419F-B209-7F87CB7AC702"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22591",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/474683/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1018450",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/7609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4239",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/474683/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1018450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/7609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en Sophos Anti-Virus y Endpoint Security versiones anteriores a 6.0.5, Anti-Virus para Linux anteriores a 5.0.10, y otras plataformas anteriores a 4.11, cuando el escaneo de archivos está habilitado, permite a atacantes remotos disparar una denegación de servicio (corrupción de memoria) a través de un archivo CHM con una cabecera de descompresión LZX que especifica un tamaño de ventana 0."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D9D6E1E-9FA4-4BA1-8648-2E1A6A8FC4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799249AD-3E8A-4584-A680-A3E618B5372D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587205B1-322E-478D-9B46-8F20F371C87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B6B5D4-E335-4377-8D98-87656522D056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED1228F-0733-42D9-853A-B1EB4EB20A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136B6228-D71B-4985-B555-5ABC38EF2B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4518D58D-BD49-4E02-AB93-B1B45B774F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A398BC60-0F67-4A32-A6CD-F3410D81834F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D2CFB6-F135-40B5-ACF8-D6513C0AB682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B781BEA-E3D6-4260-913F-99D46DCC97D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D7952D2-2FE4-44E3-B964-976964CFFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AF1DE9-A0A1-4193-9AD9-56BF39F3557A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7CC4E8-C039-4895-A3EF-BF1927266744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E8DF83-4F1B-4E4C-A613-EF0C4502FA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08FACDD3-92A8-4325-AD0D-81100BA81F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:endpoint_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.04",
            "matchCriteriaId" : "39B0A565-0E33-419F-B209-7F87CB7AC702"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=452",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22591",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/7609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4239",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/7609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-01T15:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk header, aka \"CHM name length memory consumption vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "Sophos Anti-Virus y Endpoint Security versiones anteriores a 6.0.5, Anti-Virus para Linux anteriores a 5.0.10, y otras plataformas anteriores a 4.11 permite a atacantes remotos provocar una denegación de servicio (corrupción o agotamiento de memoria) y posiblemente ejecutar código de su elección mediante un fichero CHM mal formado con manipulaciones concretas del segmento de cabecera CHM, también conocido como \"vulnerabilidad de agotamiento de memoria en longitud de nombre CHM\".\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D9D6E1E-9FA4-4BA1-8648-2E1A6A8FC4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799249AD-3E8A-4584-A680-A3E618B5372D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587205B1-322E-478D-9B46-8F20F371C87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B6B5D4-E335-4377-8D98-87656522D056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED1228F-0733-42D9-853A-B1EB4EB20A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "136B6228-D71B-4985-B555-5ABC38EF2B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4518D58D-BD49-4E02-AB93-B1B45B774F2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A398BC60-0F67-4A32-A6CD-F3410D81834F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D2CFB6-F135-40B5-ACF8-D6513C0AB682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B781BEA-E3D6-4260-913F-99D46DCC97D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D7952D2-2FE4-44E3-B964-976964CFFB3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0AF1DE9-A0A1-4193-9AD9-56BF39F3557A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7CC4E8-C039-4895-A3EF-BF1927266744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E8DF83-4F1B-4E4C-A613-EF0C4502FA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:anti-virus:6.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08FACDD3-92A8-4325-AD0D-81100BA81F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:endpoint_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.04",
            "matchCriteriaId" : "39B0A565-0E33-419F-B209-7F87CB7AC702"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=451",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22591",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/7609.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4239",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.sophos.com/support/knowledgebase/article/7609.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5397",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor."
      }, {
        "lang" : "es",
        "value" : "El módulo Xinput (modules/im/ximcp/imLcIm.c) en X.Org libX11 1.0.2 y 1.0.3 abre un fichero para lectura dos veces utilizando el mismo descriptor de fichero, que provoca un agujero en los descriptores de fichero permitiendo a los usuarios locales, leer ficheros concretos con la variable de entorno XCOMPOSEFILE mediante un descriptor de fichero duplicado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libx11:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4289D5DB-1E90-4B70-9F95-D201F1A77642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:libx11:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E911824-A0DC-45DD-A0A3-BE38CD611F0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://gitweb.freedesktop.org/?p=xorg/lib/libX11.git%3Ba=commit%3Bh=686bb8b35acf6cecae80fe89b2b5853f5816ce19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22642",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22749",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:199",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4289",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=8699",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29956",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://gitweb.freedesktop.org/?p=xorg/lib/libX11.git%3Ba=commit%3Bh=686bb8b35acf6cecae80fe89b2b5853f5816ce19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=8699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not vulnerable. These issues did not affect the versions of libX11 as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element.  NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en Sun iPlanet Messaging Server Messenger Express permite a atacantes remotos inyectar scripts WEB de su elección mediante el la expresión de la función CSS (Cascading Style Sheets), como se demuestra fijando el estilo anchura (width) para un elemento IMG.\r\nNOTA: Esta vulnerabilidad podría estar en relación con CVE-2006-5486, sin embargo debido a la ligereza de las notificaciones iniciales, y a diferentes investigadores, se le ha asignado un nuevo CVE.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:iplanet_messaging_server_messenger_express:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C0621B-826C-40C1-AB7F-72F7F9117090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050460.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1806",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450184/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20838",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29929",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050460.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450184/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter.  NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers a new CVE was assigned."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en la función errorHTML en el script índice en Sun Java System Messenger Express 6 \r\npermite a atacantes remotos inyectar scripts WEB o HTML de su elección mediante el parámetro\r\nerror. \r\nNOTA: Esta vulnerabilidad podría estar en relación con CVE-2006-5486, sin embargo debido a la ligereza de la notificación inicial y a diferentes investigadores, se le ha asignado un nuevo CVE."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_messenger_express:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD43D7B0-D18E-4A8A-B389-B65F1CFC589E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22663",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1805",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450153/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456273/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018106",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4281",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29939",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450153/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456273/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securitytracker.com/id?1018106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service (application crash) via unspecified vectors.  NOTE: due to lack of details from the vendor, it is unclear whether this is related to vector 1 in CVE-2006-5201 or CVE-2006-3127."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Network Security Services (NSS) de Sun Java System Web Server 6.0 versiones anteriores a SP 10 y ONE Application Server 7 anteriores a Update 3, cuando SSLv2 está habilitado, permite a usuarios remotos autenticados provocar una denegación de servicio (fallo de aplicación) mediante vectores no especificados. NOTA: debido a la falta de detalles por parte del fabricanet, no está claro si esto está relacionado con el vector 1 en CVE-2006-5201."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:java_system_web_server:6.0:sp9:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD38B0A-EB9B-4556-B6DE-A7598ACC04AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun:one_application_server:*:update_2:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "7D7E85C7-BA03-4107-9EF4-13BC2C6472DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22646",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017143",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102670-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4299",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102670-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en index.php de OpenDocMan 1.2p3 permite a atacantes remotos ejecutar sentencias SQL de su elección mediante el parámetro username.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendocman:opendocman:1.2p3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C16084E-6C8D-4027-8F68-C101B93758F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450058/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20809",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29909",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450058/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the tmp_align variable.  NOTE: it is not clear whether this is a vulnerability, due to the functionality of the product."
      }, {
        "lang" : "es",
        "value" : "Agujero de memoria en la función push_align en src/util.c de Vilistextum versiones anteriores a 2.6.9 permite a atacantes remotos provocar una denegación de servicio (agotamiento de memoria) mediante vectores sin especificar referidos a la variable tmp_align. NOTA: \r\nno está claro si esto es una vulnerabilidad, debido a la funcionalidad del producto."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vilistextum:vilistextum:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1213B31-8361-48A9-8B14-88AB90789AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vilistextum:vilistextum:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2CAFCF-17EF-409D-B8E5-8F82FE5CEECC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=626024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4253",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=626024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples errores de superación de límite (off-by-one) en src/text.c de Vilistextum versiones anteriores a 2.6.9 tienen impacto desconocido y vectores de ataque.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vilistextum:vilistextum:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.8",
            "matchCriteriaId" : "E667DF86-99B7-4B53-8ADE-B15E81B53A01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=626024",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20813",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4253",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/forum/forum.php?forum_id=626024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlooMooWeb ActiveX control (AidemATL.dll) allows remote attackers to (1) download arbitrary files via a URL in the bstrUrl parameter to the BW_DownloadFile method, (2) execute arbitrary local files via a file path in the bstrParams parameter to the BW_LaunchGame method, and (3) delete arbitrary files via a file path in the filePath parameter to the BW_DeleteTempFile method."
      }, {
        "lang" : "es",
        "value" : "El control ActiveX BlooMooWeb (AidemATL.dll) permite a atacantes remotos (1) descargar ficheros de su elección mediante una URL en el parámetro bstrUrl en la función BW_DownloadFile, (2) ejecutar ficheros locales de su elección mediante una ruta de fichero en el parámetro bstrParams en el método BW_LaunchGame, y (3) borrar ficheros de su elección mediante una ruta  de fichero en el parámetro filePath en el método BW_DeleteTempFile."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:studio_achtundachtzig:bloomooweb_activex_control:1.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722582E4-3C78-4112-8E02-37BF2050EF31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22666",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1808",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450144/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20827",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4294",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29968",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450144/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5659",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PAM_extern before 0.2 sends a password as a command line argument, which allows local users to obtain the password by listing the command line arguments, such as ps.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "PAM_extern versiones anteriores a 0.2 envía una clave como un argumento en línea de comandos, que permite a usuarios locales obtener la clave listando los argumentos en línea de comandos, por ejemplo con ps.\r\nNOTA: El origen de esta información es desconocido; los detalles se han obtenido a partir de información de  terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pam_extern:pam_extern:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "B556243F-D772-4624-B52A-F44B698E346B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/4235",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29912",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server."
      }, {
        "lang" : "es",
        "value" : "Cisco Security Agent Management Center (CSAMC) 5.1 versiones anteriores a 5.1.0.79 no gestiona apropiadamente errores concretos LDAP, que permite a atacantes remotos evitar requerimientos de autenticación mediante una clave vacía al utilizar un servidor LDAP externo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:security_agent_management_center:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916862A1-0475-4684-9C1D-DA62F6F44B2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22684",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017148",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/778648",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/30169",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20852",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4308",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/778648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/30169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product update:\r\nCisco, Security Agent Management Center, 5.1.0.79"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cruce de sitios en scripts (XSS) en nquser.php de VIRtech Netquery permite a atacantes remotos inyectar scripts WEB o HTML de su elección mediante la cabecera HHTP User-Agent.\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtech:netquery:e107_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C126F45F-DB46-4A13-A98A-BDD3EC20D50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtech:netquery:postnuke_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C65380-61A9-4CFB-A76A-635A55289768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtech:netquery:xaraya_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2B1D7D-30BA-4B76-986C-88552B577A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtech:netquery:xoops_edition:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE54D06-3AD6-4F79-90B1-77104DF764AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050462.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22864",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1807",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017147",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://virtech.org/tools/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450270/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451350/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20837",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4512",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.zion-security.com/text/XSS_Vulnerability_VIRtechs_Netquery.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29927",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050462.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://virtech.org/tools/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450270/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451350/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.zion-security.com/text/XSS_Vulnerability_VIRtechs_Netquery.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in easy notesManager (eNM) 0.0.1 allows remote attackers to execute arbitrary SQL commands via (1) the username parameter in login.php and (2) a search on the \"search page.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en easy notesManager (eNM) 0.0.1 permite a atacantes remotos ejecutar sentencias SQL de su elección mediante (1) el parámetro username en login.php y (2) una búsqueda en la \"página de búsqueda\".\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evandor:easy_notesmanager:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F14C8F-DF26-40B9-A4CA-22E2EDAD444B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1819",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450045/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20803",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29908",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29913",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450045/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, y Informix I-Connect 2.90 utilizan permisos no seguros para los scripts de instalación, que permite a los usuarios locales obtener privilegios modificando estos scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_client_sdk:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF7C636-610B-4B06-A95A-D8C0759F83CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67D2B80-49E9-4DDA-87A3-D145B9F49D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_i-connect:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8A3B85-A61C-4734-8DA0-F5E8AD64B592"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22609",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21247438",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21247438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5664",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to \"compromise security\" via a symlink attack on temporary files."
      }, {
        "lang" : "es",
        "value" : "El script de instalación en IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, y Informix I-Connect 2.90 permite a los usuarios locales \"comprometer la seguridad\" mediante un ataque de enlaces simbólicos sobre ficheros temporales."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_client_sdk:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF7C636-610B-4B06-A95A-D8C0759F83CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:10.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67D2B80-49E9-4DDA-87A3-D145B9F49D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_i-connect:2.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8A3B85-A61C-4734-8DA0-F5E8AD64B592"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22609",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017156",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21247438",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4280",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www-1.ibm.com/support/docview.wss?uid=swg21247438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/modules_data.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin/modules_data.php en el módulo phpBB de Spider Friendly 1.3.10 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro phpbb_root_path.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spider_friendly:spider_friendly:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.10",
            "matchCriteriaId" : "BD7DDD2F-1764-45F2-AFAA-81B361ADC3E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22630",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30160",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4290",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2686",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote attackers to execute arbitrary SQL commands via the login parameter.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en includes/menu.inc.php de E-Annu 1.0 permite a atacantes remotos ejecutar sentencias SQL de su elección mediante el parámetro login.\r\nNOTA: Algunos de estos detalles se han obtenido a partir de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asmir_alic:e_annu:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F8BDB8-8104-49C3-844F-B62C951A2560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22631",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20815",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29901",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2687",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pb_lang parameter to (1) admin.php and (2) pbook.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples de inclusión remota de archivo en PHP en P-Book 1.17 y versiones anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pb_lang en (1) admin.php y (2) pbook.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:p-book:p-book:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17",
            "matchCriteriaId" : "1F4D8707-4720-4C78-9354-E5DA576A0911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22608",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1811",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449106/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4291",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449106/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in Ampache 3.3.2 and earlier, when register_globals is enabled, allows remote attackers to bypass security restrictions and gain guest access."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en Ampache 3.3.2 y versiones anteriores, cuando register_globals está habilitado, permite a atacantes remotos violar restricciones de seguridad y obtener acceso de invitado."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E82750-606F-451B-AD64-C9FB59A041C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33900B23-7418-40A0-8D2A-27DA787FE5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BD76A1-18B8-4CA5-A5B9-6FEFA1B35475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD247951-AC79-422C-BC2B-AB7FBCC3743D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298A2426-A205-482A-9C64-317D2ADA475C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FA99FF-D4CB-4BB9-AAF6-A3E672FFD784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868FBB45-E2B5-482D-97D0-E121F81A06AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8B2E24-60E0-4B9E-8D04-F9FB01C80749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24599CC-7810-49B5-B750-AF189F489333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20798",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4236",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29892",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://svn.ampache.org/branches/3.3.2/docs/CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://svn.ampache.org/branches/3.3.2/docs/CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in gestion/savebackup.php in Gepi 1.4.0 and earlier, and possibly other versions before 1.4.4, allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en gestion/savebackup.php de Gepi 1.4.0 y versiones anteriores, y posiblemente otras versiones anteriores a 1.4.4, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro filename."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gepi:gepi:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18F3454A-9DC4-4D28-8CCF-40B6AFF2DCB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001104.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2692",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001104.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en forgot_pass.php de Free Image Hosting 1.0 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro AD_BODY_TEMP."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_php_scripts:free_image_hosting:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "1104AD7D-C417-42C1-ACC1-BC3A44E75F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22597",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30127",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29873",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2669",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.osvdb.org/30127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en contact.php de Free Image Hosting 1.0 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro AD_BODY_TEMP.\r\nNOTA: El origen de esta información es desconocido; los detalles se han obtenido a partir de información de  terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free_php_scripts:free_image_hosting:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "1104AD7D-C417-42C1-ACC1-BC3A44E75F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vupen.com/english/advisories/2006/4229",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in web/init_mysource.php in MySource CMS 2.16.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en web/init_mysource.php de MySource CMS 2.16.2 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro INCLUDE_PATH."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mysource_cms:mysource_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16.2",
            "matchCriteriaId" : "8AD558C7-925A-4EB4-9970-B8327E40C428"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.securityfocus.com/bid/20817",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4273",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29865",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2674",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en bb_func_txt.php de miniBB 2.0.2 y versiones anteriores cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pathToFiles."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minibb:minibb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "E32BBDA3-8DA0-4A47-A92E-E5B339ED0526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22596",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.minibb.net/forums/9_4274_0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29971",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20757",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4222",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29831",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2655",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.minibb.net/forums/9_4274_0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled.\r\nThis vulnerability is addressed in the following product update:\r\nMiniBB, MiniBB, 2.0.2a"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5674",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to (1) bb_func_forums.php, (2) bb_functions.php, or (3) the RSS plugin."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples de inclusión remota de archivo en PHP miniBB 2.0.2 y versiones anteriores, cuando register_globals está habilitado, permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pathToFiles en (1) bb_func_forums.php, (2) bb_functions.php, ó (3) el plugin RSS.\r\n\r\n\r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minibb:minibb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "E32BBDA3-8DA0-4A47-A92E-E5B339ED0526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://osvdb.org/33963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/33964",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/33965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.minibb.net/forums/9_4274_0.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/33963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/33964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/33965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.minibb.net/forums/9_4274_0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T02:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have unknown impact and attack vectors, related to \"MySQL Scripts need changes for security,\" possibly SQL injection vulnerabilities associated with these scripts."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades múltiples sin especificar en Pentaho Business Intelligence (BI) Suite versiones anteriores a 1.2 RC3 (1.2.0.470-RC3) tienen un impacto desconocido y vectores de ataque, referidos a \"scripts MySQL necesitan cambios por seguridad\", posibles vulnerabilidades de inyección de SQL asociados a estos scripts."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pentaho:business_intelligence_suite:1.2_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114B36F3-6A9D-4126-B81B-62CFB6E7A171"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=140317&release_id=456313",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20806",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4252",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39999",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=140317&release_id=456313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/39999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nPentaho, Business Intelligence Suite, 1.2 RC3 (1.2.0.470-RC3)"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T02:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to execute arbitrary SQL commands via the champ parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en consult/classement.php de Uni-Vert PhpLeague 0.82 y anteriores permite a atacantes remotos ejecutar código SQL de su elección mediante el parámetro champ"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uni-vert:phpleague:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.82",
            "matchCriteriaId" : "4EBF2705-52A5-4D6B-8475-8E5019AB6D54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/21789",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4225",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2661",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/21789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T11:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "resmom/start_exec.c in pbs_mom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary files via a symlink attack on (1) a job output file in /usr/spool/PBS/spool and possibly (2) a job file in /usr/spool/PBS/mom_priv/jobs."
      }, {
        "lang" : "es",
        "value" : "resmom/start_exec.c en pbs_mom en TORQUE Resource Manager 2.0.0p8 y anteriores permite a usuarios locales crear archivos de su elección mediante un ataque de enlace simbólico en (1) un archivo de salida de trabajo en /usr/spool/PBS/spool y posiblemente (2) un archivo de trabajo en /urs/spool/PBS/mom_priv/jobs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cluster_resources:torque_resource_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0p8",
            "matchCriteriaId" : "56879995-606E-4402-845E-289B04E123AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://csirt.fe.up.pt/docs/TORQUE-audit.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-14.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449248/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20632",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4651",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://csirt.fe.up.pt/docs/TORQUE-audit.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-14.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449248/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T11:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_modules_dir parameter.  NOTE: CVE disputes this vulnerability, because the inclusion occurs in a function that is not called during a direct request to library.inc.php"
      }, {
        "lang" : "es",
        "value" : "** IMPUGNADA ** Vulnerabilidad de inclusión remota de archivo en PHP en common/visiteurs/include/library.inc.php en J-Pierre DEZELUS Les Visiteurs 2.0.1, usado en phpMyConferences (phpMyConference) 8.0.2 y posiblemente otros productos, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro lvc_modules_dir. NOTA: CVE impugna esta vulnerabilidad, porque la inclusión se produce en una función que no se llama durante una petición directa a library.inc.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:j-pierre_dezelus:les_visiteurs:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82F4D96-87BF-44C7-824D-27DAF2744704"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyconferences:phpmyconferences:8.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD09F3E-148E-4AC8-94B5-5AF3DDA182D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1810",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001105.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450140/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450467/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2006-November/001105.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450140/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450467/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmem_alloc function. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de enteros en la función ffs_mountfs en FreeBSD 6.1 permite a un usuario local provocar denegación de servicio (panico) y posiblemente ejecutar código a través de un sitema de ficheros UFS manipulado que provoca parámetros inválidos o de gran tamaño para proveer la función kmem_alloc. NOTA: Una tercera parte indica que este asunto no pasa los limites de privilegio en FreeBSD ya que solo el root podría montar un sistema de archivos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4416CBA-76B9-4051-B015-F1BE89517309"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-03-11-2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22736",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/552136",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securitytracker.com/id?1017751",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=305214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-03-11-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/24479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/552136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securitytracker.com/id?1017751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/0930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-03T23:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows local users to cause a denial of service by mounting a crafted squashfs filesystem."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad doble-libre en módulo squashfs en el kernel de Linux 2.6.x, tal y como se usa en Fedora Core 5 y posiblemente otras distribuciones, permite a un usuario local provocar denegación de servicio a través del montado manipualado del sistema de ficheros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF02479-2124-4655-A38D-A4793D3B8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:fedora_core:core_5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3B94B6-A5E4-4432-802E-BFAD7F3B5B4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.info-pull.com/mokb/MOKB-02-11-2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24259",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:047",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20870",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29967",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-02-11-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-395-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Not Vulnerable.  The squashfs module is not distributed as part of Red Hat Enterprise Linux 2.1, 3, or 4.  Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-4521",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service (invalid memory access) via a crafted login request."
      }, {
        "lang" : "es",
        "value" : "La función BerDecodeLoginDataRequest en el módulo libnmasldap.so NMAS en Novell eDirectory 8.8 y 8.8.1 anterior al parche Security Services 2.0.3 no incrementa de forma adecuada el puntero cuando al manejar cierta entrada, lo cual permite a un atacante remoto provocar denegación de servicio (acceso a memoria inválido) a través de una respuesta de login manipulada"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7548D05-AD2B-46C3-9036-366585FFCB48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13882AD-D700-4B95-9BB2-B3E0D104B227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22660",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017140",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20842",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4293",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29963",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5465",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-11-04T00:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en PHP anterior a 5.2.0 permite a un atacante remoto ejecutar código de su elección mediante entradas UTF-8 manipuladas a las funciones (1) htmlentities o (2) htmlspecialchars."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.6",
            "matchCriteriaId" : "1C85C56B-D27F-433F-A268-34463619B183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-761",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0736.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22653",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22685",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22688",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22693",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22713",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22753",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22759",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22779",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22881",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23139",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/23247",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/24606",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/25047",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200703-21.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017152",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017296",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-245.htm",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_response09186a008082c4fe.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-air-20070425-http.shtml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1206",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.hardened-php.net/advisory_132006.138.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:196",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_67_php.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.028.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.php.net/releases/5_2_0.php",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0730.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0731.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450431/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451098/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453024/100/0/threaded",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20879",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0061/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-375-1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4317",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4749",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1546",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29971",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10240",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://issues.rpath.com/browse/RPL-761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2006-0736.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200703-21.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-245.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/en/US/products/products_security_response09186a008082c4fe.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.cisco.com/warp/public/707/cisco-air-20070425-http.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2006/dsa-1206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_132006.138.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_67_php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.php.net/releases/5_2_0.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0730.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.redhat.com/support/errata/RHSA-2006-0731.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450431/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451098/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/453024/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.trustix.org/errata/2006/0061/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-375-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1) tiki-listpages.php, (2) tiki-lastchanges.php, (3) messu-archive.php, (4) messu-mailbox.php, (5) messu-sent.php, (6) tiki-directory_add_site.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-forums.php, (10) tiki-view_forum.php, (11) tiki-friends.php, (12) tiki-list_blogs.php, (13) tiki-list_faqs.php, (14) tiki-list_trackers.php, (15) tiki-list_users.php, (16) tiki-my_tiki.php, (17) tiki-notepad_list.php, (18) tiki-orphan_pages.php, (19) tiki-shoutbox.php, (20) tiki-usermenu.php, and (21) tiki-webmail_contacts.php, which reveal the information in certain database error messages."
      }, {
        "lang" : "es",
        "value" : "Tikiwiki 1.9.5 permite a un atacante remoto obtener información sensible (nombre de usuario de MySQL y contraseña) a través de un parámetro  vacío sort_mode en (1) tiki-listpages.php, (2) tiki-lastchanges.php, (3) messu-archive.php, (4) messu-mailbox.php, (5) messu-sent.php, (6) tiki-directory_add_site.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-forums.php, (10) tiki-view_forum.php, (11) tiki-friends.php, (12) tiki-list_blogs.php, (13) tiki-list_faqs.php, (14) tiki-list_trackers.php, (15) tiki-list_users.php, (16) tiki-my_tiki.php, (17) tiki-notepad_list.php, (18) tiki-orphan_pages.php, (19) tiki-shoutbox.php, (20) tiki-usermenu.php, y (21) tiki-webmail_contacts.php,lo cual revela la información en ciertos mensajes de error de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F437662-CD55-477B-9FEE-0CC4E6CB908D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450268/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20858",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in tiki-featured_link.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades filtering, as demonstrated by a parameter value containing malformed, nested SCRIPT elements."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en tiki-featured_link.php en Tikiwiki 1.9.5 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de un parámetro url que eluden el filtro, como se demostró por el valor del parámetro que contiene información mal formada, elementos de secuencias de comandos anidadas"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F437662-CD55-477B-9FEE-0CC4E6CB908D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22678",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23039",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-11.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450268/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20858",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4316",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29958",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-11.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450268/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate access permissions to OSS directories when no optional ACL entry exists, which allows local users to read arbitrary files."
      }, {
        "lang" : "es",
        "value" : "HP NonStop Server G06.29, cuando ejecuta tandard Security T6533G06 anterior a T6533G06^ABK, no evalua apropiadamente permisos de acceso a los directorio OSS cuando una entrada ACL no opcional existe, lo cual permiet a un usuario local leer archivos de su elección."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:hp:nonstop_server:g06.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A2C1609-CA8B-4C2F-8CAD-AD7A59A5FF1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017135",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/r-027.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4301",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00795238",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29951",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ciac.org/ciac/bulletins/r-027.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00795238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de directorio transversal en plugins/wp-db-backup.php en WordPress anterior a 2.0.5 permite a un atacante remoto leer ficheros de su elección a través de secuencias de directorio transversal en parámetros no especificados relacionados con el backup de fragmentos de ficheros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.4",
            "matchCriteriaId" : "00E05023-50E1-42C1-A2EC-A53E88058778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F05A1F-2227-4166-807B-1BDE2EA8F245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=153303",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://markjaquith.wordpress.com/2006/10/17/changes-in-wordpress-205/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22683",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22942",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://trac.wordpress.org/changeset/4226",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://wordpress.org/development/2006/10/205-ronan/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-10.xml",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.027-wordpress.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20869",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4307",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://bugs.gentoo.org/show_bug.cgi?id=153303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://markjaquith.wordpress.com/2006/10/17/changes-in-wordpress-205/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://trac.wordpress.org/changeset/4226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://wordpress.org/development/2006/10/205-ronan/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.gentoo.org/security/en/glsa/glsa-200611-10.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.027-wordpress.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions.  NOTE: the tempnam vector might overlap CVE-2006-1494."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades no especificada en PHP, probablemente anterior a 5.2.0, permite a un usuario local evitar las restricciones open_basedir y llevar a cabo acciones no específicas a través de vectores no especificados que afectan a (1)chdir y (2)funciones tempnam. NOTA: el vector tempnam podría solaparse con CVE-2006-1494."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.6",
            "matchCriteriaId" : "1C85C56B-D27F-433F-A268-34463619B183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "E3797AB5-9E49-4251-A212-B6E5D9996764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7007E77F-60EF-44D8-9676-15B59DF1325F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E7AE59-1CB0-4300-BBE0-109F909789EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9222821E-370F-4616-B787-CC22C2F4E7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9809449F-9A76-4318-B233-B4C2950A6EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA68843-158E-463E-B68A-1ACF041C4E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9592B32E-55CD-42D0-901E-8319823BC820"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.php.net/releases/5_2_0.php",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-375-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.php.net/releases/5_2_0.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-375-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "We do not consider these to be security issues.  For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php\n",
        "lastModified" : "2006-11-10T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de SQL en index.php de PHPEasyData Pro 1.4.1 y 2.2.1 permite a atacantes remotos ejecutar sentencias SQL de su elección mediante el parámetro cat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpeasydata_pro:phpeasydata_pro:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC21FA9-0640-4114-9537-0B9A2EEF323D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpeasydata_pro:phpeasydata_pro:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15548978-4F31-4038-AB6C-E1B151B27B5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22616",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1814",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017137",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450052/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450054/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20790",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4263",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29866",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450052/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450054/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via unspecified vectors resulting in memory leaks."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabildiades no especificas en MDaemon y WorldClient en Alt-N Technologies MDaemon anteriores a 9.50 permite a un atacante remoto provocar denegación de servicio (cosumo de memoria) a través de vectores no especificados resultado de filtros de memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.50",
            "matchCriteriaId" : "050AC344-C537-473A-B1C7-286C4DFCC34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63BE92A3-5320-4E68-89F7-BF977E602FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:2.8.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6727183-BD1B-4816-A0B0-3CA24B1F41D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:2.71_sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7503CBFE-B6F8-457E-BA78-16414EE14789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E791DD-1376-4E77-9D7B-C66E88146248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759C3190-DABF-4C54-8D26-A5285883BFA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF752E6A-0AB8-4B82-A895-9AF79B0783FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFA585E-4355-4497-8936-FD63E334B917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.1_beta:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6906B4D1-9336-4E52-A1D4-1402F5EF2BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A1816E-0E48-4879-86A4-22E7FCCAC598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B02DB57-1B98-43AF-B400-73019A747C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E724258-DCD1-4F09-AD2F-3880F86FA649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "0906EDEB-A59F-4DDD-8763-AFA9EC78F9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.4:*:standard:*:*:*:*:*",
            "matchCriteriaId" : "2CFEEA75-350C-47D6-A2D4-8714D1D4907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:3.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772A222C-606C-42B5-A523-9584FFB9E0BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B8B55A-93D3-4456-8B84-DA437F7E18FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "EAD8D901-F60B-400B-A51E-0881D0077FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E419B0EF-DB52-43D7-906C-744CEF5D8E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB3DE93-03F4-4543-AF4D-A76C0AA86D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505D587A-DD1A-4C31-9C8E-D407CECF3545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E131AB50-9C43-4AF9-8637-618172FC1769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596930EE-960D-4307-B726-73DEBE5ABF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A221378-1198-4FBA-9857-05BA2E5E4B78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:5.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A537AF6-0E86-41BD-AA41-B1598DCA01D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5162F06-31BD-4B04-8F60-A4ACBB7E16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCADFC8-99A1-4F7E-96E6-FD6F3F35EA28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECE0B12-1F51-49A9-9C66-B7DC94ACE0F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9125B2D-3EED-4014-8622-E9EBC5B2C99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECA9FB24-DF9E-4A58-9F4B-B1613ADFCC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAC727D-046D-4021-BAE8-6CAD7890FEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B10DB1-1E18-4B58-B1E4-6A09871100CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63A828E9-31AF-4199-9642-583830A1F180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.7.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F58E3A-8C0C-43C4-BAF3-05DD4DDC81C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437D2888-340C-48AB-815E-C04E5DE44CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46604A07-FBB0-4111-8B1C-2D01086BBB71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD17AD0-27FE-49F5-A23D-2DE672D87C17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4141E02E-C2DA-42C0-ABAB-62AFE4F869AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AA5447-4879-41A7-8F92-CAB0C3CD5E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:6.8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A9121D0-504E-444B-94C3-0E5C240376C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA25D7ED-BA8E-45E0-9399-B85499EF74D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB0B5F8-F010-4B70-947B-EA28EA38E237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F04FD52-7EA8-430E-86C7-5D3733A449AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:8.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFC20A7-14DF-4E00-873B-6F97A10EEA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9AF729-E2FA-4703-86AB-AD7416BD6EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72594AA0-3CB8-4F87-B709-F81E18D2ECBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D5F6E0-2047-4531-8C01-D79D3AE69170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CEAB790-561D-4815-99E0-78B62294B54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:9.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20CB70E2-1E3A-4FC1-BD26-E22EAC68D874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://files.altn.com/MDaemon/Release/RelNotes_en.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://files.altn.com/MDaemon/Release/RelNotes_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nAlt-N Technologies, MDaemon, 9.50"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a \"JavaScript exploit.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en WorldClient de Alt-N Technologies MDaemon versiones anteriores a 9.50 tiene un impacto desconocido y vectores de ataque referidos a \"JavaScript exploit.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alt-n:mdaemon:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E380CE-3453-46AF-BDEE-3AB04997E5A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://files.altn.com/MDaemon/Release/RelNotes_en.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22507",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4251",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://files.altn.com/MDaemon/Release/RelNotes_en.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "El controlador Aeropuerto para cierto Orinoco basados en tarjetas de aeropuerto en Darwin kernel 8.8.0 en Apple Mac OS X 10.4.8, y posiblemente otras versiones, permite a un atacante remoto ejecutar código de su elección a través de una vetana de respuesta de prueba  802.11 sin ningún campo elemento de validación de información (IE) después de la cabecera, lo cual dispara un desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED46A8-1739-411C-8807-2A416BDB6DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opendarwin:darwin_kernel:8.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBD15F1-109A-4E30-AFF0-668418E3FC1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-01-11-2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22679",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/191336",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/30180",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20862",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4313",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29965",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://docs.info.apple.com/article.html?artnum=304829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-01-11-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/191336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.osvdb.org/30180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Failed exploit attempts will likely result in denial-of-service conditions."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI."
      }, {
        "lang" : "es",
        "value" : "Router ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+  permite a un atacante remoto leer ficheros de su elección a través de unas ciertas respuestas HTTP, como se demostró por una respuesta para un fichero de configuración de router, realcionado con la URI /html/defs."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:eci_telecom:b-focus_wireless_802.11bg_adsl2\\+_router:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0398717F-CAFD-4795-A8D7-2309B7517AC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050459.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1817",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017145",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450187/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20834",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4331",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29931",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050459.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securityreason.com/securityalert/1817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450187/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20834",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated using the width style for an IMG element."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) permite a un atacante remoto inyectar secuencias de comandos web a través de la función expresión CSS, como se demostró con el uso del estilo witdht para un elemento IMG."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirapoint:mirapoint_webmail:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F356C092-B4CE-4702-937D-43DEA6C0CDE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://marc.info/?l=full-disclosure&m=116232831525086&w=2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://osvdb.org/33820",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017146",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20840",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29928",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://marc.info/?l=full-disclosure&m=116232831525086&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://osvdb.org/33820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) author, (2) content, or (3) title parameters when posting a forum thread.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Easy File Sharing (EFS) Web Server 4.0 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de los parámetros (1) author, (2) content, o (3) title cuando se fija un hilo del forum. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efs_software:efs_web_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665382DE-79C3-4B8C-8D36-38FF97BDBF11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20823",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29923",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending \"::$DATA\" to the end of a HTTP GET request, which accesses the alternate data stream."
      }, {
        "lang" : "es",
        "value" : "Easy File Sharing (EFS) Web Server 4.0, cuando funciona sobre un sistema de ficheros NTFS, permite a un atacante remoto leer ficheros de su elección bajo el root del web a través de añadiendo \"::$DATA\" al final de una respuesta HTTP GET, lo cual alterna la secuencia de datos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efs_software:efs_web_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665382DE-79C3-4B8C-8D36-38FF97BDBF11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22602",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20823",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29925",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2690",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending \"::$DATA\" to the end of an HTTP GET request, which accesses the alternate data stream."
      }, {
        "lang" : "es",
        "value" : "Easy File Sharing (EFS) Easy Address Book 1.2, cuando funciona sobre un sistema de ficheros NTFS, permite a un atacante remoto leer ficheros de su elección bajo root del web añadiendo \"::$DATA\" al final de una respuesta HTTP GET, lo cual permite acceder a datos alternos."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:efs_software:easy_address_book:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C4C5A0-3C46-4264-9A69-1C4B89A206FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22681",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20861",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4312",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29976",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2699",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in aff_news.php in FreeNews 2.1 allows remote attackers to include local files via a .. (dot dot) sequence in the chemin parameter, when the aff_news parameter is not set to \"1.\""
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de directorio en aff_news.php en FreeNews 2.1 permite a un atacante remoto incluir ficheros locales a través de una secuencia ..(punto punto)en el parámetro chemin, cuando el parámetro aff_news no está en el grupo de \"1.\""
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freenews:freenews:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7500D4B2-EFDB-4E34-B53A-338B3AD226DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1822",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450012/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450081/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450157/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20795",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450012/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450081/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450157/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) basedemo.php and (2) calenderdemo.php in samples/, and other unspecified files."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Zend Google Data Client Library (ZendGData) Preview 0.2.0 permite a un atacante remoto inyectar secuencias de comandos web o HMTL a través de parámetro no especificados en (1)basedemo.php y (2) calenderdemo.php en samples/, y otros ficheros no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zend:zend_google_data_client_library_preview:0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF531DD2-320E-47A1-9340-9BE4849F7E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1815",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0008",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450245/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20851",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450245/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows remote attackers to inject arbitrary web script or HTML via UTF-7 or US-ASCII encoded characters, which are injected into an error message, as demonstrated by a request with a utf7 charset parameter accompanied by UTF-7 data."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de secuencias de comandos (XSS) en error.php en phpMyAdmin 2.6.4 hasta la 2.9.0.2 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de codificaciones de caracteres UTF-7 or US-ASCII, lo cual son inyectados dentro de un mensaje de error, como se demostró por una respuesta con un el parámetro utf7 acompañado por datos UTF-7."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AAD482-064D-4CFB-A1AE-49095036485A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3C5C9D-A802-40F3-B3CE-593CFED745CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FE9713-54BE-4A70-82F8-03B8E1915E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0611660F-F060-453C-8BE2-1599FE3FF9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "892F5D72-1814-48A5-8CCA-A74EE9D633CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.7_pl1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3CE1C3-59FF-457F-8579-996CA60CF6AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF6246-C393-41BE-BABC-840585795D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ACC829-CF64-4F20-8827-AA95002A6F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4C98E-D127-40EB-BE71-A6BB91D4392C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C26B2DE-669F-4F79-99AE-3210662AAB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B64201-5B5B-4D22-B341-C601DC54BFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6354257-6B1A-4729-9EE2-19D3CD2AD62B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8AF5A1A-328E-43A1-8C41-0DAB1F337FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:2.9_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3130CFD-FF94-48D2-BF9A-D7FDD3CD6A97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22599",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23086",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.hardened-php.net/advisory_122006.137.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450397/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20856",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4298",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29957",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.hardened-php.net/advisory_122006.137.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450397/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in libs/sessions.lib.php in BytesFall Explorer (bfExplorer) 0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, a different issue than CVE-2006-5606."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en libs/sessions.lib.php en BytesFall Explorer (bfExplorer) 0.0.6 permite a un atacante remoto ejecutar comandos SQL de su elección a través de parámetros no especificados, asunto diferente al CVE-2006-5606."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytesfall_explorer:bytesfall_explorer:0.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA18F03A-3CFF-4DC3-8389-36BEBB8E5C0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450152/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20828",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29932",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450152/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en modules/journal/search.php en el módulo Journal en Francisco Burzi PHP-Nuke 7.9 y anteriores, permite a un atacante remoto ejecutar comandos SQL de su elección a través de un parámetro forwhat."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9",
            "matchCriteriaId" : "41D78B64-55E8-4D61-8D22-D565CD20B19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE03D77-9AA8-4DC6-936D-0459BD26B64B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA80B501-6EC3-4C8E-A83D-F08FC659CF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87591D05-AC0B-4047-AE5B-69EBEF63ED5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5037564-574E-4321-9CD1-4230FB331503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE2D63C-75BC-4936-88BE-9F22D193EF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9605907F-B252-4A80-8494-F2970E618902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1BC17-2A99-495A-B462-D02B66F00D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9A4F5F-31CB-4097-85E9-B08B2530E9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22617",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1812",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=29",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450183/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20829",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4295",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29940",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.neosecurityteam.net/index.php?action=advisories&id=29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450183/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \\Device\\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of service (system crash) via an invalid argument to the DeviceIoControl function that triggers an invalid memory operation."
      }, {
        "lang" : "es",
        "value" : "El dispositivo \\Device\\SandBox en Outpost Firewall PRO 4.0 (964.582.059) permite a un usuario local provocar denegación de servicio (caida del sistema) a través de un argumento inválido a la función DeviceIoControl que dispara una operación inválida de memoria."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agnitum:outpost_firewall:4.0:*:pro:*:*:*:*:*",
            "matchCriteriaId" : "672B053D-A9A6-441F-B04A-E654C1445A16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22673",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1821",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Outpost-Insufficient-validation-of-SandBox-driver-input-buffer.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450293/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4309",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29969",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.matousec.com/info/advisories/Outpost-Insufficient-validation-of-SandBox-driver-input-buffer.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450293/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to (1) themesettings.php or (2) index.php, a different vector than CVE-2006-5497.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades PHP de inclusión remota de archivo en Segue CMS 1.5.9 y anteriores, cuando magic_quotes_gpc está habilitado, permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro theme a (1) themesettings.php o (2) index.php, un vector diferente que CVE-2006-5497. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:middlebury_college:segue_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.9",
            "matchCriteriaId" : "16750156-73B4-45E3-8C9E-9362E001F39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:middlebury_college:segue_cms:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4561594-5A49-4E0D-A039-2F05DEB6B0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:middlebury_college:segue_cms:1.5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD21C6F-1579-4C4C-943B-3AB18D21DA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:middlebury_college:segue_cms:1.5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38450C41-8384-4706-A4B5-0651479189B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22582",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4215",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"magic_quotes_gpc\" is disabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to execute arbitrary SQL commands via a malformed hostname in a URL."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en DataparkSearch Engine 4.42 y anteriores permite a un atacante remoto ejecutar comandos SQL a través de un nombre de host mal formado en una URL."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30F5C69-448C-4A63-A4B7-81C6841C10EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98A5367-50C9-4A8B-960A-28F436BEABAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAD3061-01D5-41CD-B679-86F87C742961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32B8434F-7960-4F39-9F87-550AD21F8EFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0863184-6BBB-4C14-A669-964785565923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E045B79-1625-474C-8D68-0A9448EDBB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81181C64-4DF1-4229-9A76-D5CDACA260CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8D4F44-AEE0-4378-BC6E-111D15C3417F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF067E3D-0082-48A0-9898-656E2D11CB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B658A8E2-EA46-4A08-936F-EE169F2E34B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE93BFBF-EFFC-4E74-BD54-C597A82C222C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38521F36-D3A6-4EEF-9F6E-7F28D4BDDF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E71247-4DDA-4ADB-B3E1-44C0623A9444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43416CEC-E835-4822-90B8-B86012B6AB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1B579C-8725-41A7-8898-0610DF06BF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A573E50-BB2A-4725-AB9B-B7767D885AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BA039F-F719-4782-ADA7-8401F83A371C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8841C8-9731-4C48-AF06-0A037CBF826A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70498162-CC10-4A21-B33E-392872149914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0391691-FA02-44EB-BC46-E457FE63B405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A0B7558-E96F-4EE4-BD65-78A4149FB588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30E805AA-212A-464C-B7AA-FCB8B62042D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataparksearch:dataparksearch:4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34BD3CCF-0C01-426D-8E9A-834543DF1D36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dataparksearch.org/ChangeLog",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20872",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4311",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29979",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.dataparksearch.org/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow the \"Answering Service\" function in ICQ 2003b Build 3916 allows local users to cause a denial of service (application crash) via a long string in the \"AwayMsg Presets\" value in the ICQ\\ICQPro\\DefaultPrefs\\Presets registry key."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en la función \"Answering Service\" en ICQ 2003b construcción 3916 permite a un usuario local provocar denegación de servicio (caida de aplicación) a través de una cadena larga en el valor \"AwayMsg Presets\" en la linea de registro: ICQ\\ICQPro\\DefaultPrefs\\Presets."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirabilis:icq:2003b_build3916:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EFA1057-A9EC-41BC-8E50-1732CEAAD118"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050461.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1818",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29933",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050461.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-04T01:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories."
      }, {
        "lang" : "es",
        "value" : "El servidor SSL en AEP Smartgate 4.3b permite a un atacante remoto determinar la existencia de directorios a través de una respuesta directa para un directorio URI, lo cual devuelve un estatus de código HTTP diferente para la existencia o no existencia de directorios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aep_networks:smartgate_ssl_server:4.3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EED6A56-742A-4CE1-981B-A636782B5A8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22550",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4224",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29802",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2637",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/2637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5466",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2006-11-06T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montón en la función shoqQueryPackage en librpm en RPM Package Manager 4.4.8, cuando la variable de entorno LANG tiene el valor ru_RU.UTF-8, podría permitir a atacantes con la intervención del usuario ejecutar código de su elección mediante paquetes RPM manipulados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:package_manager:4.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1CADBE5-0FAA-437F-AB62-B457935938D0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8517E55-4357-4AFD-B571-5533123CB014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:*",
            "matchCriteriaId" : "80FF1759-5F86-4046-ABA3-EB7B0038F656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22740",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22745",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22768",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://secunia.com/advisories/22854",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-08.xml",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://securitytracker.com/id?1017160",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:200",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.securityfocus.com/bid/20906",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-378-1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4350",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=212833",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://security.gentoo.org/glsa/glsa-200611-08.xml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2006:200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-378-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=212833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "evaluatorSolution" : "Successful exploitation may allow the execution of arbitrary code, but requires that certain locales are set (e.g. ru_RU.UTF-8).\r\nThere are patches available for each affected Ubuntu product.",
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213515\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service (memory corruption) by mounting crafted UFS filesystems with malformed data structures."
      }, {
        "lang" : "es",
        "value" : "alloccgblk en el sistema de ficheros UFS en Solaris 10 permite a usuarios locales provocar una denegación de servicio (corrupción de memoria) montando sistemas de ficheros UFS manipulados con estructuras mal formadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*",
            "matchCriteriaId" : "7BF232A9-9E0A-481E-918D-65FC82EF36D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.info-pull.com/mokb/MOKB-04-11-2006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22714",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4357",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-04-11-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://secunia.com/advisories/22714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arbitrary PHP code via the (1) _saz[settings][shippingfolder] and (2) _saz[settings][taxfolder] parameters."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en admin/controls/cart.php en sazcart 1.5 permite a atacantes remotos ejecutar código PHP de su elección mediante los parámetros (1) _saz[settings][shippingfolder] y (2) _saz[settings][taxfolder]."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sazcart:sazcart:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BC2CA8-18FC-4E8D-9361-928A4881BDE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-January/001232.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30194",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456542/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20922",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4343",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2718",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.attrition.org/pipermail/vim/2007-January/001232.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/456542/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T17:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags."
      }, {
        "lang" : "es",
        "value" : "XM Easy Personal FTP Server 5.2.1 y anteriores permiten a atacantes autenticados remotamente provocar una denegación de servicio mediante un argumento largo para el comando NLST, posiblemente relacionado con las banderas (flags) -al."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.1",
            "matchCriteriaId" : "092C4D9D-51B3-446E-8419-C8318C0E9A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59536D76-CD94-496D-B605-F64876FD1BBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45543F9A-A444-4732-96B3-696D5BA3CB12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22717",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4365",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30041",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2715",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows remote authenticated users to (1) reply to a message in an arbitrary forum, if authorized to create a message in any forum; and (2) perform certain unauthorized forum actions, related to an \"error in how the permissions were assembled\" that assigns extra permissions to users."
      }, {
        "lang" : "es",
        "value" : "Yazd Discussion Forum anterior a 3.0 beta no maneja adecuadamente los permisos del foro, lo que permite a usuarios autenticados remotamente (1) responder a un mensaje en un foro de su elección, si están autorizados a crear un mensaje en un foro cualquiera; y (2) realizar determinadas acciones no autorizadas en el foro, relacionadas con un \"error en cómo los permisos fueron ensamblados\" que asigna permisos extra a los usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yazd:yazd_discussion_forum:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EAF2FE-AC5C-44E7-96CF-4BC5F60A744A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yazd:yazd_discussion_forum:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87FC657A-C2A7-4E43-B5A3-741F93795B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yazd:yazd_discussion_forum:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589C134D-CCA6-4B69-B960-0FEA40CE60FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yazd:yazd_discussion_forum:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61596FEA-23F3-4D83-935C-6FF34E8043F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yazd:yazd_discussion_forum:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5072063D-04B3-4786-837C-17FC78C11023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yazd:yazd_discussion_forum:2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57FD34E-145F-498A-B2C9-2810B1EC4CE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22690",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=39239&release_id=460547",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20889",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29994",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29996",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?group_id=39239&release_id=460547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/20889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "This vulnerability is addressed in the following product release:\r\nYazd, Yazd Discussion Forum, 3.0 Beta"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.  NOTE: it is possible that this is a vulnerability in FCKeditor."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php en Modx CMS 0.9.2.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro base_path. NOTA: es posible que esta sea una vulnerabilidad en FCKeditor."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.2.1",
            "matchCriteriaId" : "E2675D05-AD09-4A1F-A5C9-584581E26FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02443C7-BCFC-44B8-B7F0-490B01DD4220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22675",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30186",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20898",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4346",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29989",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2706",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the siteconf[curl] parameter, as demonstrated by a POST to news/comment.php containing PHP code, which is stored under db/comments/news/ and included by classes/index.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de directorio en classes/index.php en Lithium CMS 4.04c y anetriores permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro siteconf[curl], com oha sido demostrado por un POST a news/comment.php conteniendo código PHP, el cual es almacenado en db/comments/news/ e incluído por classes/index.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lithium_cms:lithium_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.04c",
            "matchCriteriaId" : "D89FE46C-5A27-4626-B4FB-2E5E2488C3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20871",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4361",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29966",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2702",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in logout.php in T.G.S. CMS 0.1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the myauthorid cookie."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en logout.php en T.G.S. CMS 0.1.7 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante la cookie myauthorid."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgs_cms:tgs_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.7",
            "matchCriteriaId" : "A7263508-0675-483C-A258-09A034326E93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=464660&group_id=173946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20850",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4667",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29941",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2694",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourceforge.net/project/shownotes.php?release_id=464660&group_id=173946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de directorio en error.php en PostNuke 0.7.63 y anteriores permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en la cookie PNSVlang (PNSV lang), como ha sido demostrado inyectando secuencias PHP en el archivo de registro del Servidor HTTP Apache, que luego es incluido por error.php."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : true,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.763",
            "matchCriteriaId" : "9191B20D-0FA6-42D8-9051-EA7180A13C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postnuke_software_foundation:postnuke:0.762:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B4716F-F173-4026-87C2-A3A97DA0CB2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://community.postnuke.com/Article2787.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22983",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20897",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21218",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29992",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2707",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://community.postnuke.com/Article2787.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.securityfocus.com/bid/21218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentation/common/frame_toc.php and (b) documentation/common/search.php, the (2) req_lang parameter in documentation/common/search.php and (c) documentation/common/vitals.inc.php, the (3) row[dir_name] parameter in (d) include/classes/module/module.class.php, and the (4) lang_path parameter in (e) include/classes/phpmailer/class.phpmailer.php.  NOTE: the print.php vector is already covered by CVE-2005-3404."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en ATutor 1.5.3.2 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro (1) section en (a) documentation/common/frame_toc.php y (b) documentation/common/search.php, el parámetro (2) req_lang en documentation/common/search.php y (c) documentation/common/vitals.inc.php, el parámetro (3) row[dir_name] en (d) include/classes/module/module.class.php, y el parámetro (4) lang_path en (e) include/classes/phpmailer/class.phpmailer.php. NOTA: el vector print.php ya está cubierto por CVE-2005-3404."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBF6479-6AEA-43C8-B920-FBFDF01EADEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1823",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449233/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20634",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29693",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securityreason.com/securityalert/1823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449233/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the language parameter, related to register.php storing a language value in the users table."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalado de directorio en include/common.php en PunBB anterior a 1.2.14 permite a usuarios autenticados remotamente incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro language, relacionado con que register.php almacena un valor de idioma en la tabla de usuarios."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.13",
            "matchCriteriaId" : "56DC915E-4213-4B4E-9B9C-B952A3BF0EFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22622",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30132",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450055/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450055/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en search.php en PunBB anetrior a 1.2.14, cuando la instalación de PHP es vulnerable a CVE-2006-3017, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro array result_list, que no se inicializa."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.13",
            "matchCriteriaId" : "56DC915E-4213-4B4E-9B9C-B952A3BF0EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C26FE-F2D3-4C1A-8D14-E4B818834703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFD4225-32F9-4D62-87C5-9632A1C03326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75787B-6156-4710-9B24-48C5763E7771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A9473E-DE15-4BE2-839D-90B55F8713EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A94FF3-C732-4552-A32B-53C4739F7E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securityreason.com/securityalert/1824",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/30133",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450055/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4256",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://securityreason.com/securityalert/1824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://securitytracker.com/id?1017131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "http://www.osvdb.org/30133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450055/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ],
      "evaluatorSolution" : "Successful exploitation requires that \"register_globals\" is enabled.\r\nThis vulnerability is addressed in the following product release:\r\nPunBB, PunBB, 1.2.14"
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions."
      }, {
        "lang" : "es",
        "value" : "PunBB usa un valor cookie_seed predecible que puede ser derivado del tiempo de registro de la cuenta superadmin (tiempo de instalación), lo cual puede permitir a usuarios locales realizar acciones no autorizadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDCB2E5-91A9-48D8-8B98-19E770CEB1E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017131",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/30134",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450055/100/0/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/30134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/450055/100/0/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5738",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en  PunBB anetrior a 1.2.14 permiten a adminstradores autenticados remotamente ejecutar comandos SQL de su elección a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.13",
            "matchCriteriaId" : "56DC915E-4213-4B4E-9B9C-B952A3BF0EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C68B349F-F76D-49D2-95DA-C8670E32530A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB336F6C-E81A-43C2-A252-36A192D9CADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C26FE-F2D3-4C1A-8D14-E4B818834703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00082231-3168-4FCC-807B-8AD3DBBFCE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B77FF770-BEB4-4320-AA45-399A5CC6540A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97DA335-4815-4608-84D5-67F4E539D8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9481F02E-2523-4599-A39D-3ACE518CEC35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C976DD-47E4-48CA-AF99-93D0653D31F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7277A122-5963-4E7F-BA1A-62B19AF804EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBA41AF-C817-476A-8ED1-57808D0B678C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C353C194-328F-4C4C-9773-F06A0FA3978C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE58D68-FC34-4F70-849A-2E6CC919230D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713E747-5529-4A64-95B4-D9678D8E88B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DFD4225-32F9-4D62-87C5-9632A1C03326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75787B-6156-4710-9B24-48C5763E7771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A9473E-DE15-4BE2-839D-90B55F8713EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A94FF3-C732-4552-A32B-53C4739F7E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forums.punbb.org/viewtopic.php?id=13496",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://forums.punbb.org/viewtopic.php?id=13496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "evaluatorSolution" : "Successful exploitation requires that the attacker is an authenticated Administrator."
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5739",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHP remote file inclusion vulnerability in cpadmin/cpa_index.php in Leicestershire communityPortals 1.0_2005-10-18_12-31-18 allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter, a different vector than CVE-2006-5280."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión remota de archivo en PHP en cpadmin/cpa_index.php en Leicestershire communityPortals 1.0-2005-10-18_12-31-18 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cp_root_path, un vector distinto de CVE-2006-5280."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leicestershire:communityportals:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B94234-D76D-4B01-880C-D8874A8764E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://securitytracker.com/id?1017047",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29487",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://securitytracker.com/id?1017047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/29487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5741",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via (1) the 404 error page of the Smart Sensor Edge Sensor; (2) the user name for a failed logon, when displayed in the audit journals reviewing interface (/AirMagnetSensor/AMSensor.dll/XH) by the Smart Sensor Edge Sensor log viewer; and (3) an SSID of an AP, when displayed on an ACL page (/Amom/Amom.dll/BD) of the Enterprise Server Status Overview in the Enterprise Server Web interface."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en AirMagnet Enterprise 7.5 construccion 6307 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) la página de error 404 del sensor Smart Sensor Edge; (2) el nombre de usuario de un intento de validación fallido, cuando se muestra en la interfaz de revisión de los informes de monitorización. (/AirMagnetSensor/AMSensor.dll/XH) desde el visor de registros Smart Sensor Edge Sensor; y (3) un SSID de un AP, cuando se muestra en una página ACL (Amom/Amom.dll/BD) de Enterprise Server Status Overview en la interfaz Enterprise Server Web."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:airmagnet:enterprise:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087E3F9C-86C4-4BDA-8946-0593F76FB85D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29918",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29919",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29920",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449119/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451978/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449119/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451978/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "AirMagnet",
        "comment" : "\n- Affected AirMagnet Builds: AirMagnet Enterprise 7.5 build 6289 and earlier.\n\n- Vulnerability Description: Intruders can execute a script in the Internet Explorer browser using symbols/script in the SSID generated by a fake access point. In the AirMagnet Enterprise system, such a script can be executed from the Sensor webpage or the AirWISE page in the AirMagnet Enterprise Console. This attack will not cause any damage to the AirMagnet Enterprise Server and no data will be lost or stolen. The intruder could potentially impact the performance of the machine running the Enterprise Console software. This is a known vulnerability in Internet Explorer and only works if users have enabled DirectX to execute scripts inside of Internet Explorer. \n\n- AirMagnet Solution: Listing SSIDs within quotes (“ “) will fix the problem. Customers should also be encouraged to not allow DirectX scripts in IE.\n\n- Fix Availability: Patch currently available on MyAirMagnet. Customers should upgrade to the latest version available on MyAirMagnet. Customers running a version of AirMagnet older than 6.1 must upgrade to version 6.1 before upgrading to the current release. Customers can contact AirMagnet Support to obtain the 6.1 release. \n",
        "lastModified" : "2007-08-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5742",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AirMagnet Enterprise console and Remote Sensor console (Laptop) in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template value, aka \"Cross-Application Scripting (XAS)\"."
      }, {
        "lang" : "es",
        "value" : "La consola de AirMagnet Enterprise y la consola de Sensor Remoto (Laptop) en AirMagnet Enterprise  anterior 7.5 construcción 6307 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección desde un determinado objeto embebido de Internet Explorer en un valor de plantilla SSID, también conocido como \"ejecución de secuencias de comandos en aplicaciones cruzadas\" o XAS (Cross-Application Scripting)"
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:airmagnet:enterprise:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087E3F9C-86C4-4BDA-8946-0593F76FB85D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449119/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451978/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449119/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451978/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "AirMagnet",
        "comment" : "- Affected AirMagnet Builds: AirMagnet Enterprise 7.5 build 6289 and earlier.\n\n- Vulnerability Description: Intruders can execute a script in the Internet Explorer browser using symbols/script in the SSID generated by a fake access point. In the AirMagnet Enterprise system, such a script can be executed from the Sensor webpage or the AirWISE page in the AirMagnet Enterprise Console. This attack will not cause any damage to the AirMagnet Enterprise Server and no data will be lost or stolen. The intruder could potentially impact the performance of the machine running the Enterprise Console software. This is a known vulnerability in Internet Explorer and only works if users have enabled DirectX to execute scripts inside of Internet Explorer. \n\n- AirMagnet Solution: Listing SSIDs within quotes (“ “) will fix the problem. Customers should also be encouraged to not allow DirectX scripts in IE.\n\n- Fix Availability: Patch currently available on MyAirMagnet. Customers should upgrade to the latest version available on MyAirMagnet. Customers running a version of AirMagnet older than 6.1 must upgrade to version 6.1 before upgrading to the current release. Customers can contact AirMagnet Support to obtain the 6.1 release. \n",
        "lastModified" : "2007-08-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5743",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to inject arbitrary web script or HTML via (1) an Access Point with a crafted SSID, (2) the name of the sensor WIDS, (3) the name of the Highwall EndPoint workstation, or other unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la interfaz de administración Highwall Enterprise y Highwall Endpoint 4.0.2.11045 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) un Punto de Acceso con un SSID manipulado, (2) el nombre de sensor WIDS, (2) el nombre de la estación de trabajo de Highwall EndPoing, y otros vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilesecure:highwall_endpoint:4.0.2.11045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14F9EC8-D0B6-4C90-8043-9C718B337D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilesecure:highwall_enterprise:4.0.2.11045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63039C2-B4EB-4570-9DED-E4FABBFF5863"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/29916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449118/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449118/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de inyección SQL en  la interfaz de administración de  Highwall Enterprise y Highwall Endpoint 4.0.2.11045 permite a atacantes remotos ejecutar comandos SQL de su elección mediante un Punto de Acceso con un SSID manipulado, y a través de vectores no especificados relacionados con un operador de sistema malicioso."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : true,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilesecure_inc:highwall_endpoint:4.0.2.11045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC57F68-44FF-4B06-8075-1E5FB0A15F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobilesecure_inc:highwall_enterprise:4.0.2.11045:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E9E173-BF45-4F8E-9235-56A50DF4440E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.osvdb.org/29916",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449118/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20605",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449118/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685.  NOTE: some of these details are obtained from third party information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad no especificada en el método setRequestHeader en el control ActiveX XMLHTTP (XML HTTP) 4.0 en Microsoft (XML Core Services 4.0 en Windows, cuando es accedido por Internet Explorer, permite a atacantes remotos ejecutar código de su elección mediante argumentos manipulados que llevan a una corrupción de memoria, una vulnerabilidad distinta de CVE-2006-4685. NOTA: algunos de estos detalles se han obtenido de información de terceros."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C9B9BE3-6F83-469E-834F-3E00CFECD8E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blogs.securiteam.com/?p=717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22687",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017157",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.iss.net/threats/239.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/585137",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/927892.mspx",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20915",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "cve@mitre.org",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/239",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30004",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2743",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://blogs.securiteam.com/?p=717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.iss.net/threats/239.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.kb.cert.org/vuls/id/585137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.microsoft.com/technet/security/advisory/927892.mspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.us-cert.gov/cas/techalerts/TA06-318A.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://xforce.iss.net/xforce/alerts/id/239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/2743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T18:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the Enterprise Server certificate, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack, possibly related to the use of self-signed certificates."
      }, {
        "lang" : "es",
        "value" : "La consola en AirMagnet Enterprise anterior a 7.5 construccion 6307 no valida adecuadamente el certificado de Enterprise Server, lo cual permite a atacantes remotos leer tráfico de red mediante un ataque de hombre-en-medio (man-in-the-middle o MITM), posiblemente relacionado con el uso de certificados autofirmados."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:airmagnet:enterprise:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087E3F9C-86C4-4BDA-8946-0593F76FB85D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://secunia.com/advisories/22475",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.osvdb.org/29921",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449119/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451978/100/100/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20602",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.osvdb.org/29921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449119/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/449739/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/451978/100/100/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "AirMagnet",
        "comment" : "\n- Affected AirMagnet Builds: AirMagnet Enterprise 7.5 build 6295 and earlier\n\n- Vulnerability Description: AirMagnet uses a self signed certificate in the server response that can enable the intruder to attempt a man in the middle attack. The intruder needs to be connected physically to the corporate network and obtain the IP address of a console user before attempting such an attack. The attack can ultimately be used to obtain AirMagnet system user passwords. \n\n- AirMagnet Solution: AirMagnet will release a patch to ensure that the console validates the correctly assigned certificate from the server. Customers can limit the risk of this vulnerability by following standard network security practices to ensure that unauthorized personnel do not gain physical access to the protected network.\n\n- Fix Availability: Patch currently available on MyAirMagnet. Customers should upgrade to the latest version available on MyAirMagnet. Customers running a version of AirMagnet older than 6.1 must upgrade to version 6.1 before upgrading to the current release. Customers can contact AirMagnet Support to obtain the 6.1 release.\n\n",
        "lastModified" : "2007-08-17T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en la función __find_get_block_slow en el sistema de ficheros ISO9660 en Linux 2.6.18 y posiblemente otras versiones permite a usuarios locales provocar una denegación de servicio (bucle infinito) montando un sistema de fisheros ISO9660 manipulado que contiene estructuras de datos mal formadas."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-17"
        }, {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCA84E2-AC4A-430D-8A30-E660D2A232A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*",
            "matchCriteriaId" : "2255842B-34CD-4062-886C-37161A065703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0ED322D-004C-472E-A37F-89B78C55FE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*",
            "matchCriteriaId" : "412F7334-C46B-4F61-B38A-2CA56B498151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*",
            "matchCriteriaId" : "5967AF83-798D-4B1E-882A-5737FFC859C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*",
            "matchCriteriaId" : "A90D2123-D55B-4104-8D82-5B6365AA3B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*",
            "matchCriteriaId" : "DCCDFD49-D402-420E-92F5-20445A0FE139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A073700-E8A9-4F76-9265-2BE0D5AC9909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*",
            "matchCriteriaId" : "8877D178-1655-46E9-8F5A-2DD576601F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*",
            "matchCriteriaId" : "0D55059C-B867-4E0F-B29C-9CD2C86915A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*",
            "matchCriteriaId" : "8358E965-3689-4B05-8470-C4A1463FA0E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8220D81-9065-471F-9256-CFE7B9941555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5301E27-8021-467C-A9A2-AF2137EF0299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79787868-2D77-4B55-AD61-C2B357CCE047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0934C49-5F88-4189-BD88-2F32C39C2F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "14B0A230-4054-4483-A3A7-9A5A286C7552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F90242EF-048B-4539-AA41-87AA84875A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E9325-2A70-4E15-9AAF-5588BF218055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "01402A85-B681-4DE0-B7BB-F52567DA29E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC53528-A67F-42DF-B8DA-778A65893F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B130EB7-A951-4717-A906-E2F602F7B69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90502F-EC45-4ADC-9428-B94346DA660B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2422569B-02ED-4028-83D8-D778657596B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E4653-1A55-4827-888B-E0776E32ED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5738D628-0B2D-4F56-9427-2009BFCB6C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "169446DE-67F8-4738-91FE-ED8058118F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860F9225-8A3F-492C-B72B-5EFFB322802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E23724-2CA4-4211-BB83-38661BE7E6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9F976B-1328-40FE-A1F2-C1DF3F836604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "10E1B011-8D20-448E-9DD5-023DD30D1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "2A29A4BC-0442-458E-A874-BF0D0F2870FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298266AB-2A36-4606-BF80-2185FC56C4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2658CA-56C2-494F-AC42-618EC413CBDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD34526D-F2CC-44C5-991D-B1E41C327860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "24B879D6-4631-49A8-9366-75577DFB755D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25379B32-D898-4E44-A740-978A129B5E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B90F8F2-9549-413D-9676-3EF634D832B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585BEE46-088A-494E-8E18-03F33F6BBEA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF35478-B292-4A00-B985-CEEDE8B212C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7344B707-6145-48BA-8BC9-9B140A260BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "390B1E09-7014-4A74-834C-806BBEBAF6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB5CF04-B5B6-4DFB-B051-61EDA257019F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BFCEA98-C708-4E1E-B189-E6F96D28F07A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B753112-CCDE-4870-AA97-4AAA2946421A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B3AFE7-F4FF-4144-9046-E5926E305A03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7616E197-ACCA-4191-A513-FD48417C7F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E60197-56C3-485C-9609-B1C4A0E0FCB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1369C4A-EF3B-4805-9046-ADA38ED940C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E452E4-45A9-4469-BF69-F40B6598F0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "747F1324-AEFA-496F-9447-12CD13114F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FB31E5-190C-489A-AB30-910D2CC854F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C3CE0-E12D-4545-8460-5A1514271D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83700989-8820-48DA-A9FE-6A77DF1E8439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E86E13B-EC92-47F3-94A9-DB515313011D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA5E262-7825-496F-AA72-0AD6DE6F3C78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC47887B-5608-47BE-85EE-563864461915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "809264F1-763D-4A8F-B206-222332DD8732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A66ED53E-3139-4972-B027-D614BFFB8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3AB7A-1959-4A57-B83D-B2753C43649E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A60B265-5508-4EE0-980A-44BB0966FD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06F0037-DE20-4B4A-977F-BFCFAB026517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FDE1E-B02A-45A2-8877-0E52A5BD0963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://projects.info-pull.com/mokb/MOKB-05-11-2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22702",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22746",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23593",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/25714",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1304",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:002",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20920",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-416-1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4359",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30029",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10111",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-05-11-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://rhn.redhat.com/errata/RHSA-2007-0014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/22746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://secunia.com/advisories/23474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/23997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/24206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/25714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.debian.org/security/2007/dsa-1304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.novell.com/linux/security/advisories/2006_79_kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/471457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.ubuntu.com/usn/usn-416-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ],
      "vendorComments" : [ {
        "organization" : "Red Hat",
        "comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
        "lastModified" : "2007-03-14T00:00:00"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T20:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures."
      }, {
        "lang" : "es",
        "value" : "El Graphics Rendering Engine en Microsoft Windows 2000 hasta 2000 SP4 y Windows XP hasta SP2 mapea estructuras del núcleo GDI en una sección de memoria global compartida que está mapeada con permisos de sólo lectura, pero puede ser remapeada por otros procesos como lectura-escritura, lo cual permite a usuarios locales provocar una denegación de servicio (corrupción de memoria y caída) y ganar privilegios modificando las estructuras del núcleo."
      } ],
      "metrics" : {
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : true,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "74EE55A2-6020-4591-9F15-80E57D19207C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9B339C33-8896-4896-88FF-88E74FDBC543"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "matchCriteriaId" : "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://kernelwars.blogspot.com/2007/01/alive.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-06-11-2006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://secunia.com/advisories/22668",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017168",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466186/100/200/threaded",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.securityfocus.com/bid/20940",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1215",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30042",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2056",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://kernelwars.blogspot.com/2007/01/alive.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://projects.info-pull.com/mokb/MOKB-06-11-2006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://secunia.com/advisories/22668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://securitytracker.com/id?1017168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/archive/1/466186/100/200/threaded",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.securityfocus.com/bid/20940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2006/4358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.vupen.com/english/advisories/2007/1215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/30042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2006-5759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2006-11-06T22:07:00.000",
      "lastModified" : "2026-04-23T00:35:47.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty (1) rns[] or (2) pag[] arguments, which reveals the path in an error message."
      }, {
        "lang" : "es",
        "value" : "index.php en Rhadrix If-CMS, posiblemente 1.01 y 2.07, permite a atacantes remotos obtener la ruta completa del servidor secuencias de comandos web o HTML de su elección mediante argumentos (1)rns[] o (2) pag